jjwt icon indicating copy to clipboard operation
jjwt copied to clipboard

Published 20 hours ago • verified publisher icon jwtk

Explicitly check JCA alg name when looking up SignatureAlgorithms

Open bdemers opened this issue 2 years ago • 3 comments

Fixes: #707

bdemers avatar Mar 02 '22 17:03 bdemers

@bdemers wanna update this based on latest master?

lhazlewood avatar Apr 26 '22 18:04 lhazlewood

@bdemers bump

lhazlewood avatar May 26 '22 23:05 lhazlewood

@lhazlewood rebased on master, sorry I missed the previous notification!

I do still need to deal with your comments 3&4 from above

bdemers avatar May 27 '22 17:05 bdemers

Closing as this has been fixed as a side effect of the JWE work merged to master, see:

https://github.com/jwtk/jjwt/blame/26026d63cdf2a07c058695894ba1a983e1bb8cea/impl/src/main/java/io/jsonwebtoken/impl/security/DefaultMacAlgorithm.java#L97-L119

lhazlewood avatar Sep 05 '23 21:09 lhazlewood

@bdemers can you please delete this branch if you're ok with that?

lhazlewood avatar Sep 06 '23 01:09 lhazlewood