wip

Author: Cloud11PL

.changeset/purple-colts-guess.md

@@ -0,0 +1,5 @@
+---
+"@saleor/app-sdk": patch
+---
+
+WIP

src/verify-jwt.ts

@@ -61,7 +61,11 @@ export const verifyJWT = async ({
 
     const JWKS = jose.createRemoteJWKSet(new URL(getJwksUrlFromSaleorApiUrl(saleorApiUrl)));
     debug("Trying to compare JWKS with token");
-    await jose.jwtVerify(token, JWKS);
+    await jose.jwtVerify(token, JWKS, {
+      crit: {
+        b64: true,
+      },
+    });
   } catch (e) {
     debug("Failure: %s", e);
     debug("Will return with Bad Request");

src/verify-signature.ts

@@ -23,6 +23,9 @@ export const verifySignatureFromApiUrl = async (
     protected: header,
     payload: rawBody,
     signature: jwsSignature,
+    header: {
+      b64: true,
+    },
   };
 
   const remoteJwks = jose.createRemoteJWKSet(
@@ -52,6 +55,9 @@ export const verifySignatureWithJwks = async (jwks: string, signature: string, r
     protected: header,
     payload: rawBody,
     signature: jwsSignature,
+    header: {
+      b64: true,
+    },
   };
 
   let localJwks: jose.FlattenedVerifyGetKey;