Eduardo Diaz
ee20a9e200
7.4.2
v7.4.2
2017-08-04 14:33:50 +02:00
José F. Romaniello and GitHub
36b6342170
Merge pull request #374 from ziluvatar/add-check-for-empty-secrets
...
sign: add check to be sure secret has a value
2017-08-04 09:31:49 -03:00
Eduardo Diaz
4cc2615033
sign: add check to be sure secret has a value
2017-07-24 16:59:07 -05:00
Fredrik Liljegren and GitHub
93c2a4af49
Merge pull request #371 from ziluvatar/docs-about-refreshing-tokens
...
docs: about refreshing tokens
2017-07-14 13:57:26 +02:00
Eduardo Diaz
18137809c9
docs: about refreshing tokens
2017-07-14 13:21:57 +02:00
Fredrik Liljegren and GitHub
ff77aa1b33
Merge pull request #365 from ziluvatar/information-regarding-base64-secrets
...
docs: verifying with base64 encoded secrets
2017-06-27 11:49:16 +02:00
Eduardo Diaz
5c47d0deee
docs: verifying with base64 encoded secrets
2017-06-24 11:44:14 +02:00
Fredrik Liljegren and GitHub
512a02c4dc
Merge pull request #360 from ziluvatar/add-ecdsa-tests
...
Add tests for ES256
2017-06-14 18:22:58 +02:00
rjruizes and Eduardo Diaz
c797714223
document keyid as option ( #361 )
2017-06-14 13:27:47 +02:00
Eduardo Diaz
7ca537e2bf
Add tests for ES256
2017-06-11 13:18:50 +02:00
Eduardo Diaz and GitHub
61c9aa7408
readme: Using private key with passpharase ( #353 )
2017-05-23 11:35:20 +02:00
Eduardo Diaz
1d196e9a2a
update changelog
2017-05-17 11:34:11 +02:00
Eduardo Diaz
a3f364a4d2
7.4.1
v7.4.1
2017-05-17 11:30:53 +02:00
Dominykas Blyžė and Eduardo Diaz
d194df0171
bump ms to v2 due a ReDoS vuln ( #352 )
...
[email protected] is vulnerable to a ReDoS attack: https://snyk.io/vuln/npm:ms:20170412
Looking at the code, the breaking change in [email protected] that the accepted string is now limited to 100 chars.
2017-05-17 11:29:48 +02:00
Eduardo Diaz
2cab40aec0
Update changelog
2017-04-24 19:18:15 +02:00
Eduardo Diaz
045390c28c
7.4.0
v7.4.0
2017-04-24 19:15:10 +02:00
Fredrik Liljegren and GitHub
3d1bc90d16
Merge pull request #328 from ziluvatar/npb-exp-iat-docs-numeric-date
...
Add docs about numeric date fields.
2017-03-22 09:06:33 +01:00
Eduardo Diaz
7a2e46a815
Add docs about numeric date fields
2017-03-21 17:23:24 +01:00
José F. Romaniello and GitHub
ce11416480
Merge pull request #320 from ziluvatar/make-options-optional-on-async-call
...
Make Options object optional for callback-ish sign
2017-03-09 14:33:53 -03:00
Eduardo Diaz
87d9e777ed
Make Options object optional for callback-ish sign
2017-03-08 14:09:04 +01:00
Eduardo Diaz and Eduardo Diaz
261a464a92
Update changelog
2017-02-20 21:33:45 +01:00
Eduardo Diaz
aeaf2e8d2a
7.3.0
v7.3.0
2017-02-13 19:39:18 +01:00
Eduardo Diaz and GitHub
70cab0e2c0
Add more information to maxAge option in README
2017-02-13 13:50:55 +01:00
Michael Borst and Eduardo Diaz
912e40685f
Allow user to specify now. ( #274 )
2017-02-10 19:27:44 +01:00
Sergey Maslyakov and Eduardo Diaz
047f1ae04b
Raise jws.decode error to avoid confusion with "invalid token" error ( #294 )
...
* Corrected indistinguishable error messages
jws.decode() never throws an error. At least, in its current version. However, if it were to throw an exception, the diagnostics would be indistinguishable from a soft failure to decode a token. I had an extra trailing space on my JWT and it took me some additional debugging work to trace the actual root cause because the error message was not distinct.
* Allowed an exception from inside of jws.decode to be handled by the caller. Currently, jws.decode never throws an exception. The change is made per discsussion in the original PR
* Added a test case and proper forwarding of the possible exception thrown from jws.decode
* Typo correction
2017-02-09 13:54:58 +01:00
Eddy Verbruggen and Eduardo Diaz
a7d15fe138
Fixed a simple typo ( #287 )
...
* Fixed a simple typo
The example didn't work because of a missing comma.
* Fixed a simple typo
The example didn't work because of a missing comma.
2017-02-03 22:39:08 +01:00
Ricardo Gama and Eduardo Diaz
c4f7670972
Fix handling non string tokens ( #305 )
2017-02-03 21:07:54 +01:00
Greg Walden and Eduardo Diaz
57c25955ff
rauchg/ms.js changed to zeit/ms ( #303 )
...
* rauchg/ms.js changed to zeit/ms
* Update README.md
2017-02-03 19:38:42 +01:00
José F. Romaniello
96dc31f5af
update changelog
2016-12-07 11:03:16 -03:00
José F. Romaniello
bf6bedc4ba
7.2.1
v7.2.1
2016-12-07 11:02:36 -03:00
José F. Romaniello
790cc72894
add nsp check to find vulnerabilities on npm test
2016-12-07 11:02:32 -03:00
José F. Romaniello
d0ea609426
revert to joi@^6 to keep ES5 compatibility
2016-12-07 10:59:23 -03:00
José F. Romaniello
d409f20b86
update changelog
2016-12-06 09:43:57 -03:00
José F. Romaniello and GitHub
4910de5238
Merge pull request #243 from rmharrison/patch-1
...
Minor README.md edit: Added `iss` on L41
2016-12-06 09:42:02 -03:00
José F. Romaniello
ded1a5140c
7.2.0
v7.2.0
2016-12-06 09:39:52 -03:00
José F. Romaniello
b921e9668b
Merge branch 'silvermanj7-patch-1'
2016-12-06 09:38:37 -03:00
José F. Romaniello
9051530509
Merge branch 'patch-1' of https://github.com/silvermanj7/node-jsonwebtoken into silvermanj7-patch-1
2016-12-06 09:38:26 -03:00
José F. Romaniello
fb8cdf0b55
Merge branch 'dominykas-latest-joi'
2016-12-06 09:33:17 -03:00
José F. Romaniello
1cf1b5d3aa
Merge branch 'latest-joi' of https://github.com/dominykas/node-jsonwebtoken into dominykas-latest-joi
2016-12-06 09:32:49 -03:00
José F. Romaniello and GitHub
29abc1c84c
Merge pull request #277 from skyzyx/master
...
Implemented keyid (kid) attribute in JWT header (Part II)
2016-12-06 09:30:49 -03:00
José F. Romaniello
aecb4d16f0
update changelog
2016-12-06 09:29:01 -03:00
José F. Romaniello
4a4f74f201
7.1.10
v7.1.10
2016-12-06 09:28:13 -03:00
José F. Romaniello and GitHub
09da727d5f
Merge pull request #272 from oconn/bugfix/node-buffer-warning
...
Bump node-jws version number (Buffer DeprecationWarning)
2016-12-06 09:27:41 -03:00
Ryan Parman
2f220de780
Simpler PR which implements the changes from #249 .
2016-11-28 11:50:37 -08:00
Dominykas Blyžė
3febcc1dd2
upgrade to latest nodes and Travis infrastructure
2016-11-28 16:03:39 +00:00
Dominykas Blyžė
715e3d9280
upgrade joi
2016-11-28 15:41:22 +00:00
Matt O'Connell
07813dd719
Bump node-jws version number
...
Bump node-jws version number from 3.1.3 -> 3.1.4.
Version 3.1.3 has a dependency on base64url ~1.0.4 which is throwing the
NodeJS Buffer DeprecationWarning. version 3.1.4 pulls in base64url ^2.0.0
which address the issue.
2016-11-17 08:32:25 -05:00
silvermanj7 and GitHub
ccc7610187
Restructured a sentence
...
It's a little easier to read this way.
2016-10-28 08:19:53 -04:00
José F. Romaniello
771e0b5f9b
improve the documentation for expiration
2016-10-07 12:18:49 -03:00
Ryan M Harrison and GitHub
c5f7991ce7
Minor README.md edit: Added iss on L41
2016-08-25 00:31:16 -04:00