José F. Romaniello
83d7aff9fb
5.1.0
2015-10-02 07:56:19 -03:00
José F. Romaniello
1fa326fcd1
Merge pull request #127 from lukewestby/master
...
added async signing
2015-10-02 07:56:00 -03:00
Luke William Westby
9414fbcb15
added async signing
2015-09-27 12:48:44 -05:00
José F. Romaniello
6a715a1399
5.0.5
2015-08-19 10:27:30 -03:00
José F. Romaniello
53676b3000
Merge branch 'simov-fix-headers-option'
2015-08-19 10:27:21 -03:00
José F. Romaniello
7787dd74e7
add tests for options.headers
2015-08-19 10:26:49 -03:00
José F. Romaniello
06435979b6
Merge branch 'fix-headers-option' of https://github.com/simov/node-jsonwebtoken into simov-fix-headers-option
2015-08-19 10:21:44 -03:00
José F. Romaniello
dd8969e0e6
add note to explain, related to #96 #101 #6
2015-08-19 10:03:27 -03:00
José F. Romaniello
f5fa50f797
update JWT spec link. closes #112
2015-08-19 09:54:55 -03:00
simov
5feaa5b962
Fix typo options.header is not a documented option +
...
Fix - do not modify the options.headers object
2015-08-08 15:48:40 +03:00
José F. Romaniello
7b9f509641
5.0.4
2015-07-15 09:01:01 -03:00
José F. Romaniello
e0038a383b
Merge branch 'JackuB-empty_secretOrPublicKey'
2015-07-15 09:00:49 -03:00
José F. Romaniello
cfe05e961c
Merge branch 'empty_secretOrPublicKey' of https://github.com/JackuB/node-jsonwebtoken into JackuB-empty_secretOrPublicKey
2015-07-15 09:00:25 -03:00
José F. Romaniello
815a1a1663
5.0.3
2015-07-15 08:57:57 -03:00
José F. Romaniello
61ff117227
minor
2015-07-15 08:57:50 -03:00
José F. Romaniello
9039cf0ba0
Merge branch 'chncdcksn-fix-this-undefined'
2015-07-15 08:55:27 -03:00
Chance Dickson
93f554312e
Fix this referring to the global object instead of module.exports in verify()
2015-07-09 08:03:15 -04:00
Damian Schenkelman
33b326fb1d
Merge pull request #98 from adam-back/patch-1
...
Fix typo, line 139 README, complete option for .decode.
2015-06-17 19:31:18 -05:00
Adam Back
59c110aeb8
Fix typo, line 139 README, complete option for .decode.
2015-06-17 16:05:37 -07:00
José F. Romaniello
118ff1a7ba
5.0.2
2015-06-15 07:26:33 -05:00
José F. Romaniello
170dc0787d
Merge pull request #88 from dbrugne/master
...
Avoid uncaught "SyntaxError: Unexpected token ͧ" error.
2015-06-15 07:26:01 -05:00
José F. Romaniello
3d3413221f
fix typo in docs . closes #86
2015-05-19 10:45:44 -03:00
Jared Hanson
214b9c435f
Bump version to 5.0.1.
2015-05-15 15:00:30 -07:00
Damian Schenkelman
53dd3c36e7
Merge pull request #89 from jaredhanson/decode-complete
...
Add option to return header and payload when decoding.
2015-05-15 17:42:16 -03:00
Jared Hanson
ba3174d100
Fix example in README, silence verbose logging.
2015-05-15 13:36:10 -07:00
Jared Hanson
851bda2b10
Immediate return if not decoded.
2015-05-15 11:48:10 -07:00
Jared Hanson
ec32b20241
Document complete option in README.
2015-05-15 11:31:17 -07:00
Jared Hanson
7254e011b5
Add option to return header and payload when decoding.
2015-05-15 09:37:58 -07:00
dbrugne
0dc59cd6ee
Avoid uncaught "SyntaxError: Unexpected token ͧ" error.
...
When .verify() a corrupted JWS (e.g.: malicious user add extra characters in the middle of token) an error is thrown:
``
[ERROR] console - SyntaxError: Unexpected token ͧ
at Object.parse (native)
at Object.jwsDecode [as decode] (/www/socketio-jwt/node_modules/jsonwebtoken/node_modules/jws/lib/verify-stream.js:71:20)
at Object.module.exports.verify (/www/socketio-jwt/node_modules/jsonwebtoken/index.js:120:26)`
``
2015-05-07 11:32:59 +02:00
Jakub Mikulas
f1cffd033b
Simplified checking for missing key
2015-04-22 16:20:44 +02:00
Jakub Mikulas
ffe68dbe02
Typo
2015-04-21 13:06:24 +02:00
Alberto Pose
881d07f672
Merge pull request #81 from jas/master
...
Fix link to auth0.com in README
2015-04-19 16:45:52 -03:00
Jason Sandmeyer
1b3c5ff72c
Fix link to auth0.com in README
2015-04-19 13:43:21 -04:00
Alberto Pose
927cce0dad
Update CHANGELOG.md
2015-04-11 15:05:08 -03:00
Alberto Pose
6879e0fdde
Update CHANGELOG.md
2015-04-11 15:04:05 -03:00
Alberto Pose
c5596c10e8
Update CHANGELOG.md
2015-04-11 14:20:08 -03:00
Alberto Pose
07541f0315
Update CHANGELOG.md
2015-04-11 14:19:22 -03:00
Alberto Pose
e6465d48dd
Update CHANGELOG.md
2015-04-11 14:18:56 -03:00
Alberto Pose
db8fb93ad7
5.0.0
2015-04-10 17:48:02 -03:00
Alberto Pose
e900282a8d
Merge pull request #75 from auth0/dschenkelman-patch-1
...
Only set iat if there is none
2015-04-10 17:39:25 -03:00
Damian Schenkelman
634b8ed0ff
Merge pull request #78 from auth0/update-to-jws-3
...
Update to jws@^3.0.0
2015-04-10 15:02:37 -03:00
Alberto Pose
9f24ffd579
Renaming header.alg mismatch exception to invalid algorithm and adding more mismatch tests.
2015-04-10 14:53:42 -03:00
Alberto Pose
19e6cc6a1f
Adding @dschenkelman feedback.
2015-04-10 13:54:03 -03:00
Alberto Pose
1e46234201
Updating to jws@^3.0.0
...
As `[email protected] ` changed the verify method signature to be `jws.verify(signature, algorithm, secretOrKey)`, the token header must be decoded first in order to make sure that the `alg` field matches one of the allowed `options.algorithms`. After that, the now validated `header.alg` is passed to `jws.verify`
As the order of steps has changed, the error that was thrown when the JWT was invalid is no longer the `jws` one:
{ [Error: Invalid token: no header in signature 'a.b.c'] code: 'MISSING_HEADER', signature: 'a.b.c' }
That old error (removed from jws) has been replaced by a `JsonWebTokenError` with message `invalid token`. That's why this change will bump be a major.
2015-04-10 12:38:41 -03:00
Damian Schenkelman
35036b188b
Only set iat if there is none
...
Makes sense?
2015-04-07 13:43:07 -03:00
Alberto Pose
954bd7a312
Update CHANGELOG.md
2015-04-06 09:22:31 -03:00
Alberto Pose
24a370080e
Update CHANGELOG.md
2015-04-06 09:21:39 -03:00
Alberto Pose
a77df6d49d
Documenting verify algorithms parameter.
2015-04-06 09:10:14 -03:00
Jakub Mikulas
d6240e2418
Removed path from test
2015-03-30 19:30:35 +02:00
Jakub Mikulas
0fdf78d4db
Prevent throw on undefined/null secret
2015-03-30 19:29:25 +02:00
José F. Romaniello