Viewing profile — Arnout

Hah. They could still improve it by only accepting a single algorithm, rather than a list. edit: though there could be some internal use cases where you want a list, but it's a tra…

Various, been a while since I wrote code using them myself. Often JWT tokens come from sources other than our own and they will have passed through user agent or client land. Don't…

I've encountered issues like this in various systems using JWT at this point. The real problem is that developers blacklist the algorithms they don't want. Instead, the verificatio…

Pretty much the case every single time. It's how cycling infrastructure finally got taken seriously in the Netherlands too - https://www.youtube.com/watch?v=XuBdf9jYj7o

I last tried the bootcamp/vmware setup with a Vista partition; it really confused the activation system and kept de-activating.

Don't trust the data before you verified it is indeed the common problem here. You have to be careful with JWK in a similar way: the public key can be specified a as a URL via the …

Now annoyingly the ELB on AWS just bounces PATCH requests with a 405 Method Not Allowed. Our services are affected by this and I noticed there is a bug open over at Heroku regardin…