google / jwt_verify_lib

Provide c++ library to verify JWT tokens
Apache License 2.0
42 stars 43 forks source link

Add padded base64url payload string #60

Closed TAOXUY closed 3 years ago

TAOXUY commented 3 years ago

This PR provides the base64url payload string with padding.

Risk: low. Just like the added unit tests, the new one with padding should be equivalent to the original one after decoding. Of course, only the original one can be used in the JWT verification.

Context: although padding is not required by base64 encoding spec, some decode libraries are not robust enough to handle the one without padding.

TAOXUY commented 3 years ago

@qiwzhang, @nareddyt

TAOXUY commented 3 years ago

https://github.com/GoogleCloudPlatform/esp-v2/issues/178

TAOXUY commented 3 years ago

Replace with PR in envoy