Method test_valid_decode_safe

tests/unit/test_missing_rules.py:212–214

(self)

        assert fires(code, "JWT001"), "JWT001 must fire: algorithms=['none']"

    def test_valid_decode_safe(self):
        code = "payload = jwt.decode(token, secret, algorithms=['HS256'])"
        assert not_fires(code, "JWT001"), "JWT001 must NOT fire for valid HS256 decode"


# ============================================================