Comments (2)
Thanks for explaining that. It's definitely a configuration error on our side which 1.8.0 helped exposing :).
from erlang-jose.
Hey @kenips,
TL;DR HS512
should have never worked with an EC
key of the P-521
curve. Due to the way it was previously written, a HS512
signature would actually cause ES512
to be used (which is valid for that key type).
Version 1.8.0 is more strict in regards to which algorithms may be used with specific key types. In previous versions, :sha512
would get passed to the EC
key type, so it was actually "working silently" on past versions. However, HMAC-SHA-512 and SHA-512 are two very different algorithms, hence the "more strict" failure that is happening for you.
That said, I need to dig into guardian a little more and see why exactly HS512
is being passed in for an EC
key. Would you mind sharing the configuration you are specifying for guardian (minus your secret key or just minus the "d"
portion of the key)?
from erlang-jose.
Related Issues (20)
- Fails to start on Erlang/OTP-24.0 HOT 3
- :crypto.block_decrypt/4 is undefined in OTP24 HOT 9
- New release with Erlang 24 compatibility?
- Calling JOSE.JWK.block_encrypt with an invalid JWK never resolve HOT 2
- Invalid signature for PS256 HOT 4
- is there any example about `JOSE.JWA.sign/4`? HOT 3
- Possible broken elixir api call to erlang module when converting a %JWK{} to a pem HOT 2
- Jose failed to compile when MIX_ENV=prod HOT 1
- This project is turning into abandonware: call for more maintainers HOT 4
- Actually run Elixir tests in CI
- Speed up CI, currently takes ~20 minutes to run
- Update ECDH-1PU related code to match latest draft
- Add support for JWK Thumbprint URI from IETF RFC 9278
- Add support for ECDH-SS JWE algorithms HOT 1
- Add support for ES256K algorithm
- More robust support detection mechanism
- jwk.ex: Reading from pem file fails with FunctionClauseError
- Support AWS ALB JWTs with padding
- How to include headers after compact/1? HOT 1
- CaseClauseError raised by JOSE.JWT.peek_protected/1 with malformed token
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from erlang-jose.