]> git.ipfire.org Git - thirdparty/dovecot/core.git/commitdiff
lib-oauth2: test-oauth2-jwt - Ensure we ignore 'none' algorithm
authorAki Tuomi <aki.tuomi@open-xchange.com>
Thu, 28 May 2020 12:05:08 +0000 (15:05 +0300)
committeraki.tuomi <aki.tuomi@open-xchange.com>
Wed, 9 Nov 2022 12:51:30 +0000 (12:51 +0000)
src/lib-oauth2/test-oauth2-jwt.c

index 0f17593c84991cd58cb22e8f884ac53dc9b5a8b1..8afa8d96d3a3619842910df424b64945e089d4f8 100644 (file)
@@ -432,6 +432,11 @@ static void test_jwt_broken_token(void)
                                 "q2wwwWWJVJxqw-J3uQ0DdlIyWfoZ7Z0QrdzvMW_B-jo",
                        .is_jwt = TRUE
                },
+               { /* algorithm is 'none' */
+                       .token = "eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0."
+                                "eyJleHAiOjE1ODEzMzA3OTN9.",
+                       .is_jwt = TRUE
+               }
        };
 
        test_begin("JWT broken tokens");