[jira] [Commented] (CXF-9033) getSignatureAlgorithm ignores alg value set within JWS header

[ https://issues.apache.org/jira/browse/CXF-9033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17871564#comment-17871564 ] Jan Bernhardt commented on CXF-9033: Hi [~coheigea], your linked article is convincing.

[jira] [Commented] (CXF-9033) getSignatureAlgorithm ignores alg value set within JWS header

[ https://issues.apache.org/jira/browse/CXF-9033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17871244#comment-17871244 ] Colm O hEigeartaigh commented on CXF-9033: -- [~jan4talend] See [https://nathantypa

[jira] [Commented] (CXF-9033) getSignatureAlgorithm ignores alg value set within JWS header

[ https://issues.apache.org/jira/browse/CXF-9033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17871039#comment-17871039 ] Jan Bernhardt commented on CXF-9033: Hi [~coheigea], of course allowing {{NONE}} algori

[jira] [Commented] (CXF-9033) getSignatureAlgorithm ignores alg value set within JWS header

[ https://issues.apache.org/jira/browse/CXF-9033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17867729#comment-17867729 ] Colm O hEigeartaigh commented on CXF-9033: -- [~jan4talend] It's by design, otherwis

[jira] [Commented] (CXF-9033) getSignatureAlgorithm ignores alg value set within JWS header

[ https://issues.apache.org/jira/browse/CXF-9033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17865568#comment-17865568 ] Markus Haugsdal commented on CXF-9033: -- [~jan4talend] we have had a similar case where