paweld/fpc
1
0
Fork 0
mirror of https://gitlab.com/freepascal.org/fpc/source.git synced 2025-08-30 10:41:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

fcl-web: fpjwarsa: catch exceptions during verification

Browse Source
This commit is contained in:
mattias 2022-05-03 01:51:56 +02:00
parent 37d107a953
commit 120303576b
1 changed files with 46 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
packages/fcl-web/src/jwt/fpjwarsa.pp
View File

@ -164,6 +164,7 @@ begin
Result:=false;
if aJWT='' then exit;
try
if not GetParts(aJWT,aHeader,theClaims,aSignature) then exit;
if aSignature='' then exit;
@ -182,6 +183,8 @@ begin
finally
RSAFree(RSA);
end;
except
end;
end;
{ TJWTSignerRS512 }
@ -268,6 +271,7 @@ begin
Result:=false;
if aJWT='' then exit;
try
if not GetParts(aJWT,aHeader,theClaims,aSignature) then exit;
if aSignature='' then exit;
@ -294,6 +298,8 @@ begin
// check decrypted hash and actual hash fit
Result:=(length(DecryptedHash)=length(ActualHash))
and CompareMem(@DecryptedHash[0],@ActualHash[0],length(DecryptedHash));
except
end;
end;
initialization