Require https, expect Roblox issuer to be secure (#25)

Roblox · Oct 24, 2023 · 605cc42 · 605cc42
1 parent 2733994
commit 605cc42
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/jwt_http_client.py b/lib/jwt_http_client.py
@@ -49,7 +49,7 @@ async def get_json(self, url: str):
         :return: The JSON data as a dictionary.
         :raise JWTHTTPFetchError: If there's a problem fetching or decoding the data.
         """
-        if not (url.startswith("https://") or url.startswith("http://")):
+        if not url.startswith("https://"):
             raise JWTHTTPFetchError("Unsupported protocol in 'iss'")
 
         try: