Skip to content

Commit 9751ebd

Browse files
committed
* verify should pass verify=true into the jwt library for proper verification
1 parent bad86f0 commit 9751ebd

File tree

3 files changed

+6
-7
lines changed

3 files changed

+6
-7
lines changed

box.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name":"ColdBox Security",
3-
"version":"2.3.0",
3+
"version":"2.2.1",
44
"location":"https://downloads.ortussolutions.com/ortussolutions/coldbox-modules/cbsecurity/@build.version@/[email protected]@.zip",
55
"author":"Ortus Solutions.com <[email protected]",
66
"slug":"cbsecurity",

changelog.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
# CHANGELOG
22

3+
## 2.2.1
4+
5+
* `bug` : `verify` should pass `verify=true` into the jwt library for proper verification
6+
37
## 2.2.0
48

59
* `Feature` : Migrated from the jwt to the `jwtcfml` (https://forgebox.io/view/jwt-cfml) library to expand encoding/decoding capabilities to support `RS` and `ES` algorithms:

models/jwt/JwtService.cfc

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -544,12 +544,7 @@ component accessors="true" singleton {
544544
*/
545545
boolean function verify( required token ){
546546
try {
547-
variables.jwt.decode(
548-
token = arguments.token,
549-
key = variables.settings.jwt.secretKey,
550-
algorithms = variables.settings.jwt.algorithm,
551-
verify = false
552-
);
547+
this.decode( arguments.token );
553548
return true;
554549
} catch ( Any e ) {
555550
return false;

0 commit comments

Comments
 (0)