fix: prepend header payload to generated signature

NASA-IMPACT · Jan 15, 2025 · 58dc10f · 58dc10f
1 parent f1526b2
commit 58dc10f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -282,12 +282,13 @@ jobs:
           JWT_HEADER_PAYLOAD="${BASE64_HEADER}.${BASE64_PAYLOAD}"
           echo "Header.Payload: $JWT_HEADER_PAYLOAD"
 
-          JWT=$(printf '%s' "$JWT_HEADER_PAYLOAD" | openssl dgst -sha256 -sign app.pem | openssl base64 -A | tr -d '=' | tr '/+' '_-')
+          JWT_SIGNATURE=$(printf '%s' "$JWT_HEADER_PAYLOAD" | openssl dgst -sha256 -sign app.pem | openssl base64 -A | tr -d '=' | tr '/+' '_-')
           # Debug: Check if JWT was created
           if [ -z "$JWT" ]; then
               echo "Error: Failed to create JWT!"
               exit 1
           fi
+          JWT="$JWT_HEADER_PAYLOAD.$JWT_SIGNATURE"
 
           echo "::add-mask::$JWT"