Set allowed algorithms when decoding

Note: This feature is new in PyJWT v1.0.0.
jpadilla · Mar 18, 2015 · 57c63a5 · 57c63a5
1 parent 062bcdc
commit 57c63a5
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/rest_framework_jwt/utils.py b/rest_framework_jwt/utils.py
@@ -54,7 +54,8 @@ def jwt_decode_handler(token):
         verify_expiration=api_settings.JWT_VERIFY_EXPIRATION,
         leeway=api_settings.JWT_LEEWAY,
         audience=api_settings.JWT_AUDIENCE,
-        issuer=api_settings.JWT_ISSUER
+        issuer=api_settings.JWT_ISSUER,
+        algorithms=[api_settings.JWT_ALGORITHM]
     )