用COM.GOOGLE.COMMON.IO.BASEENCODING- decodode base64-＆gt;解码器感受：未识别的字符： -

Question

一般目标

我想替换com.google.api.client.util.base64用com.google.common.io.baseencoding库库库，因为它已弃用（我正在使用Java 11）。

我使用这些库来验证RSA签名的JWT。要创建公共密钥，我将n的字符串表示形式和我的证书的e值转换为biginteger。

问题

我的解决方案总是抛出以下例外：com.google.common.io.io.baseencoding $ desodingException：未识别的字符： -

我想解释的字符串中有-字符但是我不知道如何使用基本编码软件包来解决此问题。

有人遇到了这个问题并可以帮助我吗？

代码

是带有com.google.api.client.util.base64解码的代码：

package com.example;

import java.math.BigInteger;
import java.security.KeyFactory;
import java.security.NoSuchAlgorithmException;
import java.security.PublicKey;
import java.security.interfaces.RSAPublicKey;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.RSAPublicKeySpec;
import java.util.Calendar;

import com.auth0.jwk.InvalidPublicKeyException;
import com.auth0.jwk.JwkException;
import com.auth0.jwt.JWT;
import com.auth0.jwt.algorithms.Algorithm;
import com.auth0.jwt.interfaces.DecodedJWT;
import com.google.api.client.util.Base64;


public final class App {

    public final static String PUBLIC_KEY_ALGORITHM = "RSA";

    /**
     * Returns a {@link PublicKey} if the {@code 'alg'} is {@code 'RSA'}
     *
     * @return a public key
     * @throws InvalidPublicKeyException if the key cannot be built or the key type is not RSA
     */
    public static PublicKey getPublicKey() throws InvalidPublicKeyException {
        try {
            KeyFactory kf = KeyFactory.getInstance(PUBLIC_KEY_ALGORITHM);
            byte[] decodedPubN = Base64.decodeBase64(PUB_N);
            byte[] decodedPubE = Base64.decodeBase64(PUB_E);
            BigInteger modulus = new BigInteger(1, decodedPubN);
            BigInteger exponent = new BigInteger(1, decodedPubE);
            return kf.generatePublic(new RSAPublicKeySpec(modulus, exponent));
        } catch (InvalidKeySpecException e) {
            throw new InvalidPublicKeyException("Invalid public key", e);
        } catch (NoSuchAlgorithmException e) {
            throw new InvalidPublicKeyException("Invalid algorithm to generate key", e);
        }
    }

    /**
     * 
     * 
     * @param args The arguments of the program.
     * @throws JwkException
     */
    public static void main(String[] args) throws JwkException {

        DecodedJWT jwt = JWT.decode(TOKEN);
        PublicKey publicKey = getPublicKey();
        Algorithm algorithm = Algorithm.RSA256((RSAPublicKey) publicKey, null);
        algorithm.verify(jwt);
 
        if (jwt.getExpiresAt().before(Calendar.getInstance().getTime())) {
            throw new RuntimeException("Expired token!");
        }
    }
}

我使用com.google.common.io.baseencon.baseenconeconding 库：

/**
     * Returns a {@link PublicKey} if the {@code 'alg'} is {@code 'RSA'}
     *
     * @return a public key
     * @throws InvalidPublicKeyException if the key cannot be built or the key type is not RSA
     */
    public static PublicKey getPublicKey() throws InvalidPublicKeyException {
        try {
            KeyFactory kf = KeyFactory.getInstance(PUBLIC_KEY_ALGORITHM);
            BigInteger modulus = new BigInteger(1, BaseEncoding.base64().decode(pubN));
            BigInteger exponent = new BigInteger(1, BaseEncoding.base64().decode(pubE));
            return kf.generatePublic(new RSAPublicKeySpec(modulus, exponent));
        } catch (InvalidKeySpecException e) {
            throw new InvalidPublicKeyException("Invalid public key", e);
        } catch (NoSuchAlgorithmException e) {
            throw new InvalidPublicKeyException("Invalid algorithm to generate key", e);
        }
    }

Answer 1

像提到的评论一样，JWT使用base64url编码。我只需要更改baseencoding.base64（）。解码（pubn） baseencoding.base64url（）。解码（pubn）。