The purpose of this release is to confirm the alg parameter in a JWK matches the alg in a JWT's header before returning that JWK's public key for signature verification. For discussion, please see the related issue.
Thank you, @sermojohn for opening this issue!
Related issues:
Related pull requests: