Copilot commented on code in PR #13913:
URL: https://github.com/apache/apisix/pull/13913#discussion_r3915010337
##########
docs/en/latest/plugins/jwe-decrypt.md:
##########
@@ -178,7 +178,7 @@ To generate a JWE token for the Consumer, use any JWE
library that supports dire
base64url(header).<empty>.base64url(iv).base64url(ciphertext).base64url(tag)
```
-where the header is `{"alg":"dir","enc":"A256GCM","kid":"<consumer-key>"}`;
`alg` and `enc` are rejected if they are set to anything else. The IV must be
unique and randomly generated for every token; never reuse an IV with the same
key.
+where the header is `{"alg":"dir","enc":"A256GCM","kid":"<consumer-key>"}`;
`alg` and `enc` are rejected if they are set to anything else. `A256GCM` is
defined with a 96-bit IV and a 128-bit authentication tag, and a token carrying
either at another length is rejected. The IV must be unique and randomly
generated for every token; never reuse an IV with the same key.
Review Comment:
The sentence “a token carrying either at another length is rejected” is
grammatically awkward and a bit hard to parse in the English docs; rephrase to
clearly state that tokens with a non-96-bit IV or non-128-bit tag are rejected.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
