check format of payload to decode

fident · Jan 30, 2020 · 5eb5657 · 5eb5657
1 parent ba89e2c
commit 5eb5657
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Fident.php b/src/Fident.php
@@ -41,6 +41,10 @@ public function verifyJwt(string $rawJwt): bool
   public function decodeJwtPayload(string $rawJwt): ?FidentJwtData
   {
     $data = new FidentJwtData();
+    if(substr_count($rawJwt, '.') !== 2)
+    {
+      return $data;
+    }
 
     [, $payload64,] = explode('.', $rawJwt, 3);
     $payload = json_decode(Strings::urlsafeBase64Decode($payload64));