Set allowed algorithms when decoding

jpadilla · jpadilla · commit 57c63a525ac5 · 2015-03-18T16:29:09.000-04:00
Note: This feature is new in PyJWT v1.0.0.
diff --git a/rest_framework_jwt/utils.py b/rest_framework_jwt/utils.py
@@ -54,7 +54,8 @@ def jwt_decode_handler(token):
         verify_expiration=api_settings.JWT_VERIFY_EXPIRATION,
         leeway=api_settings.JWT_LEEWAY,
         audience=api_settings.JWT_AUDIENCE,
-        issuer=api_settings.JWT_ISSUER
+        issuer=api_settings.JWT_ISSUER,
+        algorithms=[api_settings.JWT_ALGORITHM]
     )
 
 

Original file line number	Diff line number	Diff line change
`@@ -54,7 +54,8 @@ def jwt_decode_handler(token):`
`54`	`54`	`verify_expiration=api_settings.JWT_VERIFY_EXPIRATION,`
`55`	`55`	`leeway=api_settings.JWT_LEEWAY,`
`56`	`56`	`audience=api_settings.JWT_AUDIENCE,`
`57`		`- issuer=api_settings.JWT_ISSUER`
	`57`	`+ issuer=api_settings.JWT_ISSUER,`
	`58`	`+ algorithms=[api_settings.JWT_ALGORITHM]`
`58`	`59`	`)`
`59`	`60`
`60`	`61`