Skip to content

Potential concurrent access panic in middleware.JWT #647

Closed
@dgrijalva

Description

@dgrijalva

Description

Reusing DefaultJWTConfig.Claims can result both unexpected behavior and a possible panic.

I'd recommend the following change:
middleware/jwt.go:98-101

    if config.Claims == nil {
        config.Claims = jwt.MapClaims{}
    }

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions