We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Hi @kylef This library is removing HS256 algorithm by filtering it in verifiedAlgorithms in the snippet below.
func verifySignature(_ algorithms: [Algorithm], header: JOSEHeader, signingInput: String, signature: Data) throws { guard let alg = header.algorithm else { throw InvalidToken.decodeError("Missing Algorithm") } let verifiedAlgorithms = algorithms .filter { algorithm in algorithm.description == alg } .filter { algorithm in algorithm.verify(signingInput, signature: signature) } if verifiedAlgorithms.isEmpty { throw InvalidToken.invalidAlgorithm } }
/// Verify a signature for a message using the algorithm
func verify(_ message: String, signature: Data) -> Bool { return sign(message) == base64encode(signature) // Because this returns false }
This works completely fine on jwt.io and the signature verifies correctly.
Any Idea what went wrong here? Because this works with other libraries..
The text was updated successfully, but these errors were encountered:
any update on this?
Sorry, something went wrong.
No branches or pull requests
Hi @kylef
This library is removing HS256 algorithm by filtering it in verifiedAlgorithms in the snippet below.
/// Verify a signature for a message using the algorithm
This works completely fine on jwt.io and the signature verifies correctly.

Any Idea what went wrong here?
Because this works with other libraries..
The text was updated successfully, but these errors were encountered: