Closed spaceone closed 9 months ago
Hello @spaceone ,
Using r_jwt_verify_signature
with a unsigned jwt will return RHN_ERROR_INVALID
.
There is an old typo in the documentation. Thanks for pointing out!
I've updated the documentation to remove the mention to alg:none
: https://babelouest.github.io/rhonabwy/group__jws.html#ga2f4b76d9600759ef920c0d389ae19fda
Thanks. See also #11
I have a short question and just want to be sure that my assumptions are correct:
The docstring for
r_jwt_verify_signature
says:(https://babelouest.github.io/rhonabwy/group__jwt.html#ga2ab2ec575660117efec3e576f189fa67)
and I see no flag to prevent this.
But the use of
r_jwt_parse()
already ensures thatalg: null
causes an error, right? butr_jwt_parse_unsecure()
would allow this?my code looks like: