Skip to content
This repository was archived by the owner on May 20, 2025. It is now read-only.
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 2 additions & 4 deletions android/app/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,5 @@ android {

dependencies {
compile "com.facebook.react:react-native:+"
//todo as required minimal sdk version will be more then 23, upgrade this to latest version
//see https://github.com/auth0/java-jwt/issues/131
compile 'com.auth0:java-jwt:2.2.2'
}
compile 'com.nimbusds:nimbus-jose-jwt:5.1'
}
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,11 @@
import android.content.Context;
import android.util.Base64;

import com.auth0.jwt.JWTVerifier;
import java.security.interfaces.*;

import com.nimbusds.jose.*;
import com.nimbusds.jose.crypto.*;
import com.nimbusds.jwt.*;

import org.json.JSONArray;
import org.json.JSONException;
Expand Down Expand Up @@ -176,11 +180,17 @@ public static void verifyFolderHash(String folderPath, String expectedHash) {

public static Map<String, Object> verifyAndDecodeJWT(String jwt, PublicKey publicKey) {
try {
final JWTVerifier verifier = new JWTVerifier(publicKey);
final Map<String, Object> claims = verifier.verify(jwt);
CodePushUtils.log("JWT verification succeeded:\n" + claims.toString());
return claims;
} catch (Exception e) {
SignedJWT signedJWT = SignedJWT.parse(jwt);
JWSVerifier verifier = new RSASSAVerifier((RSAPublicKey)publicKey);
if (signedJWT.verify(verifier)) {
Map<String, Object> claims = signedJWT.getJWTClaimsSet().getClaims();
CodePushUtils.log("JWT verification succeeded:\n" + claims.toString());
return claims;
}
return null;
} catch (Exception ex) {
CodePushUtils.log(ex.getMessage());
CodePushUtils.log(ex.getStackTrace().toString());
return null;
}
}
Expand Down Expand Up @@ -248,5 +258,4 @@ public static void verifySignature(String folderPath, String stringPublicKey) th

CodePushUpdateUtils.verifyFolderHash(folderPath, contentHash);
}

}