Spring security does not accept "at+jwt"

JWT.io
,
1

Good day, I’m using spring-security-jwt release 1.1.1. When I try to decode an access token, it fails in the class below, as it expects “JWT”, but gets “at+jwt”. Does anyone know how I can get it to accept the “at+jwt” typ?

HeaderParameters(Map<String, String> map) {
        this.typ = "JWT";
        String alg = (String)map.get("alg");
        String typ = (String)map.get("typ");  //here my typ is "at+jwt"
        if (typ != null && !"JWT".equalsIgnoreCase(typ)) {
            throw new IllegalArgumentException("typ is not \"JWT\"");
        } else {
            map.remove("alg");
            map.remove("typ");
            this.map = map;
            if (alg == null) {
                throw new IllegalArgumentException("alg is required");
            } else {
                this.alg = alg;
            }
        }
    }
1 Like