docs: add notes about algorithm allow list defaults

panva · Apr 1, 2021 · 0f990a4 · 0f990a4
1 parent 8282c28
commit 0f990a4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/types.d.ts b/src/types.d.ts
@@ -444,6 +444,8 @@ export interface DecryptOptions extends CritOption {
 
   /**
    * A list of accepted JWE "enc" (Encryption Algorithm) Header Parameter values.
+   * By default all "enc" (Encryption Algorithm) values applicable for the used
+   * key/secret are allowed.
    */
   contentEncryptionAlgorithms?: string[]
 
@@ -515,6 +517,8 @@ export interface JWTClaimVerificationOptions {
 export interface VerifyOptions extends CritOption {
   /**
    * A list of accepted JWS "alg" (Algorithm) Header Parameter values.
+   * By default all "alg" (Algorithm) values applicable for the used
+   * key/secret are allowed. Note: "none" is never accepted.
    */
   algorithms?: string[]
 }