Incorrect reliance on default encoding

[Thierry De Leeuw]

"getBytes()" should probably be replaced by "getBytes(Charset.forName("UTF-8"))" I found 4 occurences:

com.nimbusds.jose.crypto.AESCBC#encryptWithConcatKDF

byte[] mac = HMAC.compute(cik, macInput.getBytes(), macProvider);

com.nimbusds.jose.crypto.AESCBC#decryptWithConcatKDF

byte[] mac = HMAC.compute(cik, macInput.getBytes(), macProvider);

com.nimbusds.jose.crypto.LegacyConcatKDF#generateCEK

byte[] encBytes = enc.toString().getBytes();

com.nimbusds.jose.crypto.LegacyConcatKDF#generateCIK

byte[] encBytes = enc.toString().getBytes();

[Connect2id OSS]

Thanks for spotting this! Fixed in 494aaea.

[Connect2id OSS]

Fix is now on Maven central: http://search.maven.org/#artifactdetails|com.nimbusds|nimbus-jose-jwt|5.3|jar

[Vladimir Dzhuvinov]

Closing the issue as resolved.