dunglas/mercure

Mercure send 401 error when JWT token contain a exp field

GRUXXKi opened this issue · 5 comments

I've opened an issue here symfony/mercure-bundle#56 on the Symfony Mercure bundle also.

It appears that when the JWT token contain field like "exp" in payload , it returns a 401 error.

As it could be an interesting value, maybe it should be accepted ?

mercure-bundle 0.3 and mercure server 0.11.3.

Possibly related to #404 ?

Not sure. Is'nt it fixed now the #404 ?

Sorry, missed your mercure version :) Not sure then, for us everything works on v0.10 with simple exp as integer.

This has indeed been fixed by #404.
By the way, we're in the process of migrating to golang-jwt/jwt instead of using our own fork (which is necessary just because of this issue). We're just waiting for golang-jwt/jwt#15 to be merged.

Feel free to reopen if you still have the issue with the last version.

Yes it seems alright now !