onyi / jsontoken Goto Github PK
View Code? Open in Web Editor NEWAutomatically exported from code.google.com/p/jsontoken
Automatically exported from code.google.com/p/jsontoken
JsonToken does not support the "nbf" or "jti" or "sub" claims which are in the
latest draft.
Original issue reported on code.google.com by [email protected]
on 17 Apr 2014 at 7:48
Hi.
We use version 1.0 in a commercial project, but are now experiencing problems
with clock skew. They are already fixed in
https://code.google.com/p/jsontoken/source/diff?spec=svn41&r=41&format=side&path
=/trunk/src/main/java/net/oauth/jsontoken/JsonTokenParser.java, but we would
like to use an artifact from a public Maven repo instead of building from
source.
Would you mind releaseing a maintenance release 1.1 or 1.0.1? Thanks.
Original issue reported on code.google.com by [email protected]
on 17 May 2013 at 10:08
What steps will reproduce the problem?
1. mvn test -Dtest=JsonTokenTest
What is the expected output? What do you see instead?
tests should pass, the error is:
Results :
Failed tests:
testCreateJsonToken(net.oauth.jsontoken.JsonTokenTest): expected:<...hbGciOiJIUzI1NiIsImtpZCI6ImtleTIifQ.eyJpc3MiOiJnb29nbGUuY29tIiwiYmFyIjoxNSwiZm9vIjoic29tZSB2YWx1ZSIsImF1ZCI6Imh0dHA6Ly93d3cuZ29vZ2xlLmNvbSIsImlhdCI6MTI3NjY2OTcyMiwiZXhwIjoxMjc2NjY5NzIyfQ.jKcuP6BR_-cKpQv2XdFLguYgOxw4ahkZiqjcgrQcm70> but was:<...tZW1iZXJzIjp7ImFsZyI6e30sImtpZCI6e319fQ.eyJtZW1iZXJzIjp7ImlzcyI6e30sImJhciI6e30sImZvbyI6e30sImF1ZCI6e30sImlhdCI6e30sImV4cCI6e319fQ.lccHLtj8zadeTRfbISWZ9SDdprwdvL5eANUfRcFXJkc>
Tests in error:
testPublicKey(net.oauth.jsontoken.JsonTokenTest): JWT header is missing the required 'alg' parameter
What version of the product are you using? On what operating system?
similar failures in trunk (r34) and the 1.0 tag.
Please provide any additional information below.
OSX 10.6, Java 1.6, maven 3.0.3
see attempt to use this here:
http://groups.google.com/group/in-app-payments/browse_thread/thread/d9aeddaab4d4
0f74
Original issue reported on code.google.com by [email protected]
on 17 Aug 2011 at 5:29
What steps will reproduce the problem?
1.
In pom.xml switch to a recent version of gson, 2.2.4 for example
2.
Use UrlBasedVerifierProvider to fetch a certicate from an url.
3.
What is the expected output? What do you see instead?
I should get a List<Verifier>
I get an exception
[INFO] com.google.gson.JsonSyntaxException:
com.google.gson.stream.MalformedJsonException: Use JsonReader.setLenient(true)
to accept malformed JSON at line 2 column 2
[INFO] at com.google.gson.JsonParser.parse(JsonParser.java:65)
[INFO] at com.google.gson.JsonParser.parse(JsonParser.java:45)
[INFO] at
net.oauth.jsontoken.discovery.UrlBasedVerifierProvider.findVerifier(UrlBasedVeri
fierProvider.java:58)
[INFO] at
net.oauth.jsontoken.JsonTokenParser.verifyAndDeserialize(JsonTokenParser.java:10
8)
How to Fix it
@
https://code.google.com/p/jsontoken/source/browse/trunk/src/main/java/net/oauth/
jsontoken/discovery/UrlBasedVerifierProvider.java#51
replace
String line = "";
do {
line = buff.readLine();
content.append(line + "\n");
} while (line != null);
with
String line = buff.readLine();
while (line != null) {
content.append(line + "\n");
line = buff.readLine();
} ;
The later won't add an unwanted "null" string at the end of the json string.
Original issue reported on code.google.com by [email protected]
on 22 Aug 2013 at 8:10
What steps will reproduce the problem?
1. Setup a gradle java project with Guava 17.0 (uses RateLimiter) and jsontoken
1.1 (for use with google wallet JwtGenerater) and try to utilize the
RateLimiter.
What is the expected output? What do you see instead?
No problems should appear.
However, I see this:
Caused by: java.lang.NoSuchMethodError:
com.google.common.base.Platform.systemNanoTime()J
at com.google.common.base.Ticker$1.read(Ticker.java:60) ~[guava-17.0.jar:na]
at com.google.common.util.concurrent.RateLimiter$SleepingTicker$1.read(RateLimiter.java:718) ~[guava-17.0.jar:na]
at com.google.common.util.concurrent.RateLimiter.<init>(RateLimiter.java:333) ~[guava-17.0.jar:na]
at com.google.common.util.concurrent.RateLimiter.<init>(RateLimiter.java:89) ~[guava-17.0.jar:na]
at com.google.common.util.concurrent.RateLimiter$Bursty.<init>(RateLimiter.java:692) ~[guava-17.0.jar:na]
at com.google.common.util.concurrent.RateLimiter.create(RateLimiter.java:247) ~[guava-17.0.jar:na]
at com.google.common.util.concurrent.RateLimiter.create(RateLimiter.java:242) ~[guava-17.0.jar:na]
at com.laquinta.service.propertymaster.dao.TripAdvisorDAO.<init>(TripAdvisorDAO.java:84) ~[TripAdvisorDAO.class:na]
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.8.0_05]
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) ~[na:1.8.0_05]
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.8.0_05]
at java.lang.reflect.Constructor.newInstance(Constructor.java:408) ~[na:1.8.0_05]
at org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:148) ~[spring-beans-4.0.5.RELEASE.jar:4.0.5.RELEASE]
... 54 common frames omitted
What version of the product are you using? On what operating system?
Guava 17.0
jsontoken 1.1
Please provide any additional information below.
The problem appears to be that jsontoken uses the old collections jar instead
of guava. (http://jsontoken.googlecode.com/svn/trunk/pom.xml).
Original issue reported on code.google.com by [email protected]
on 8 Jul 2014 at 12:21
Line 70 - there is
if (!Objects.equal(ourUri.getPath(), tokenUri.getPath())) {
throw new SignatureException("path in token URI (" + tokenUri.getAuthority() + ") is wrong");
}
while shoudl be
if (!Objects.equal(ourUri.getPath(), tokenUri.getPath())) {
throw new SignatureException("path in token URI (" + tokenUri.getPath() + ") is wrong");
}
Original issue reported on code.google.com by [email protected]
on 11 May 2014 at 7:59
What steps will reproduce the problem?
1. Instantiate similar to: JsonToken jsonToken = new JsonToken(signer);
2. Fill the object out;
3. Call jsonToken.serializeAndSign();
What is the expected output? What do you see instead?
Should get something like: {"alg":"RS256","typ":"JWT"}
But instead get: {"alg":"RS256"}
What version of the product are you using? On what operating system?
Using trunk (1.0 is similar).
Please provide any additional information below.
Google specifies that for obtaining access tokens on service accounts the "typ"
field must exist. See
https://developers.google.com/accounts/docs/OAuth2ServiceAccount#formingheader
for details.
Original issue reported on code.google.com by [email protected]
on 16 May 2013 at 9:42
In file net.oauth.jsontoken.discovery.UrlBasedVerifierProvider.java, method
public List<Verifier> findVerifier(String issuer, String keyId)
52 do {
53 line = buff.readLine();
54 content.append(line + "\n");
55 } while (line != null);
57 JsonParser parser = new JsonParser();
58 JsonObject jsonObject =
parser.parse(content.toString()).getAsJsonObject();
When code reads certificates by fetching from URL which expects simple json
format, for example:
{"keyid":"x509 certificate in Pem format", "keyid2":"x509 certificate in Pem format"..},
code at 52-55 appends null at the end of json.
When code 57-58 parses that json, it gives following error:
com.google.gson.stream.MalformedJsonException: Use JsonReader.setLenient(true)
to accept malformed JSON at line 2 column 2 path $
Solution:
Before appending line to content, make a check if(line != null)
do {
line = buff.readLine();
if(line != null)
content.append(line + "\n");
} while (line != null);
Original issue reported on code.google.com by [email protected]
on 3 Aug 2015 at 8:10
What steps will reproduce the problem?
1. Import project to Eclipse
2. Specify the url of repository: http://jsontoken.googlecode.com/svn/
3. Start check out
What is the expected output? What do you see instead?
the project is expected to be imported in Eclipse.Instead the check out process
get stuck in the file "FakeClock.java"
What version of the product are you using? On what operating system?
Windows 7, eclipse indigo service release 2
Please provide any additional information below.
Original issue reported on code.google.com by [email protected]
on 13 Jun 2013 at 12:00
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.