hotfix/jwks-fix#56

Merged

mainick merged 11 commits intomainfrom

hotfix/jwks-fix

Jan 5, 2026

Commits on Jan 5, 2026

add test to validate JWKS endpoint URL requires HTTPS for non-localhost
mainick
committed
fix: remove redundant exception handling for token decoding errors
mainick
committed
fix: ensure HTTP client is configured before fetching JWKS
mainick
committed
fix: throw exception for empty byte string in ASN.1 encoding
mainick
committed
fix: validate JWT format to ensure proper decoding process
mainick
committed
fix: handle failure in decoding RSA encryption OID to prevent errors
mainick
committed
fix: add HTTP timeout options to prevent request delays
mainick
committed
fix: correct domain validation logic for wildcard subdomains
mainick
committed
fix: enforce server-side algorithm validation for JWT tokens
mainick
committed
fix: validate allowed JWKS domains and improve error handling
mainick
committed
fix: update JWKSTokenDecoder constructor to enforce parameter order and improve validation logic
mainick
committed