refactor: catch type error when decoding base64url signature (#569)

Co-authored-by: Filip Skokan <panva.ip@gmail.com>
panva · Sep 1, 2023 · 935e920 · 935e920
1 parent f57c197
commit 935e920
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/jws/flattened/verify.ts b/src/jws/flattened/verify.ts
@@ -169,7 +169,12 @@ export async function flattenedVerify(
     encoder.encode('.'),
     typeof jws.payload === 'string' ? encoder.encode(jws.payload) : jws.payload,
   )
-  const signature = base64url(jws.signature)
+  let signature: Uint8Array
+  try {
+    signature = base64url(jws.signature)
+  } catch {
+    throw new JWSInvalid('Failed to parse the base64url encoded signature')
+  }
   const verified = await verify(alg, key, signature, data)
 
   if (!verified) {