Skip to main content

jwt-rfc8725-declared

Requires JWT-capable security scheme descriptions to contain the exact text RFC8725.

AttributeValue
CategorySecurity
MaturityPlatinum
Lenient–StrictWarning
CompleteError

Flags

Every OAuth2 scheme and every scheme whose bearerFormat equals jwt, case-insensitively.

See it fail

bearerAuth:
type: http
scheme: bearer
bearerFormat: JWT

Fix it

Add a description such as JWTs must follow RFC8725. Note: matching has no space or hyphen.

Nearby: security-scheme-oauth2.