Closed
Bug 774924
Opened 13 years ago
Closed 13 years ago
null audience in assertion causes browserid.org/verify to return empty reply
Categories
(Mozilla Labs :: Identity, defect)
Tracking
(Not tracked)
RESOLVED
INVALID
People
(Reporter: nalexander, Unassigned)
Details
(Whiteboard: [qa+])
The following string is a cert that causes bid/verify to timeout:
s = "eyJhbGciOiJSUzI1NiJ9.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.LHcJf5MX3vZ30V5Q2JGww0UEpYy5LkQ_iBZ9R9-ehDDnv61aGigwbtXiZdxBz7exAE1G6WZdeRpBQLsSSqOmflhebhpGYB9yhnn1WJTPZ7XcjsuXSHEgFygLs2m3__4JfCJeOPt634PzrviPDzYPKi7RVP1lI7p5kdrDf2yftVx_Uc1kKXjs-JCbkfkwei15ifl-Tqg1h3wUqM1Z4UM3jKA_YpWEHoivlDFuKMoCpGLuqa5MHtSr7oVujWgoqoHzwByyxeUDpBbtXOjHfYGC1E4bajMhD8YLk_PYqEEQqmpYr98SDtc02fMqqTbsId-nNIvoGkevJiSixCZ1SZGZdw~eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjEzNDI1Njk4NjcyMTQsImF1ZCI6Imh0dHA6XC9cL2xvY2FsaG9zdDo4MDgwIiwiaXNzIjoiMTI3LjAuMC4xIiwiaWF0IjoxMzQyNTY2MjY3MjE0fQ.Q9cY6Q1RhIf1IL2pjzxT4l-lI8nWfTl8rYtC5LD7HF_H8kLge_VzlxhcBVmxq9UnFy4WkHvZuTzWs_7RFI08JNDUnU4pR6kBUATe2M6oahUc0l6PEZm5saOhkZaxRmagQgyLYJoxfux0RJRymVRPL8_5ktw0_Bkj6xGSGPLeYsA"
import base64
def from_base64url(src):
return base64.urlsafe_b64decode(src + '=' * (len(src) % 4 ))
print from_base64url(s.split("~")[0].split(".")[1])
output is:
{"exp":1342569867180,"principal":{"email":"test@mockmyid.com"},"public-key":{"alg":"RS","e":"65537","n":"100700173664488548716929914434751602090684535420352852792521237209297378976866482700833958301171408243137859710695670663645100576988119306039465621759148556989940435376534640992563082491925680195102563758225191420364461869805631997607177362143801683537879541908940888372332479928290920125145672999093361720171"},"aud":null,"iss":"mockmyid.com","iat":1342566267180}
Without the "aud":null, everything continues apace.
|
||
Updated•13 years ago
|
Whiteboard: [qa+]
|
|
||
Comment 1•13 years ago
|
||
Let's move this over to GitHub...
|
Reporter | |
Comment 2•13 years ago
|
||
Actually, scratch that: things seem better with `"algorithm":"RS"` for the public-key.
|
|
Reporter | |
Comment 3•13 years ago
|
||
This could have also been triggered by signing/signing with too short RSA keys.
|
|
||
Comment 4•13 years ago
|
||
So :nalexander do you think this is still a browserid issue?
If so, I will create a GitHub issue and transfer the bug contents (or a least a Bugzilla link) there...
|
|
Reporter | |
Comment 5•13 years ago
|
||
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → INVALID
You need to log in
before you can comment on or make changes to this bug.
Description
•