summaryrefslogtreecommitdiff
path: root/packages/fcl-web
diff options
context:
space:
mode:
authormichael <michael@3ad0048d-3df7-0310-abae-a5850022a9f2>2020-09-28 07:50:08 +0000
committermichael <michael@3ad0048d-3df7-0310-abae-a5850022a9f2>2020-09-28 07:50:08 +0000
commit26ef3a01517ed941e9c635bf93bab9f4b500aee6 (patch)
tree2c25b325233bfd55d051566b83e03422768d5860 /packages/fcl-web
parentcb0305ce0e8940beb3cdc0f38afc143eb4faf1d2 (diff)
downloadfpc-26ef3a01517ed941e9c635bf93bab9f4b500aee6.tar.gz
* Fix bug 37830, always append dot even if signature empty
git-svn-id: https://svn.freepascal.org/svn/fpc/trunk@46984 3ad0048d-3df7-0310-abae-a5850022a9f2
Diffstat (limited to 'packages/fcl-web')
-rw-r--r--packages/fcl-web/src/base/fpjwt.pp6
1 files changed, 4 insertions, 2 deletions
diff --git a/packages/fcl-web/src/base/fpjwt.pp b/packages/fcl-web/src/base/fpjwt.pp
index 3a15cc43fd..ccde8ee24b 100644
--- a/packages/fcl-web/src/base/fpjwt.pp
+++ b/packages/fcl-web/src/base/fpjwt.pp
@@ -165,8 +165,10 @@ function TJWT.GetAsString: TJSONStringType;
begin
Result:=Base64ToBase64URL(EncodeStringBase64(JOSE.AsString));
Result:=Result+'.'+Base64ToBase64URL(EncodeStringBase64(Claims.AsString));
- If (Signature<>'') then
- Result:=Result+'.'+Signature;
+ // Dot must always be present, even if signature is empty.
+ // https://tools.ietf.org/html/rfc7519#section-6.1
+ // (See also Bug ID 37830)
+ Result:=Result+'.'+Signature;
end;