mirrors/PocketMine-MP
1
0
Fork 0
mirror of https://github.com/pmmp/PocketMine-MP.git synced 2025-09-06 17:59:48 +00:00
Code Issues Projects Releases Wiki Activity

JwtUtils: handle DER <-> raw signature conversion in-house, drop fgrosse/phpasn1 dependency

Browse Source 
normally I would hesitate to reinvent the wheel, but we only need a tiny subset of the ASN.1 spec which is trivial to implement by itself.
I'd rather this than depend on another library that could introduce security vulnerabilities (I'm looking at you, jsonmapper).

closes #5935
This commit is contained in:
Dylan K. Taylor
2023-07-24 13:35:32 +01:00
parent 4eb9dacd3c
commit b078e01b65
3 changed files with 85 additions and 125 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
composer.json
View File

@ -32,7 +32,6 @@
"ext-zlib": ">=1.2.11",
"composer-runtime-api": "^2.0",
"adhocore/json-comment": "~1.2.0",
"fgrosse/phpasn1": "~2.5.0",
"pocketmine/netresearch-jsonmapper": "~v4.2.1000",
"pocketmine/bedrock-block-upgrade-schema": "~3.1.0+bedrock-1.20.10",
"pocketmine/bedrock-data": "~2.4.0+bedrock-1.20.10",