JWS returning OSEException: One or more header parameters not accepted by the JWS verifier when I add a custom non-registered parameter

I am using the JWS example on the wiki, which works fine. However, I would like to add a custom parameter, namely an expiration date. Here is the implemented code:

val sharedKey = "secret-shared-key" val fmt = DateTimeFormat.forPattern("yyyy-MM-dd HH:mm:SS")

def jwsToken(email: String): String = { val payLoad = new Payload(email) val header = new JWSHeader(JWSAlgorithm.HS256) header.setContentType(MimeTypes.TEXT)
val expiryDate = new DateTime().plusDays(1) header.setCustomParameter("expiry", fmt.print(expiryDate)) val jwsObject = new JWSObject(header, payLoad) val jwsSigner = new MACSigner(sharedKey.getBytes()) jwsObject.sign(jwsSigner) jwsObject.serialize() }

def verifyJwsTokenA: Option[Boolean] = { for { auth <-request.headers.get(AUTHORIZATION) } yield { val token = auth.split(" ").last val jwsObject = JWSObject.parse(token) val jwsHeader = jwsObject.getHeader val exp = jwsHeader.getCustomParameter("expiry").asInstanceOf[String]
if (fmt.parseDateTime(exp).isAfterNow) { val verifier = new MACVerifier(sharedKey.getBytes()) jwsObject.verify(verifier) } else false } }

I can't understand why the above code doesn't verify. Can someone please tell me what I am doing wrong?

Comments (6)