authentikat-jwt
authentikat-jwt copied to clipboard
jasongoodwin
JWT Scala Implementation - Claims based auth for Scala.
Maven repo page: [here](https://mvnrepository.com/artifact/com.jason-goodwin/authentikat-jwt) CVE report: [here](https://nvd.nist.gov/vuln/detail/CVE-2017-18239) Please cut a new release as soon as possible to protect your users.
Trying to parse the JWT with scala 2.12.12 fails The following snippet will return `false` on validation: ```scala val jwt = JsonWebToken(JwtHeader("HS256"), JwtClaimsSet(Map.empty[String, String]), "test") JsonWebToken.validate(jwt, "test") ``` There appears...
Hi! I'm reaching out because I see you are on the search for a maintainer for this project. We utilize this dependency in our project's over here at SignalPath and...
This implementation is insecure, specifically the verification step can be circumvented easily. Because you use the algorithm specified in the header to verify, and attacker could just send you a...
In the case where the public key is looked up from a map of `kid -> publicKeys`, is it possible to parse the `kid` from the Jwt Header for that...
Is it possible to create an RSA signature using SHA-256 hashing algorithm? As this is the only one supported by the [Google App Engine](https://developers.google.com/accounts/docs/OAuth2ServiceAccount) for authentication.
Right now, at least for HMac, the `String` key is converted to `Array[Byte]` (https://github.com/jasongoodwin/authentikat-jwt/blob/master/src/main/scala/authentikat/jwt/JsonWebSignature.scala#L47) using `String.asBytes` (http://docs.oracle.com/javase/8/docs/api/java/lang/String.html#getBytes--). This is kind of confusing, and unless I'm missing something is platform-dependent and...
As per the recent JWT vulnerability concerns, (https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/), I was looking into the JsonWebToken.validate() method in this library and was interesting in forking off and adding an algorithm parameter to...
Metadata
Owner
Metadata
JWT Scala Implementation - Claims based auth for Scala.