[Bug] JsonWebTokenHandler accepts sub-2048-bit RSA signing keys (RFC 7518 §3.3 not enforced; parity with #1743 for HMAC)
#3498 · C# · ★ 1.2k · MIT · updated 7d ago
Which version of Microsoft.IdentityModel are you using? Microsoft.IdentityModel 8.18.0 (latest stable as of 2026-04-30). Behaviour also reproduces on 8.3.0. Where is the issue? M.IM.JsonWebTokens M.IM.KeyVaultExtensions M.IM.Logging M.IM.ManagedKeyVaultSecurityKey M.IM.Protocols…
4/8 outside PRs mergednobody circling
Cleared 2m ago