You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Juan (JIRA)" <ji...@apache.org> on 2018/06/13 07:58:00 UTC

[jira] [Created] (CXF-7760) Jose:

Juan created CXF-7760:
-------------------------

             Summary: Jose: 
                 Key: CXF-7760
                 URL: https://issues.apache.org/jira/browse/CXF-7760
             Project: CXF
          Issue Type: Bug
          Components: JAX-RS Security
    Affects Versions: 3.1.13
            Reporter: Juan


When using the JwsCompactConsumer with a compact JWT whose kid contains a slash, the json parser escapes it, which causes issues later on while matching the kid to the one specified in the JWKS. For example:

Header:

{
 "kid": "4pZbe4shQQGzZXHbeIlbDvmHOc1/H6jH6oBk3nUrcZE=",
 "alg": "RS256"
}

 

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)