[CXF-8651] JOSE: JwsJwtCompactProducer not parsing headers properly if the claims contains \n

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.5.0, 3.4.4
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown

Language

JAVA

• Assignee: Unassigned
• Reporter: Roberto Viani Junior
• Created: 01/Feb/22 16:21
• Updated: 01/Feb/22 16:22

Description

The JWS is generate with an invalid payload if I try to set a claim like this:

JwtClaims claims = new JwtClaims();

String claim = "GET\n\n\nWed, 19 Jan 2022 15:25:29 GMT\n/test/16c8a1ec-8d75-47a1-b138-46746713b8d8";
claims.setClaim("test", claim);

JwsCompactProducer jwsProducer = new JwsJwtCompactProducer(claims);

 

The JWS payload result will be: eyJ0ZXN0IjoiR0VUCgoKV2VkLCAxOSBKYW4gMjAyMiAxNToyNToyOSBHTVQKL3Rlc3QvMTZjOGExZWMtOGQ3NS00N2ExLWIxMzgtNDY3NDY3MTNiOGQ4In0

And when I decode the result is:
"{\"test\":\"GET\n\n\nWed, 19 Jan 2022 15:25:29 GMT\n/test/16c8a1ec-8d75-47a1-b138-46746713b8d8\"}"

This is an invalid payload because the json is stringify.. the json should be:

{ "test" : "GET\n\n\nWed, 19 Jan 2022 15:25:29 GMT\n/test/16c8a1ec-8d75-47a1-b138-46746713b8d8" }