Added explicit algorithm to verifySignature

Vonage · Feb 2, 2024 · e8d4973 · e8d4973
1 parent 95ff7ce
commit e8d4973
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/packages/jwt/lib/verifySignature.ts b/packages/jwt/lib/verifySignature.ts
@@ -44,7 +44,9 @@ export const verifySignature = (
   }
 
   try {
-    verify(jwt, privateKey);
+    verify(jwt, privateKey, {
+      algorithms: ['HS256'],
+    });
     return true;
   } catch (error) {
     log('Error when verifying token', error);