Repository navigation
module ignores b64 in the header #36
Description
Hello,
I am using jws library which internally uses this module and it seems that the signature generated does not meet the specifications.
According to the standards, if I pass b64: false in the header, the signature returned should not be base64Url encoded.
After going through the code of the library, it looks like you are returning base64Url encoded signature irrespective of what is passed in the header.
https://github.com/brianloveswords/node-jwa/blob/master/index.js#L153
Would appreciate your take on this.
Thanks
Activity
panva commentedon Apr 17, 2019
Hi @namrata25
"b64": falseMUST be accompanied by"crit": ["b64"]in the header.1,2Since this
jwamodule really only deals with signing and verification of provided inputs what you're asking should be part of the module you're using.Other JOSE packages, e.g.
josesupport the RFC7797-defined b64 critical parameter.