Skip to content

Tags: PayBox/jwt

Tags

v4.5.2

Toggle v4.5.2's commit message
fix 4.5.2

v4.5.1

Toggle v4.5.1's commit message
fix 4.5.1

v5.0.0-rc.2

Toggle v5.0.0-rc.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Adjusting the error checking example (golang-jwt#270)

This PR adjusts the error checking example so that a check for an invalid signature is also included.

See discussion in golang-jwt#143

v5.0.0-rc.1

Toggle v5.0.0-rc.1's commit message

Partially verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
We cannot verify signatures from co-authors, and some of the co-authors attributed to this commit require their commits to be signed.
`v5` Pre-Release (golang-jwt#234)

Co-authored-by: Micah Parks <66095735+MicahParks@users.noreply.github.com>
Co-authored-by: Michael Fridman <mf192@icloud.com>

v4.5.0

Toggle v4.5.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Allow strict base64 decoding (golang-jwt#259)

By default base64 decoder works in non-strict mode which
allows tweaking signatures having padding without failing validation.

This creates a potential problem if application treats token value as an identifier.

For example ES256 signature has length of 64 bytes and two padding symbols (stripped by default).
Therefore its base64-encoded value can only end with A, Q, g and w.
In non-strict mode last symbol could be tweaked resulting in 16 distinct
token values having the same signature and passing validation.

This change adds backward-compatible global config variable DecodeStrict
(similar to existing DecodePaddingAllowed) that enables strict base64 decoder mode.

See also golang/go#15656.

Signed-off-by: Alexander Yastrebov <yastrebov.alex@gmail.com>

v4.4.3

Toggle v4.4.3's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
No pointer embedding in the example (golang-jwt#255)

Fixes golang-jwt#223

v4.4.2

Toggle v4.4.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
chore: remove unused claims in RSA table driven test (golang-jwt#212)

v4.4.1

Toggle v4.4.1's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Revert "feat: port clockskew support (golang-jwt#139)" (golang-jwt#184)

This reverts commit d489c99.

v4.4.0

Toggle v4.4.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
feat: port clockskew support (golang-jwt#139)

Co-authored-by: Kolawole Segun <Kolawole.Segun@kyndryl.com>
Co-authored-by: Christian Banse <oxisto@aybaze.com>

v4.3.0

Toggle v4.3.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Set json encoding precision (golang-jwt#162)