Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use the right base64 decoder as a JWT is a tuple of URL-safe base64 encoded strings #97

Merged
merged 2 commits into from
Sep 9, 2021

Conversation

moriyoshi
Copy link
Contributor

@moriyoshi moriyoshi commented Sep 8, 2021

This causes hashicorp/terraform-provider-azuread#558 .

SIDENOTE: the implementation doesn't verify the attached signature and this needs to be addressed.

@manicminer
Copy link
Owner

manicminer commented Sep 8, 2021

Hi @moriyoshi, thanks for spotting and fixing this! I added some tests for auth.ParseClaims() for some extra safety around this as it has become a critical function.

Copy link
Collaborator

@jackofallops jackofallops left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🚀

@manicminer manicminer merged commit f3fce73 into manicminer:main Sep 9, 2021
manicminer added a commit that referenced this pull request Sep 9, 2021
manicminer added a commit to kaovd/hamilton that referenced this pull request Sep 30, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working package/auth
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants