View Issue Details

IDProjectCategoryView StatusLast Update
0037830FPCFCLpublic2020-09-28 09:50
ReporterZamrony P. Juhara Assigned ToMichael Van Canneyt  
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionfixed 
Fixed in Version3.3.1 
Summary0037830: Unsecured JWT without signature not include last dot separator
DescriptionJWT specification for unsecured JWT with empty signature must include last dot separator

https://tools.ietf.org/html/rfc7519#section-6.1

However in fpjwt.pp

function TJWT.GetAsString: TJSONStringType;
begin
  Result:=Base64ToBase64URL(EncodeStringBase64(JOSE.AsString));
  Result:=Result+'.'+Base64ToBase64URL(EncodeStringBase64(Claims.AsString));
  If (Signature<>'') then
    Result:=Result+'.'+Signature;
end;

If signature empty, dot character will not be included.
TagsNo tags attached.
Fixed in Revision46984
FPCOldBugId
FPCTarget3.2.2
Attached Files

Activities

Michael Van Canneyt

2020-09-28 09:50

administrator   ~0125916

Fixed, thanks for reporting !

Issue History

Date Modified Username Field Change
2020-09-28 09:38 Zamrony P. Juhara New Issue
2020-09-28 09:50 Michael Van Canneyt Assigned To => Michael Van Canneyt
2020-09-28 09:50 Michael Van Canneyt Status new => resolved
2020-09-28 09:50 Michael Van Canneyt Resolution open => fixed
2020-09-28 09:50 Michael Van Canneyt Fixed in Version => 3.3.1
2020-09-28 09:50 Michael Van Canneyt Fixed in Revision => 46984
2020-09-28 09:50 Michael Van Canneyt FPCTarget => 3.2.2
2020-09-28 09:50 Michael Van Canneyt Note Added: 0125916