Add warning when decoding with no algorithms specifiedfix-vuln

1 files changed, 10 insertions, 0 deletions

diff --git a/tests/test_api_jwt.py b/tests/test_api_jwt.py
index 61de6e0..798e4b7 100644
--- a/tests/test_api_jwt.py
+++ b/tests/test_api_jwt.py
@@ -472,3 +472,13 @@ class TestJWT:
                 secret,
                 verify_expiration=True
             )
+
+    def test_decode_with_optional_algorithms(self, jwt, payload):
+        secret = 'secret'
+        jwt_message = jwt.encode(payload, secret)
+
+        pytest.deprecated_call(
+            jwt.decode,
+            jwt_message,
+            secret
+        )