Fix JWT parsing

olapp/core/views.py

@@ -284,7 +284,7 @@ class LoginRedirectView(View):
         token = request.GET.get("token")
 
         # get cookie max_age from token
-        payload = jwt.decode(token, verify=False)
+        payload = jwt.decode(token, algorithms=[settings.JWT_ALGORITHM], verify=False)
         max_age = payload["exp"] - time.time()
 
         response = HttpResponseRedirect(reverse("account"))

olapp/settings.py

@@ -114,3 +114,6 @@ OPENLOBBY_API_URL = f"{openlobby_server_dsn}/graphql"
 APP_URL = os.environ.get("APP_URL", "http://localhost:8020")
 
 ACCESS_TOKEN_COOKIE = "ol_access_token"
+
+# signature algorithm JSON Web Tokens
+JWT_ALGORITHM = "HS512"