forked from ebhomengo/niki
51 lines
1.6 KiB
Go
51 lines
1.6 KiB
Go
package jwt
|
|
|
|
// SigningMethodNone implements the none signing method. This is required by the spec
|
|
// but you probably should never use it.
|
|
var SigningMethodNone *signingMethodNone
|
|
|
|
const UnsafeAllowNoneSignatureType unsafeNoneMagicConstant = "none signing method allowed"
|
|
|
|
var NoneSignatureTypeDisallowedError error
|
|
|
|
type signingMethodNone struct{}
|
|
type unsafeNoneMagicConstant string
|
|
|
|
func init() {
|
|
SigningMethodNone = &signingMethodNone{}
|
|
NoneSignatureTypeDisallowedError = newError("'none' signature type is not allowed", ErrTokenUnverifiable)
|
|
|
|
RegisterSigningMethod(SigningMethodNone.Alg(), func() SigningMethod {
|
|
return SigningMethodNone
|
|
})
|
|
}
|
|
|
|
func (m *signingMethodNone) Alg() string {
|
|
return "none"
|
|
}
|
|
|
|
// Only allow 'none' alg type if UnsafeAllowNoneSignatureType is specified as the key
|
|
func (m *signingMethodNone) Verify(signingString string, sig []byte, key interface{}) (err error) {
|
|
// Key must be UnsafeAllowNoneSignatureType to prevent accidentally
|
|
// accepting 'none' signing method
|
|
if _, ok := key.(unsafeNoneMagicConstant); !ok {
|
|
return NoneSignatureTypeDisallowedError
|
|
}
|
|
// If signing method is none, signature must be an empty string
|
|
if string(sig) != "" {
|
|
return newError("'none' signing method with non-empty signature", ErrTokenUnverifiable)
|
|
}
|
|
|
|
// Accept 'none' signing method.
|
|
return nil
|
|
}
|
|
|
|
// Only allow 'none' signing if UnsafeAllowNoneSignatureType is specified as the key
|
|
func (m *signingMethodNone) Sign(signingString string, key interface{}) ([]byte, error) {
|
|
if _, ok := key.(unsafeNoneMagicConstant); ok {
|
|
return []byte{}, nil
|
|
}
|
|
|
|
return nil, NoneSignatureTypeDisallowedError
|
|
}
|