Option to not validate JWT signature

Author: peacekeeper

src/main/java/com/danubetech/verifiablecredentials/jwt/JwtVerifiableCredential.java

@@ -33,17 +33,25 @@ private JwtVerifiableCredential(JwtClaims payload, VerifiableCredential payloadV
 		this.payloadVerifiableCredential = payloadVerifiableCredential;
 	}
 
-	public static JwtVerifiableCredential fromJwt(String jwt, String algorithm, PublicKey publicKey) throws JoseException, GeneralSecurityException, InvalidJwtException {
+	public static JwtVerifiableCredential fromJwt(String jwt, String algorithm, PublicKey publicKey, boolean doValidate) throws JoseException, GeneralSecurityException, InvalidJwtException {
 
 		boolean validate;
 
 		JsonWebSignature jws = new JsonWebSignature();
 		jws.setAlgorithmConstraints(new AlgorithmConstraints(AlgorithmConstraints.ConstraintType.WHITELIST, algorithm));
 		jws.setCompactSerialization(jwt);
 
-		jws.setKey(publicKey);
-		validate = jws.verifySignature();
-		if (! validate) throw new GeneralSecurityException("Invalid signature: " + jwt);
+		if (doValidate) {
+
+			jws.setKey(publicKey);
+			validate = jws.verifySignature();
+			if (! validate) throw new GeneralSecurityException("Invalid signature: " + jwt);
+
+			System.setProperty("org.jose4j.jws.getPayload-skip-verify", "false");
+		} else {
+
+			System.setProperty("org.jose4j.jws.getPayload-skip-verify", "true");
+		}
 
 		JwtClaims jwtPayload = JwtClaims.parse(jws.getPayload());
 		LinkedHashMap<String, Object> jsonLdObject = (LinkedHashMap<String, Object>) jwtPayload.getClaimValue(JWT_CLAIM_VC);
@@ -52,6 +60,11 @@ public static JwtVerifiableCredential fromJwt(String jwt, String algorithm, Publ
 		return new JwtVerifiableCredential(jwtPayload, payloadVerifiableCredential);
 	}
 
+	public static JwtVerifiableCredential fromJwt(String jwt, String algorithm, PublicKey publicKey) throws JoseException, GeneralSecurityException, InvalidJwtException {
+
+		return fromJwt(jwt, algorithm, publicKey, true);
+	}
+
 	public static JwtVerifiableCredential fromVerifiableCredential(VerifiableCredential verifiableCredential, String aud) {
 
 		VerifiableCredential payloadVerifiableCredential;