From 533ce4078e06733052ba9f4b4ff07052b0ac8bd6 Mon Sep 17 00:00:00 2001
From: Les Hazlewood <121180+lhazlewood@users.noreply.github.com>
Date: Sun, 16 Jun 2024 16:09:29 -0700
Subject: [PATCH] Fixes #949

---
 impl/src/main/java/io/jsonwebtoken/impl/DefaultJwtParser.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/impl/src/main/java/io/jsonwebtoken/impl/DefaultJwtParser.java b/impl/src/main/java/io/jsonwebtoken/impl/DefaultJwtParser.java
index 538c56ef5..75faa419a 100644
--- a/impl/src/main/java/io/jsonwebtoken/impl/DefaultJwtParser.java
+++ b/impl/src/main/java/io/jsonwebtoken/impl/DefaultJwtParser.java
@@ -637,7 +637,7 @@ private byte[] verifySignature(final TokenizedJwt tokenized, final JwsHeader jws
                     // consumable, but not claims, so convert to byte array:
                     payloadBytes = Streams.bytes(in, "Unable to convert payload to byte array.");
                 }
-            } finally {
+            } finally { // always ensure closed per https://github.com/jwtk/jjwt/issues/949
                 Objects.nullSafeClose(in);
             }
         }