From aa7ec62c7a3b5a0ae0dc0cc79bd509eece44d5ff Mon Sep 17 00:00:00 2001 From: Maxime Alves LIRMM Date: Tue, 15 Jun 2021 11:16:23 +0200 Subject: [PATCH] [lib.jwtMw] verify signature even if halfapi is in DEBUG mode --- halfapi/lib/jwt_middleware.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/halfapi/lib/jwt_middleware.py b/halfapi/lib/jwt_middleware.py index 31cb7d5..3f24229 100644 --- a/halfapi/lib/jwt_middleware.py +++ b/halfapi/lib/jwt_middleware.py @@ -140,7 +140,7 @@ class JWTAuthenticationBackend(AuthenticationBackend): key=self.secret_key, algorithms=[self.algorithm], options={ - 'verify_signature': bool(PRODUCTION) + 'verify_signature': True }) if is_check_call: