Merge branch 'development'

Author: lmajano

box.json

@@ -1,6 +1,6 @@
 {
     "name":"ColdBox Security",
-    "version":"2.2.0",
+    "version":"2.2.1",
     "location":"https://downloads.ortussolutions.com/ortussolutions/coldbox-modules/cbsecurity/@build.version@/[email protected]@.zip",
     "author":"Ortus Solutions.com <[email protected]",
     "slug":"cbsecurity",
@@ -28,7 +28,7 @@
         "*/.md"
     ],
     "dependencies":{
-		"jwt-cfml":"^1.0.0",
+        "jwt-cfml":"^1.0.0",
         "cbauth":"^4.0.0"
     },
     "scripts":{

changelog.md

@@ -1,5 +1,9 @@
 # CHANGELOG
 
+## 2.2.1
+
+* `bug` : `verify` should pass `verify=true` into the jwt library for proper verification
+
 ## 2.2.0
 
 * `Feature` : Migrated from the jwt to the `jwtcfml` (https://forgebox.io/view/jwt-cfml) library to expand encoding/decoding capabilities to support `RS` and `ES` algorithms:

models/jwt/JwtService.cfc

@@ -544,12 +544,7 @@ component accessors="true" singleton {
 	 */
 	boolean function verify( required token ){
 		try {
-			variables.jwt.decode(
-				token      = arguments.token,
-				key        = variables.settings.jwt.secretKey,
-				algorithms = variables.settings.jwt.algorithm,
-				verify     = false
-			);
+			this.decode( arguments.token );
 			return true;
 		} catch ( Any e ) {
 			return false;