@@ -25,7 +25,7 @@ impl ClientSignJwt {
2525 JwtClaims {
2626 iss : Uuid :: new_v4 ( ) ,
2727 sub : Uuid :: new_v4 ( ) ,
28- aud : "" . to_string ( ) ,
28+ aud : "placeholder " . to_string ( ) ,
2929 exp : 0 ,
3030 jti : "" . to_string ( ) ,
3131 iat : OffsetDateTime :: now_utc ( ) . unix_timestamp ( ) ,
@@ -34,7 +34,8 @@ impl ClientSignJwt {
3434
3535 pub fn decode ( self , pubkey : impl AsRef < [ u8 ] > ) -> Result < ClientDecodeJwt , KernelError > {
3636 let key = DecodingKey :: from_rsa_pem ( pubkey. as_ref ( ) ) ?;
37- let val = Validation :: new ( Algorithm :: RS512 ) ;
37+ let mut val = Validation :: new ( Algorithm :: RS512 ) ;
38+ val. validate_aud = false ; // FixMe: Should validate aud.
3839 let dec = jsonwebtoken:: decode :: < JwtClaims > ( self . as_ref ( ) , & key, & val) ?;
3940 Ok ( ClientDecodeJwt ( dec. claims ) )
4041 }
@@ -128,42 +129,43 @@ mod tests {
128129 let ticket = TicketId :: default ( ) ;
129130
130131 let test_privkey = r#"-----BEGIN PRIVATE KEY-----
131- MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDkEVd+zWLER7H/
132- XkcC8jHojBzlNj0QRDwyiGeIu+GTJdbYXUZ6a5gFdSJiQO/T0JhGhX0Q23LwOBL/
133- vPWZsW/oTzcIpzGfvvg0HJQRiixmBGfxFgultTyoXVd21dhl+TzA1tJZbEVFcVZ1
134- JbvzbZoLA46G2gX4aaXqEEqbgHD8PN6pZQkcTjEaEsruvzUiFPTx4ODQKemYyRxn
135- ES6NQcbuxN20++pFW81RsCAf4c1bc+EfCjPXLzdGRAT/NAz6etl7il7yL7Dm6tHJ
136- uY7r5LMozZDXLqA+iRjmG/DvWTvd5dgZGP1+jZNYbFc0BSkXp+n8Ki1tJ41Wc1cU
137- wd2P/KudAgMBAAECggEABozs9hUQwichA1RXi8vIXS/btfBR3qwRt+MtE236CPpB
138- lSNQs+bFOLA9lZQx5I6Ni8ZSakUzTuz9YV+xr4FmKnD5WVlGq++V52vutiDsLN3x
139- h6jPcCn9clnZT5jNcgME7gZS3QNRa1uEVTGz7UZM8gYJy5vAJ3tkADi0O9/Q3vMU
140- DbZNtFInjONlmE7HenuVG5JHEPDMnGGa2gWEyFjPqqoQl2WkC3tQTgiNHKWqnb6G
141- IlqS7S57wfzINBB0xyATL0ccALII7VCtG0oXD9/5X/knJngOyIoOR01plfpAijQ6
142- LKghxzBdnenzSKUYiQp7pwlzdbkUX8dPVSXEmqLqYQKBgQD98bDD4RT/LeE8d8YY
143- DbCgO+JxzGY5vK/XJt1lmgGpnhCqVFLlujkuckyqdqYmbR6RBv46LlUoP6cawEI9
144- U6ookHPkIopRMqoOupumnehVdmtGAtOgUc45GPYP4c+QYj872nNsGd5aoxip58Sp
145- GES0nrEqNj7TfDdacAfFeifBuQKBgQDl6gV/T0e4JnRnSopYy0Kc6CBBslFe6hPY
146- F6s4iPPcd/RElkIvmA1MIvSZRDbPlbtgND0f0Y0XE5h936dk/iXr/FHrZsimSV1P
147- aszkul+/wtBM917F/2JRFlA8cCksquuaLNWQCPRhyb2YXQToJ/VzoN64KdMt4Yfc
148- Tbe5pTJ7BQKBgFONgSaB2UG4m8IkenYRkwq1iWT95qiaj5SPwgqa6G8hhcQ1KG1T
149- n1rL2rO/hB1ii8sV7PHBqt0qTFX96g15iKP+G1N1leLvc4qTFYF1tSrhYpxPc8ft
150- AphAwT0qg/uyh7Gux4lK3aEexo+opUkppflzuUD1RiiZVzEXaUctUQVpAoGBAI9y
151- 1f86veq9w3722R7Rozw28HlNAswPjFYVXnUlrdFu3m80uRLs8c8BOE+waepW59P8
152- g+6oVjmBtnFC7DRtBcgZZBtVw/dMavW0EybaygbhTAnZhb5Pu04Qd/tdl7MQ6XMG
153- ajE2BRRGRQ8daoRW+iQsyQlqvyIvRw9DRlCEK9zpAoGBAOt5b+dv9QfoAUjxx1dH
154- bg+skddR4yECjixizTZW0MzmpJX+XyjEadxGzfRNFUigrOKBPKDZszATfHjkTPEW
155- jkVDCHoCcH933Jm9OoyDBipOcS+3nJXICmTYJbQctnV39ifHaHc33vfPwD30QCbp
156- JlWfCE3u+4pT68/Fc8kOq6oT
157- -----END PRIVATE KEY-----"# ;
132+ MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDbMeVgbOOI6uT/
133+ Jj4JqP3FTP2ymBTG15jcOZekMxgeYr/D5Yn4G8OZyVqc5UfPnUe1nZYxIOz5G6kV
134+ scToNVPfqyvsyp9wpV0jZiUpOwG7zv6sSuG4cIXjg1ZBycNNEaYLqki4xw/yfei+
135+ 46DHYn/MYU7SipmGSIgcBRXEixvnZU4WyUl1+hfzsTcWUe6s7UDR/SLm8PnmUALA
136+ aKhyQro46vSTMUD8W01drehnxtk+MjLOPnWI21N7rzVp3fecKn+rYBZJWZhoaMIa
137+ eKFgASVqt1u19Zjs1sBFhiYegkRh/UO0v8wDOEN5mv7RslzTkaEkNJ1DjUrcDbAc
138+ QZeuAdwdAgMBAAECggEAJ2EZcm9dmXWJ2oUGVDn2DYI9ed50rRyCq9307lz3kk3v
139+ YcRVOyvRwkk4bEOM2THKdkhveTgPGtnrUKh1Vbpu7RoVdB8a8ePjjb6GIpglQZZ4
140+ jn+NedNNWoh38K3M1oW7LRFUq02oAcq5C8JdWjTJ/O/md1DLMCLLwSzwsjTDuJhX
141+ SK//LMg4E1rYkdMxJMx7VD2KyGyfSM4akC/Fqgca3v707nv1nRB8W+BAxGfGgOGa
142+ 5381KlTxSX1f3Y7EJ1qziGtu1ROSUCkKXGVLOSD6wD5axO7Yi9JrEQ1yrOFKstmi
143+ MobfUCMYtHb94196/fOs1hbcU4WX0gMvH8ckGjuNgQKBgQDbj7cyqFY7d3btsLR5
144+ le/UUHn0fIYrVI4J3UNOC3K5GiJkpPdgSgNSYCmQZ6t7WKfsh5NeA4BOdKEBBFQd
145+ +Ao1tjAmKe0xjiGoOVDGVT2mmE6GGkR+8o7Iu7eG3JJ6Rb/HG8mhjJus8HVPhYlN
146+ 5pQZI45vuLt+AcDRNF5UR2hV8QKBgQD/kpwos9KiF+Lh19BFYuFqk6uk6jDj7urR
147+ qCwNnD1Z6m4zXJ3kgEoe/RGdWIBdOuZs3goX9z36wWurWmR1cpPPm7deWQh8Kpwa
148+ rK0Pef7bHYdW3O27Vp+ofi9tVDOMnleOKYcxqPWKljMSFsYTuLTDPDAEs2/XYoTb
149+ A8GbpZMM7QKBgQC3Msw+RX1mMwEVxNphlPy+38NSf1CH+Q5nJqrRBPZdgnPuHEOY
150+ oUjyQ/CKYCYSTmAXGOyahjtZuzDYI194fg0u0eyM+3DBZ4Gn1uMSCe/eALmMZYB/
151+ mC4RSagRrBvAUFB7dzEfTa5bd2u6xYZSbLFn5GYlzDMNKbNUG+kVU1u4UQKBgQC9
152+ 7fafSQP/8kBqFjhxWEqtKZElveUXfzaDGLekZbgyWkYLZYjxh2WOIgQ1KtA6eMtF
153+ nL1jkho9gADEFykRH1U5tD9Rnljv7bqVGD6EgeUkcY1iwEzsLDP6w8v7M9gbaJEo
154+ 1TPjc+0GURkjGEmb3mh3rwMAe1lid5TELsZzJVljAQKBgQCtFC5jt8e83ZavJ5QI
155+ O8uLmYw53sgKh0A0V6b0Gdtb43WFwjklq06x0UvmOIkWDGeInoG1++vni6kKs+fI
156+ uL+2bEiLihRW+6dEVtkdLp7ubr8wGC8Khg79j8KGWFpk5UnnkgVFcNko1XyoXj5j
157+ Mdcoc6fLHcNU3ck83PBHSXuahg==
158+ -----END PRIVATE KEY-----
159+ "# ;
158160
159161 let test_pub_key = r#"-----BEGIN PUBLIC KEY-----
160- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BFXfs1ixEex/15HAvIx
161- 6Iwc5TY9EEQ8MohniLvhkyXW2F1GemuYBXUiYkDv09CYRoV9ENty8DgS/7z1mbFv
162- 6E83CKcxn774NByUEYosZgRn8RYLpbU8qF1XdtXYZfk8wNbSWWxFRXFWdSW7822a
163- CwOOhtoF+Gml6hBKm4Bw/DzeqWUJHE4xGhLK7r81IhT08eDg0CnpmMkcZxEujUHG
164- 7sTdtPvqRVvNUbAgH+HNW3PhHwoz1y83RkQE/zQM+nrZe4pe8i+w5urRybmO6+Sz
165- KM2Q1y6gPokY5hvw71k73eXYGRj9fo2TWGxXNAUpF6fp/CotbSeNVnNXFMHdj/yr
166- nQIDAQAB
162+ MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zHlYGzjiOrk/yY+Caj9
163+ xUz9spgUxteY3DmXpDMYHmK/w+WJ+BvDmclanOVHz51HtZ2WMSDs+RupFbHE6DVT
164+ 36sr7MqfcKVdI2YlKTsBu87+rErhuHCF44NWQcnDTRGmC6pIuMcP8n3ovuOgx2J/
165+ zGFO0oqZhkiIHAUVxIsb52VOFslJdfoX87E3FlHurO1A0f0i5vD55lACwGiockK6
166+ OOr0kzFA/FtNXa3oZ8bZPjIyzj51iNtTe681ad33nCp/q2AWSVmYaGjCGnihYAEl
167+ ardbtfWY7NbARYYmHoJEYf1DtL/MAzhDeZr+0bJc05GhJDSdQ41K3A2wHEGXrgHc
168+ HQIDAQAB
167169-----END PUBLIC KEY-----"# ;
168170
169171 let mut jwt = ClientSignJwt :: claims ( ) ;
0 commit comments