You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@oltu.apache.org by "Antonio Sanso (JIRA)" <ji...@apache.org> on 2013/12/20 16:00:22 UTC
[jira] [Commented] (OLTU-132) SignatureMethod should take in
consideration also the header
[ https://issues.apache.org/jira/browse/OLTU-132?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13854029#comment-13854029 ]
Antonio Sanso commented on OLTU-132:
------------------------------------
revised method signatures to
{code}
String calculate(String header, String payload, S signingKey);
boolean verify(String signature, String header, String payload, V verifyingKey);
{code}
> SignatureMethod should take in consideration also the header
> ------------------------------------------------------------
>
> Key: OLTU-132
> URL: https://issues.apache.org/jira/browse/OLTU-132
> Project: Apache Oltu
> Issue Type: Bug
> Components: jose
> Reporter: Antonio Sanso
> Assignee: Antonio Sanso
>
> Currently SignatureMethod doesn't take in consideration the header for calculate verifying the signature.
> As per spec the input for the signature is:
> WS Signing Input
> ASCII(BASE64URL(UTF8(JWS Protected Header)) || '.' ||
> BASE64URL(JWS Payload))
--
This message was sent by Atlassian JIRA
(v6.1.4#6159)