Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Is JWT claim name case-sensitive?

Simple question:

Is following payload:

{
    "aud": ["aud1", "aud2"]
}

equivalent to:?

{
    "AUD": ["aud1", "aud2"]
}
like image 708
Maciej Treder Avatar asked Mar 07 '23 13:03

Maciej Treder


1 Answers

According to the specification in RFC7519 claim names are case-sensitive:

Claim Name: The name requested (e.g., "iss"). ... This name is case sensitive. Names may not match other registered names in a case-insensitive manner unless the Designated Experts state that there is a compelling reason to allow an exception.

like image 70
jps Avatar answered Mar 15 '23 20:03

jps