[jira] [Created] (OLTU-189) Signature Validation Error

["Raghu Prabhala (JIRA)" <ji...@apache.org>]

Raghu Prabhala created OLTU-189:
-----------------------------------

             Summary: Signature Validation Error
                 Key: OLTU-189
                 URL: https://issues.apache.org/jira/browse/OLTU-189
             Project: Apache Oltu
          Issue Type: Bug
          Components: jose-jws
    Affects Versions: oauth2-1.0.0
            Reporter: Raghu Prabhala


Signature validation fails due to a bug in the JWS.java. The validate method fails  in some cases as the elements of header and payload are constructed back (see below) in a sorted order which could be different from the original order in which the token was sent by the authorization serve.

I was able to validate the signature by doing the validation outside of this method/class by storing the actual encoded header, payload and using them. Can this be addressed?

return method.verify(signature,
				TokenDecoder.base64Encode(new JWSHeaderWriter().write(header)),
				TokenDecoder.base64Encode(payload), verifyingKey)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)