mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: validate() does not require ownership of the token string

Browse source 
Thanks to @bvs for pointing this out.
This commit is contained in:
Vincent Ambo 2018-09-04 13:01:14 +02:00
parent 89af12444a
commit 64a480ccb7
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/lib.rs
View file

@ -32,8 +32,8 @@
//! //!
//! use alcoholic_jwt::{JWKS, Validation, validate, token_kid}; //! use alcoholic_jwt::{JWKS, Validation, validate, token_kid};
//! //!
//! # fn some_token_fetching_function() -> String { //! # fn some_token_fetching_function() -> &'static str {
//! # "eyJraWQiOiI4ckRxOFB3MEZaY2FvWFdURVZRbzcrVGYyWXpTTDFmQnhOS1BDZWJhYWk0PSIsImFsZyI6IlJTMjU2IiwidHlwIjoiSldUIn0.eyJpc3MiOiJhdXRoLnRlc3QuYXByaWxhLm5vIiwiaWF0IjoxNTM2MDUwNjkzLCJleHAiOjE1MzYwNTQyOTMsInN1YiI6IjQyIiwiZXh0Ijoic21va2V0ZXN0IiwicHJ2IjoiYXJpc3RpIiwic2NwIjoicHJvY2VzcyJ9.gOLsv98109qLkmRK6Dn7WWRHLW7o8W78WZcWvFZoxPLzVO0qvRXXRLYc9h5chpfvcWreLZ4f1cOdvxv31_qnCRSQQPOeQ7r7hj_sPEDzhKjk-q2aoNHaGGJg1vabI--9EFkFsGQfoS7UbMMssS44dgR68XEnKtjn0Vys-Vzbvz_CBSCH6yQhRLik2SU2jR2L7BoFvh4LGZ6EKoQWzm8Z-CHXLGLUs4Hp5aPhF46dGzgAzwlPFW4t9G4DciX1uB4vv1XnfTc5wqJch6ltjKMde1GZwLR757a8dJSBcmGWze3UNE2YH_VLD7NCwH2kkqr3gh8rn7lWKG4AUIYPxsw9CB".into() //! # "eyJraWQiOiI4ckRxOFB3MEZaY2FvWFdURVZRbzcrVGYyWXpTTDFmQnhOS1BDZWJhYWk0PSIsImFsZyI6IlJTMjU2IiwidHlwIjoiSldUIn0.eyJpc3MiOiJhdXRoLnRlc3QuYXByaWxhLm5vIiwiaWF0IjoxNTM2MDUwNjkzLCJleHAiOjE1MzYwNTQyOTMsInN1YiI6IjQyIiwiZXh0Ijoic21va2V0ZXN0IiwicHJ2IjoiYXJpc3RpIiwic2NwIjoicHJvY2VzcyJ9.gOLsv98109qLkmRK6Dn7WWRHLW7o8W78WZcWvFZoxPLzVO0qvRXXRLYc9h5chpfvcWreLZ4f1cOdvxv31_qnCRSQQPOeQ7r7hj_sPEDzhKjk-q2aoNHaGGJg1vabI--9EFkFsGQfoS7UbMMssS44dgR68XEnKtjn0Vys-Vzbvz_CBSCH6yQhRLik2SU2jR2L7BoFvh4LGZ6EKoQWzm8Z-CHXLGLUs4Hp5aPhF46dGzgAzwlPFW4t9G4DciX1uB4vv1XnfTc5wqJch6ltjKMde1GZwLR757a8dJSBcmGWze3UNE2YH_VLD7NCwH2kkqr3gh8rn7lWKG4AUIYPxsw9CB"
//! # } //! # }
//! //!
//! # fn jwks_fetching_function() -> JWKS { //! # fn jwks_fetching_function() -> JWKS {
@ -46,7 +46,7 @@
//! // the result into the `alcoholic_jwt::JWKS`-struct. //! // the result into the `alcoholic_jwt::JWKS`-struct.
//! let jwks: JWKS = jwks_fetching_function(); //! let jwks: JWKS = jwks_fetching_function();
//! //!
//! let token: String = some_token_fetching_function(); //! let token = some_token_fetching_function();
//! //!
//! // Several types of built-in validations are provided: //! // Several types of built-in validations are provided:
//! let validations = vec![ //! let validations = vec![
@ -136,7 +136,7 @@ impl JWKS {
/// Representation of an undecoded JSON Web Token. See [RFC /// Representation of an undecoded JSON Web Token. See [RFC
/// 7519](https://tools.ietf.org/html/rfc7519). /// 7519](https://tools.ietf.org/html/rfc7519).
struct JWT (String); struct JWT<'a> (&'a str);
/// Representation of a decoded and validated JSON Web Token. /// Representation of a decoded and validated JSON Web Token.
/// ///
@ -249,7 +249,7 @@ pub fn token_kid(token: &str) -> JWTResult<Option<String>> {
/// ///
/// It is the user's task to ensure that the correct JWK is passed in /// It is the user's task to ensure that the correct JWK is passed in
/// for validation. /// for validation.
pub fn validate(token: String, pub fn validate(token: &str,
jwk: &JWK, jwk: &JWK,
validations: Vec<Validation>) -> JWTResult<ValidJWT> { validations: Vec<Validation>) -> JWTResult<ValidJWT> {
let jwt = JWT(token); let jwt = JWT(token);