bumping jose version to address potential vulnerability

tymondesigns · Apr 7, 2015 · 5970a49 · 5970a49 · olso · Apr 7, 2015
1 parent 92bb9a1
commit 5970a49
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/composer.json b/composer.json
@@ -24,7 +24,7 @@
         "php": ">=5.4.0",
         "illuminate/support": "~4.0",
         "illuminate/http": "~4.0",
-        "namshi/jose": "2.0.*",
+        "namshi/jose": "2.2.*",
         "nesbot/carbon": "~1.0"
     },
     "require-dev": {

diff --git a/src/Providers/JWT/NamshiAdapter.php b/src/Providers/JWT/NamshiAdapter.php
@@ -53,7 +53,7 @@ public function decode($token)
             throw new TokenInvalidException('Could not decode token: ' . $e->getMessage());
         }
 
-        if (! $jws->verify($this->secret)) {
+        if (! $jws->verify($this->secret, $this->algo)) {
             throw new TokenInvalidException('Token Signature could not be verified.');
         }