upstream/haproxy
1
0
Fork 0
mirror of https://github.com/haproxy/haproxy.git synced 2026-05-21 09:25:29 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 12

BUG/MEDIUM: jwe: Fix jwt.decrypt_alg_list to work correctly

Browse source 
Function jwe_parse_global_alg_enc_list() handles both
jwt.decrypt_alg_list and jwd.decrypt_enc_list, but to know which array
to use, between the algorithms and encoding arrays to use, it was
checking the string to see if it matched jwe.supported_algorithms, so it
was always considering we were dealing with encodings, and
jwt.decrypt_alg_list could not possibly work.
Fix that by checking the right string.
This commit is contained in:
Olivier Houchard 2026-05-07 18:27:58 +02:00 committed by Olivier Houchard
parent 495eb7b0e0
commit 81abfaa4df
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/jwe.c
View file

@ -2175,11 +2175,11 @@ static int jwe_parse_global_alg_enc_list(char **args, int section_type, struct p
if (dup_alg_enc_arrays())
goto end;
if (args[0][14] == 'a') {
/* "jwe.supported_algorithms" */
if (args[0][12] == 'a') {
/* "jwt.decrypt_alg_list" */
arr = jwe_algs;
} else {
/* "jwe.supported_encodings" */
/* "jwt.decrypt_enc_list" */
arr = jwe_encodings;
}