Fix/jwt signature verification#986

Open

Benedict315 wants to merge 11 commits into

LabsCrypt:mainfrom

Benedict315:fix/jwt-signature-verification

Commits on Jul 2, 2026

Add test for update_fee_config NotInitialized path
jotel-dev
committed
Add proper label-input associations for form accessibility
jotel-dev
committed
Fix JWT signature verification to properly reject tampered signatures
jotel-dev
committed
Remove if check around timingSafeEqual - it returns undefined when equal
jotel-dev
committed
Check specifically for false return from timingSafeEqual
jotel-dev
committed
Fix timingSafeEqual logic - it returns undefined when equal, not true
jotel-dev
committed
Remove false check - timingSafeEqual throws on mismatch, returns undefined on match
jotel-dev
committed
Check specifically for false - timingSafeEqual returns undefined when equal
jotel-dev
committed
Check specifically for false return from timingSafeEqual
jotel-dev
committed
Update Node version to 22 in CI workflows to fix engine requirement errors
jotel-dev
committed

Commits on Jul 3, 2026

Merge branch 'main' into fix/jwt-signature-verification
Benedict315
authored