wip

saleor · Mar 4, 2024 · 5f11b53 · 5f11b53
1 parent 3bba0f1
commit 5f11b53
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 1 deletion.
diff --git a/.changeset/purple-colts-guess.md b/.changeset/purple-colts-guess.md
@@ -0,0 +1,5 @@
+---
+"@saleor/app-sdk": patch
+---
+
+WIP
diff --git a/src/verify-jwt.ts b/src/verify-jwt.ts
@@ -61,7 +61,11 @@ export const verifyJWT = async ({
 
     const JWKS = jose.createRemoteJWKSet(new URL(getJwksUrlFromSaleorApiUrl(saleorApiUrl)));
     debug("Trying to compare JWKS with token");
-    await jose.jwtVerify(token, JWKS);
+    await jose.jwtVerify(token, JWKS, {
+      crit: {
+        b64: true,
+      },
+    });
   } catch (e) {
     debug("Failure: %s", e);
     debug("Will return with Bad Request");

diff --git a/src/verify-signature.ts b/src/verify-signature.ts
@@ -23,6 +23,9 @@ export const verifySignatureFromApiUrl = async (
     protected: header,
     payload: rawBody,
     signature: jwsSignature,
+    header: {
+      b64: true,
+    },
   };
 
   const remoteJwks = jose.createRemoteJWKSet(
@@ -52,6 +55,9 @@ export const verifySignatureWithJwks = async (jwks: string, signature: string, r
     protected: header,
     payload: rawBody,
     signature: jwsSignature,
+    header: {
+      b64: true,
+    },
   };
 
   let localJwks: jose.FlattenedVerifyGetKey;