Repository Issue Activity (beta)

#353 Issued At RFC type mismatch causing false postives on verify_at

#606 ExpiredSignature should perhaps not be a subclass of DecodeError

#748 Token#detach_payload! keeps a cached attached JWT

#749 EncodedToken#encoded_payload= retains decoded and verified state

#566 verification of at_hash == access_token

#750 Constructing a JWK::Set from another set aliases its key array

#743 JWT::JWK::Set raises on an unknown `kty`, failing the whole set (RFC 7517 §5)

#723 Security review findings: hardening opportunities

#724 Could we get a 2.X fix for CVE-2026-44351

#428 Support compressed (deflate) payload

#309 Support for Unencoded Payload Option (RFC 7797)

#696 Concurrency issue when encoding/decoding across threads

#400 Resolving algorithms from JWK when not explicitly specified

#478 On Keys and Algorithms

#671 Undefined method `verify!` using the README example

#529 JWT::JWK::EC#public_key returns unexpected type

#562 Support x5t in place of kid

#208 Documentation for using a key finder with JWT.decode

#110 Suggest passing block to JWT.decode for claim verification

#677 how to pass a ES256K key to JWT.decode?

#668 Related issues about HMAC key length and RSA key length in JWS

#523 RSA JWK parsing

#455 RBS signatures

#632 The JWK oct import is not decoding the k value

#635 encode() raises an RSA lib error when using a small RSA PSS key