auth0 / node-jws

JSON Web Signatures
http://self-issued.info/docs/draft-ietf-jose-json-web-signature.html
MIT License
709 stars 108 forks source link

Modifying payload hash causes crash #71

Closed frbuceta closed 6 years ago

frbuceta commented 7 years ago

Original Token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzaXRlIjoidGVzdCIsImlhdCI6MTUwNzE1Nzg1M30.imUNKrBoBpoYRrpNaar7aPUTEHOCyzeQhwM488WzJb8

Mod Token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eMODIFYINGyJzaXRlIjoidGVzdCIsImlhdCI6MTUwNzE1Nzg1M30.imUNKrBoBpoYRrpNaar7aPUTEHOCyzeQhwM488WzJb8

undefined:1
y�ͥє��ѕ�Ј����Ј������������
^

SyntaxError: Unexpected token y in JSON at position 0
    at JSON.parse (<anonymous>)
    at Object.jwsDecode [as decode] (/Users/fran/Projects/testjwtissue/node_modules/jws/lib/verify-stream.js:71:20)
    at Object.module.exports [as decode] (/Users/fran/Projects/testjwtissue/node_modules/jsonwebtoken/decode.js:5:21)
    at middleware (/Users/fran/Projects/testjwtissue/node_modules/restify-jwt-community/lib/index.js:70:24)