mpdavis / python-jose

A JOSE implementation in Python
MIT License
1.55k stars 237 forks source link

Fix Error -3 decompress when using JWE with deflate #337

Open tebruno99 opened 1 year ago

tebruno99 commented 1 year ago

Fixes header error with compression DEFLATE when decrypting payloads generated by Go,Java, and PHP JOSE implementations. I do no know if this effects other implementations, this is a bug our Python applications hit when trying to consume encrypted cookies from our Webapp.

File "/home/me/Projects/Pycharm/TestJWE/venv/lib/python3.11/site-packages/jose/jwe.py", line 187, in decrypt plain_text = _decompress(header.get("zip"), plain_text) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/me/Projects/Pycharm/TestJWE/venv/lib/python3.11/site-packages/jose/jwe.py", line 453, in _decompress decompressed = zlib.decompress(compressed) ^^^^^^^^^^^^^^^^^^^^^^^^^^^ zlib.error: Error -3 while decompressing data: incorrect header check