thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server
https://oauth2.thephpleague.com
MIT License
6.52k stars 1.12k forks source link

Test invalid JWT fails with lcobucci/jwt:4.1.2 #1197

Closed eugene-borovov closed 3 years ago

eugene-borovov commented 3 years ago

Test invalid JWT fails with lcobucci/jwt:4.1.2 and OK with lcobucci/jwt:4.0.0

The reason is lcobucci/jwt:4.0.0 try to check invalid JWT and lcobucci/jwt:4.1.2 fail to parse base64. Expected test result is Access token could not be verified. With lcobucci/jwt:4.1.2 we`ve got Error while decoding from Base64Url, invalid base64 characters detected.