-
-
Notifications
You must be signed in to change notification settings - Fork 116
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix(realtime): prevent sending expired tokens (#618)
* fix(realtime): prevent sending expired tokens * fix test * test * remove jwt-kit * update packages
- Loading branch information
Showing
8 changed files
with
102 additions
and
54 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,40 @@ | ||
| // | ||
| // JWT.swift | ||
| // Supabase | ||
| // | ||
| // Created by Guilherme Souza on 28/11/24. | ||
| // | ||
|
|
||
| import Foundation | ||
|
|
||
| package enum JWT { | ||
| package static func decodePayload(_ jwt: String) -> [String: Any]? { | ||
| let parts = jwt.split(separator: ".") | ||
| guard parts.count == 3 else { | ||
| return nil | ||
| } | ||
|
|
||
| let payload = String(parts[1]) | ||
| guard let data = base64URLDecode(payload) else { | ||
| return nil | ||
| } | ||
| let json = try? JSONSerialization.jsonObject(with: data, options: []) | ||
| guard let decodedPayload = json as? [String: Any] else { | ||
| return nil | ||
| } | ||
| return decodedPayload | ||
| } | ||
|
|
||
| private static func base64URLDecode(_ value: String) -> Data? { | ||
| var base64 = value.replacingOccurrences(of: "-", with: "+") | ||
| .replacingOccurrences(of: "_", with: "/") | ||
| let length = Double(base64.lengthOfBytes(using: .utf8)) | ||
| let requiredLength = 4 * ceil(length / 4.0) | ||
| let paddingLength = requiredLength - length | ||
| if paddingLength > 0 { | ||
| let padding = "".padding(toLength: Int(paddingLength), withPad: "=", startingAt: 0) | ||
| base64 = base64 + padding | ||
| } | ||
| return Data(base64Encoded: base64, options: .ignoreUnknownCharacters) | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
6 changes: 3 additions & 3 deletions
6
Tests/AuthTests/JWTTests.swift → Tests/HelpersTests/JWTTests.swift
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,13 +1,13 @@ | ||
| import XCTest | ||
|
|
||
| @testable import Auth | ||
| @testable import Helpers | ||
|
|
||
| final class JWTTests: XCTestCase { | ||
| func testDecodeJWT() throws { | ||
| let token = | ||
| "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJhdXRoZW50aWNhdGVkIiwiZXhwIjoxNjQ4NjQwMDIxLCJzdWIiOiJmMzNkM2VjOS1hMmVlLTQ3YzQtODBlMS01YmQ5MTlmM2Q4YjgiLCJlbWFpbCI6ImhpQGJpbmFyeXNjcmFwaW5nLmNvIiwicGhvbmUiOiIiLCJhcHBfbWV0YWRhdGEiOnsicHJvdmlkZXIiOiJlbWFpbCIsInByb3ZpZGVycyI6WyJlbWFpbCJdfSwidXNlcl9tZXRhZGF0YSI6e30sInJvbGUiOiJhdXRoZW50aWNhdGVkIn0.CGr5zNE5Yltlbn_3Ms2cjSLs_AW9RKM3lxh7cTQrg0w" | ||
| let jwt = try decode(jwt: token) | ||
| let jwt = JWT.decodePayload(token) | ||
| let exp = try XCTUnwrap(jwt?["exp"] as? TimeInterval) | ||
| XCTAssertEqual(exp, 1648640021) | ||
| XCTAssertEqual(exp, 1_648_640_021) | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters