ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-09 21:14:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(mcp): qualify the signature verification entry

Browse Source
This commit is contained in:
pedrooot committed 2026-10-07 17:45:53 +02:00
1 parent ec8d510888
commit 2f97402f43
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
mcp_server/changelog.d/mcp-jwt-signature-verification.security.md
+1 -1
View File
@@ -1 +1 @@
JWT signatures in HTTP transport mode are verified against the Prowler API RS256 public key, supplied through DJANGO_TOKEN_VERIFYING_KEY or a file path, refusing forged, alg none and HMAC-keyed tokens
JWT signatures in HTTP transport mode are verified against the Prowler API RS256 public key when DJANGO_TOKEN_VERIFYING_KEY or its file path is configured, refusing forged, alg none and HMAC-keyed tokens, and falling back to the previous expiration-only check when neither is set