Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

refactor: catch type error when decoding base64url signature #569

Merged
merged 4 commits into from
Sep 1, 2023
Merged
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion src/jws/flattened/verify.ts
Original file line number Diff line number Diff line change
Expand Up @@ -169,7 +169,11 @@ export async function flattenedVerify(
encoder.encode('.'),
typeof jws.payload === 'string' ? encoder.encode(jws.payload) : jws.payload,
)
const signature = base64url(jws.signature)
try {
const signature = base64url(jws.signature)
} catch {
throw new JWSSignatureVerificationFailed()
lboynton marked this conversation as resolved.
Show resolved Hide resolved
}
const verified = await verify(alg, key, signature, data)

if (!verified) {
Expand Down