Prevent none algorithm from being valid with a key configured

Author: kylef

JSONWebToken.podspec

@@ -1,6 +1,6 @@
 Pod::Spec.new do |spec|
   spec.name = 'JSONWebToken'
-  spec.version = '1.0.0'
+  spec.version = '1.0.1'
   spec.summary = 'Swift library for JSON Web Tokens (JWT).'
   spec.homepage = 'https://github.com/kylef/JSONWebToken.swift'
   spec.license = { :type => 'BSD', :file => 'LICENSE' }

JWT/JWT.swift

@@ -13,6 +13,9 @@ public enum Algorithm : Printable {
 
   static func algorithm(name:String, key:String?) -> Algorithm? {
     if name == "none" {
+      if let key = key {
+        return nil  // We don't allow nil when we configured a key
+      }
       return Algorithm.None
     } else if let key = key {
       if name == "HS256" {

JWTTests/JWTTests.swift

@@ -143,6 +143,11 @@ class JWTDecodeTests : XCTestCase {
       XCTAssertEqual(payload as NSDictionary, ["test": "ing"])
     }
   }
+
+  func testNoneFailsWithSecretAlgorithm() {
+    let jwt = "eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJ0ZXN0IjoiaW5nIn0."
+    assertFailure(decode(jwt, key:"secret"))
+  }
 }
 
 // MARK: Helpers