Skip to content

A JWT configured to be signed using the ES512 algorithm may have an invalid signature #2661

@robotdan

Description

@robotdan

A JWT configured to be signed using the ES512 algorithm may have an invalid signature

Description

It is possible that when using the ES512 algorithm to sign a JWT, the signature may not be valid.

Observed versions

1.48.0

Affects versions

>= 1.4.0. We introduced Elliptic Curve support in version 1.4.0.

Steps to reproduce

  1. Sign a JWT using ES512
  2. Verify the signature

In testing, one out of every 1-2k signatures may be invalid.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

Additional context

Add any other context about the problem here.

Metadata

Metadata

Labels

bugSomething isn't working

Type

No type

Projects

Status

Delivered

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions