search

IdentityPython / pyjwkest

Implementation of JWT, JWS, JWE and JWK
Apache License 2.0
94 stars 55 forks source link

Ability to pass in protected headers to sign_compact. #29

Closed mibanescu closed 9 years ago

mibanescu commented 9 years ago

Signatures may not validate if multiple (protected) headers are fed in. This is related to sign_compact computing the b64 representation of the protected headers (xargs) outside of the jwt, and then using jwt.pack() which would re-serialize the protected headeres, potentially changing the way the json is formatted.

mibanescu commented 9 years ago

Please note that test_private_key_from_jwk fails because jwk_private_key.json has not been committed.

rohe commented 9 years ago

23 jul 2015 kl. 20:39 skrev Arjun Sharma notifications@github.com:

Please note that test_private_key_from_jwk fails because jwk_private_key.json has not been committed.

It is now.

”Capitalism is the extraordinary belief that the nastiest of men for the nastiest of motives will somehow work for the benefit of all" - John Maynard Keynes.