Cleared 2m ago · AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet #3498 · C# · ★ 1.2k · MIT

[Bug] JsonWebTokenHandler accepts sub-2048-bit RSA signing keys (RFC 7518 §3.3 not enforced; parity with #1743 for HMAC)

Which version of Microsoft.IdentityModel are you using? Microsoft.IdentityModel 8.18.0 (latest stable as of 2026-04-30). Behaviour also reproduces on 8.3.0. Where is the issue? M.IM.JsonWebTokens M.IM.KeyVaultExtensions M.IM.Logging M.IM.ManagedKeyVaultSecurityKey M.IM.Protocols…

What we checked

Similar unclaimed issues