Key length fix

Author: TimUnderhay

src/ngx_http_auth_jwt_module.c

@@ -131,6 +131,7 @@ static ngx_int_t ngx_http_auth_jwt_handler(ngx_http_request_t *r)
 	time_t exp;
 	time_t now;
 	ngx_str_t auth_jwt_algorithm;
+	int keylen;
 
 	jwtcf = ngx_http_get_module_loc_conf(r, ngx_http_auth_jwt_module);
 
@@ -151,8 +152,9 @@ static ngx_int_t ngx_http_auth_jwt_handler(ngx_http_request_t *r)
 	auth_jwt_algorithm = jwtcf->auth_jwt_algorithm;
 	if (auth_jwt_algorithm.len == 0 || (auth_jwt_algorithm.len == sizeof("HS256") - 1 && ngx_strncmp(auth_jwt_algorithm.data, "HS256", sizeof("HS256") - 1)==0))
 	{
-		ngx_log_debug(NGX_LOG_DEBUG, r->connection->log, 0, "got to 0");
-		keyBinary = ngx_palloc(r->pool, jwtcf->auth_jwt_key.len / 2);
+		ngx_log_error(NGX_LOG_DEBUG, r->connection->log, 0, "got to 0");
+		keylen = jwtcf->auth_jwt_key.len / 2;
+		keyBinary = ngx_palloc(r->pool, keylen);
 		if (0 != hex_to_binary((char *)jwtcf->auth_jwt_key.data, keyBinary, jwtcf->auth_jwt_key.len))
 		{
 			ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, "failed to turn hex key into binary");
@@ -162,15 +164,16 @@ static ngx_int_t ngx_http_auth_jwt_handler(ngx_http_request_t *r)
 	else if ( auth_jwt_algorithm.len == sizeof("RS256") - 1 && ngx_strncmp(auth_jwt_algorithm.data, "RS256", sizeof("RS256") - 1) == 0 )
 	{
 		// in this case, 'Binary' is a misnomer, as it is the private key string itself
-		ngx_log_debug(NGX_LOG_DEBUG, r->connection->log, 0, "got to 1");
+		ngx_log_error(NGX_LOG_DEBUG, r->connection->log, 0, "got to 1");
 		keyBinary = ngx_palloc(r->pool, jwtcf->auth_jwt_key.len);
 		ngx_memcpy(keyBinary, jwtcf->auth_jwt_key.data, jwtcf->auth_jwt_key.len);
-
+		keylen = jwtcf->auth_jwt_key.len;
 	}
 
 	// validate the jwt
-	ngx_log_debug(NGX_LOG_DEBUG, r->connection->log, 0, "trying to decode JWT");
-	jwtParseReturnCode = jwt_decode(&jwt, jwtCookieValChrPtr, keyBinary, jwtcf->auth_jwt_key.len / 2);
+	ngx_log_error(NGX_LOG_DEBUG, r->connection->log, 0, "trying to decode JWT");
+	jwtParseReturnCode = jwt_decode(&jwt, jwtCookieValChrPtr, keyBinary, keylen);
+
 	if (jwtParseReturnCode != 0)
 	{
 		ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, "failed to parse jwt");