JSON Web Tokens

提交 Issues 请提供

1. 版本: v2.4
2. 环境：本地/线上
3. 复现步骤：
4. 日志提供：
5. 可选：提供gif或者视频

对于没有提供详细的 Issues 将直接关闭。谢谢

Apache 部署GVA

部署版本

GVA 2.4.0

具体配置

VirtualHost 配置中加入:

    <Proxy /api>  
         Order deny,allow  
         Allow from all  
     </Proxy>  
     ProxyPass /api http://127.0.0.1:8888      
     ProxyPassReverse /api http://127.0.0.1:8888

此配置目的与 官方 nginx 提供配置类似。

注意

Apache 需要开启 proxy_module

http://127.0.0.1:8888 为后端默认地址，如已更改记得替换

Description 📓

NextAuth has the possibility to get the secret passed by its options. It would be great to have that for withAuth, too. Currently withAuth only accepts the secret via env vars. We don't store our secrets in env vars and now we have to patch process.env to get withAuth to run.

I'm happy to create a PR. Just wanted to know upfront if there is any reason why secret can

Hello, thank you for the tool!

It seems the get_unverified_header is missing types to use in a strict mypy configuration!

https://github.com/jpadilla/pyjwt/blob/master/jwt/api_jws.py#L202

If I am not mistaken, this might do it:

def get_unverified_header(self, jwt: str) -> Dict[str, Any]: