All issues

Search results

Constructing a JWK::Set from another set aliases its key array

Status: Open.

#750 In jwt/ruby-jwt;

· OskarEichler opened on Aug 29, 2026

EncodedToken#encoded_payload= retains decoded and verified state

Status: Open.

#749 In jwt/ruby-jwt;

· OskarEichler opened on Aug 29, 2026

Token#detach_payload! keeps a cached attached JWT

Status: Open.

#748 In jwt/ruby-jwt;

· OskarEichler opened on Aug 29, 2026

JWT::JWK::Set raises on an unknown kty, failing the whole set (RFC 7517 §5)

Status: Open.

#743 In jwt/ruby-jwt;

· RalphBragg opened on Jul 24, 2026

Security review findings: hardening opportunities

Status: Open.

#723 In jwt/ruby-jwt;

· anakinj opened on Mar 28, 2026

ExpiredSignature should perhaps not be a subclass of DecodeError

enhancement

Status: Open.

#606 In jwt/ruby-jwt;

· joelmichael opened on Jul 23, 2024

verification of at_hash == access_token

feature

Status: Open.

#566 In jwt/ruby-jwt;

· stoivo opened on Jul 12, 2023

Support compressed (deflate) payload

feature

Status: Open.

#428 In jwt/ruby-jwt;

· jtara opened on Jun 30, 2021

Issued At RFC type mismatch causing false postives on verify_at

bug

enhancement

Status: Open.

#353 In jwt/ruby-jwt;

· ghost opened on Apr 30, 2020

Introduce JWE support

enhancement

feature

help wanted

up for grabs

Status: Open.

#80 In jwt/ruby-jwt;

· soumyaray opened on May 28, 2015