fix(jwks): base64url encode exponent and modulus

uc-cdis · Feb 22, 2018 · b65ad35 · b65ad35
1 parent a929cb2
commit b65ad35
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/fence/jwt/keys.py b/fence/jwt/keys.py
@@ -11,6 +11,7 @@
         return default private key for the app
 """
 
+import base64
 from cryptography.hazmat.backends import default_backend
 from cryptography.hazmat.primitives import serialization
 import flask
@@ -53,8 +54,8 @@ def public_key_to_jwk(self):
             'use': 'sig',
             'key_ops': 'verify',
             'kid': self.kid,
-            'n': n,
-            'e': e,
+            'n': base64.urlsafe_b64encode(str(n)),
+            'e': base64.urlsafe_b64encode(str(e)),
         }
         return jwk
 

diff --git a/tests/rfc7517/test_jwks.py b/tests/rfc7517/test_jwks.py
@@ -1,3 +1,4 @@
+import base64
 from cryptography.hazmat.backends import default_backend
 from cryptography.hazmat.primitives import serialization
 from cryptography.hazmat.primitives.asymmetric.rsa import RSAPublicNumbers
@@ -48,8 +49,8 @@ def test_response_values(app, client):
         # Attempt to reproduce the public key from the values for the public
         # modulus and exponent provided in the response, using cryptography
         # primitives.
-        n = int(key['n'])
-        e = int(key['e'])
+        n = int(base64.b64decode(key['n']))
+        e = int(base64.b64decode(key['e']))
         numbers = RSAPublicNumbers(e, n)
         key = numbers.public_key(default_backend())
         key_pem = key.public_bytes(