fix: add missing jwt exception

okkema · Nov 21, 2024 · 95c27f5 · 95c27f5
1 parent 0d1ca73
commit 95c27f5
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 5 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@okkema/worker",
-  "version": "3.6.0",
+  "version": "3.6.1",
   "description": "Cloudflare Workers Toolkit",
   "files": [
     "dist",

diff --git a/src/auth/jwt.ts b/src/auth/jwt.ts
@@ -33,6 +33,7 @@ export type ValidateOptions = {
   jwkUrl?: string
   skipAppendIssuer?: boolean
   skipPrependAudience?: boolean
+  ignoreHeaderType?: boolean
 }
 
 async function validateSignature(
@@ -118,13 +119,13 @@ function validatePayload(
   validateExpiration(exp)
 }
 
-function validateHeader(jwt: DecodedJsonWebToken) {
+function validateHeader(jwt: DecodedJsonWebToken, options?: ValidateOptions) {
   const {
     decoded: {
       header: { typ, alg, kid },
     },
   } = jwt
-  if (typ !== "JWT")
+  if (typ !== "JWT" && !options?.ignoreHeaderType)
     throw new Problem({
       title: "JWT Header Validation Error",
       detail: `Invalid JWT type: ${typ}`,