Block HS* algorithms when JWTVerifier is configured with JWKS#3419

Merged

jlowin merged 3 commits intomainfrom

codex/fix-supabase-hs256-authentication-bypass-vulnerability

Mar 7, 2026

Commits on Mar 6, 2026

Block HS* algorithms with JWKS in JWT verifier
jlowin
committed
Fix ruff format: remove extra blank line in test_supabase.py

authored and
Marvin Context Protocol
committed

Commits on Mar 7, 2026

Merge branch 'main' into codex/fix-supabase-hs256-authentication-bypass-vulnerability
jlowin
authored