ewilliams28/releases
1
0
Fork 0
mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-12 19:32:48 -06:00
Code Issues Packages Projects Releases Wiki Activity

chore: Remove unnecessary comment from bundle JWT verification impl (#8354)

Browse Source 
The concern expressed in this comment has been determined to be unwarranted, so removing it to not cause future confusion.

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
This commit is contained in:
Johan Fylling
2026-02-21 15:24:11 +01:00
committed by GitHub
parent 3a919b6469
commit fcb377212e
1 changed files with 0 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
v1/bundle/verify.go
-4
View File
@@ -144,10 +144,6 @@ func verifyJWTSignature(token string, bvc *VerificationConfig) (*DecodedSignatur
// Because we want to fallback to ds.KeyID when we can't find the
// keyID, we need to parse the payload here already.
//
// (lestrrat) Whoa, you're going to trust the payload before you
// verify the signature? Even if it's for backwrds compatibility,
// Is this OK?
decoder := base64.RawURLEncoding
payload := make([]byte, decoder.DecodedLen(len(payloadb64)))
if _, err := decoder.Decode(payload, payloadb64); err != nil {