xaicron/p5-JSON-WebToken — pull request #2 by ritou (2013-02-08 14:22:54+00:00)
Title: added signature check in case of alg is none

decodeメソッドについて、alg=noneのときにsignatureの値が空かどうかのチェックを追加しました。

http://tools.ietf.org/html/draft-ietf-oauth-json-web-token-06
> A plaintext JWT is a JWS using the "none" JWS "alg" header parameter value
> defined in JSON Web Algorithms (JWA) [JWA]; it is a JWS with the
> empty string for its JWS Signature value.