Skip to content
This repository was archived by the owner on Jun 11, 2026. It is now read-only.
This repository was archived by the owner on Jun 11, 2026. It is now read-only.

Potentially non-unique AuthenticatedIdentity under JWT Auth #42

Description

Describe the bug
Callers who elect to authenticate via JWT are identified by the JWT's issuerKey which may not be unique to any given caller, c.f.

return (<JwtAuthnIdentity>identity).jwt.keyIssuer;

Expected behavior
Authenticated identities to be unique per entity regardless of the auth mechanism

Additional context
Thanks to Amaury Chamayou (@achamayou) for pointing this out.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions