48 lines
1.0 KiB
Plaintext
48 lines
1.0 KiB
Plaintext
== Why is this an issue?
|
||
|
||
include::../description.adoc[]
|
||
|
||
=== Noncompliant code example
|
||
|
||
https://github.com/jwt-dotnet/jwt[jwt-dotnet] library:
|
||
|
||
[source,vbnet]
|
||
----
|
||
Dim decodedtoken1 As String = decoder.Decode(token, secret, verify:= false) ' Noncompliant: signature should be verified
|
||
|
||
Dim decodedtoken2 As String = new JwtBuilder().
|
||
WithSecret(secret).
|
||
Decode(forgedtoken1) ' Noncompliant: signature should be verified
|
||
----
|
||
|
||
=== Compliant solution
|
||
|
||
https://github.com/jwt-dotnet/jwt[jwt-dotnet] library:
|
||
|
||
[source,vbnet]
|
||
----
|
||
Dim decodedtoken1 As String = decoder.Decode(forgedtoken1, secret, verify:= true) ' Compliant
|
||
|
||
Dim decodedtoken2 As String = new JwtBuilder().
|
||
WithSecret(secret).
|
||
MustVerifySignature().
|
||
Decode(token) ' Compliant
|
||
----
|
||
|
||
include::../see.adoc[]
|
||
|
||
ifdef::env-github,rspecator-view[]
|
||
|
||
'''
|
||
== Implementation Specification
|
||
(visible only on this page)
|
||
|
||
include::../message.adoc[]
|
||
|
||
'''
|
||
== Comments And Links
|
||
(visible only on this page)
|
||
|
||
include::../comments-and-links.adoc[]
|
||
endif::env-github,rspecator-view[]
|