[OLTU-132] SignatureMethod should take in consideration also the header

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: oauth2-1.0.0
• Component/s: jose-jws
• Assignee: Antonio Sanso
• Reporter: Antonio Sanso
• Created: 20/Dec/13 10:46
• Updated: 01/Apr/14 11:48
• Resolved: 20/Dec/13 15:06

Description

Currently SignatureMethod doesn't take in consideration the header for calculate verifying the signature.

As per spec the input for the signature is:

WS Signing Input
ASCII(BASE64URL(UTF8(JWS Protected Header)) || '.' ||
BASE64URL(JWS Payload))