Wrong encode/decode after restart

[maxim092001]

Hi!

Thanks for an amazing book and project!

However, I've faced some strange issues while I was writing my own implementation. While my app is working users can create their account, get JWT token, log out and log in again. Username and encoded password saved into postgres.

However, each time I restart my app encoder and decoder works differently, so for the same password, its encoded representation is different. With that login doesn't work.

All users have the same password but were created before/after multiple restarts.

I found out that removing random generation for ivBytes fixed this problem, but I don't think this is the best solution.

Thanks!

P.S. you can find my implementation here

[gvolpe]

Hi,

That's a good finding, thanks for reporting it!

That's definitely a bug in that (ugly-java-stuff) implementation and I will get it fixed at some point, though, that's only there as a reference and readers are encouraged to write their own. The interface is what matters most; the interpreter could be anything, really.