Eduardo Diaz
b3dc03e170
8.0.1
2017-09-12 12:55:34 +02:00
Tomas Chmelevskij and Eduardo Diaz
8fe1f3f44f
Remove lodash.isarray dependency ( #394 )
2017-09-12 12:52:22 +02:00
Eduardo Diaz
96188a9990
8.0.0
2017-09-06 17:45:05 +02:00
Jorrit Schippers and Eduardo Diaz
80b0f8535f
Reduce size of NPM package ( #347 )
2017-09-06 16:36:01 +02:00
Chris Price and Eduardo Diaz
75b897b11d
Remove joi to shrink module size ( #348 )
...
* Add cost-of-modules report to npm test
Results before any changes
┌─────────────┬────────────┬───────┐
│ name │ children │ size │
├─────────────┼────────────┼───────┤
│ joi │ 4 │ 3.12M │ <--!!!
├─────────────┼────────────┼───────┤
│ jws │ 5 │ 0.18M │
├─────────────┼────────────┼───────┤
│ lodash.once │ 0 │ 0.01M │
├─────────────┼────────────┼───────┤
│ ms │ 0 │ 0.01M │
├─────────────┼────────────┼───────┤
│ xtend │ 0 │ 0.00M │
├─────────────┼────────────┼───────┤
│ 5 modules │ 9 children │ 3.32M │
└─────────────┴────────────┴───────┘
* Replace joi with bespoke validator based on lodash
Dramatically reduces the module size without breaking ES5 compatability -
┌──────────────────────┬────────────┬───────┐
│ name │ children │ size │
├──────────────────────┼────────────┼───────┤
│ jws │ 5 │ 0.18M │
├──────────────────────┼────────────┼───────┤
│ lodash.includes │ 0 │ 0.02M │
├──────────────────────┼────────────┼───────┤
│ lodash.once │ 0 │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ lodash.isinteger │ 0 │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ ms │ 0 │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ lodash.isplainobject │ 0 │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ xtend │ 0 │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isstring │ 0 │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isboolean │ 0 │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isnumber │ 0 │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isarray │ 0 │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ 11 modules │ 5 children │ 0.25M │
└──────────────────────┴────────────┴───────┘
* Enhance validator error messages and add tests
2017-09-06 16:24:55 +02:00
Eduardo Diaz
27771716b5
7.4.3
2017-08-17 16:18:23 +02:00
Eduardo Diaz
ee20a9e200
7.4.2
2017-08-04 14:33:50 +02:00
Eduardo Diaz
a3f364a4d2
7.4.1
2017-05-17 11:30:53 +02:00
Dominykas Blyžė and Eduardo Diaz
d194df0171
bump ms to v2 due a ReDoS vuln ( #352 )
...
[email protected] is vulnerable to a ReDoS attack: https://snyk.io/vuln/npm:ms:20170412
Looking at the code, the breaking change in [email protected] that the accepted string is now limited to 100 chars.
2017-05-17 11:29:48 +02:00
Eduardo Diaz
045390c28c
7.4.0
2017-04-24 19:15:10 +02:00
Eduardo Diaz
aeaf2e8d2a
7.3.0
2017-02-13 19:39:18 +01:00
José F. Romaniello
bf6bedc4ba
7.2.1
2016-12-07 11:02:36 -03:00
José F. Romaniello
790cc72894
add nsp check to find vulnerabilities on npm test
2016-12-07 11:02:32 -03:00
José F. Romaniello
d0ea609426
revert to joi@^6 to keep ES5 compatibility
2016-12-07 10:59:23 -03:00
José F. Romaniello
ded1a5140c
7.2.0
2016-12-06 09:39:52 -03:00
José F. Romaniello
1cf1b5d3aa
Merge branch 'latest-joi' of https://github.com/dominykas/node-jsonwebtoken into dominykas-latest-joi
2016-12-06 09:32:49 -03:00
José F. Romaniello
4a4f74f201
7.1.10
2016-12-06 09:28:13 -03:00
Dominykas Blyžė
715e3d9280
upgrade joi
2016-11-28 15:41:22 +00:00
Matt O'Connell
07813dd719
Bump node-jws version number
...
Bump node-jws version number from 3.1.3 -> 3.1.4.
Version 3.1.3 has a dependency on base64url ~1.0.4 which is throwing the
NodeJS Buffer DeprecationWarning. version 3.1.4 pulls in base64url ^2.0.0
which address the issue.
2016-11-17 08:32:25 -05:00
José F. Romaniello
cc0f4d67b6
7.1.9
2016-08-11 13:23:12 -03:00
José F. Romaniello
51c4fef050
7.1.8
2016-08-10 09:52:59 -03:00
José F. Romaniello
de2099b570
7.1.7
2016-07-29 15:55:14 -03:00
Christian Holm
3ac95ad93e
Use lodash.once instead of unlicensed/unmaintained cb
2016-07-21 08:48:32 +02:00
José F. Romaniello
ae360b5679
7.1.6
2016-07-15 09:32:38 -03:00
José F. Romaniello
184f28dbc0
7.1.5
2016-07-15 09:12:14 -03:00
José F. Romaniello
b6260951ee
update jws in package.json
2016-07-15 09:12:11 -03:00
José F. Romaniello
40ef387f75
7.1.4
2016-07-14 17:30:30 -03:00
José F. Romaniello
758ca5eeca
temporarly fix an issue of double callback in JWS
2016-07-14 17:30:25 -03:00
José F. Romaniello
c318b63c53
7.1.3
2016-07-12 10:07:51 -03:00
José F. Romaniello
076991f7e1
7.1.2
2016-07-12 10:06:27 -03:00
José F. Romaniello
9bd08bc51e
7.1.1
2016-07-12 09:58:40 -03:00
José F. Romaniello
4e1e5810aa
7.1.0
2016-07-12 09:38:43 -03:00
José F. Romaniello
2a91a0235d
7.0.1
2016-06-14 14:43:55 -03:00
José F. Romaniello
a79ac9add3
7.0.0
2016-05-19 12:47:46 -03:00
José F. Romaniello
31625b5c01
6.2.0
2016-04-29 11:31:38 -03:00
José F. Romaniello
d78659fe58
6.1.2
2016-04-29 08:57:09 -03:00
José F. Romaniello
9c38374142
fix sign method for node.js 0.12. closes #193
2016-04-29 08:57:06 -03:00
José F. Romaniello
252110e410
6.1.1
2016-04-28 19:55:10 -03:00
José F. Romaniello
75c50a2414
6.1.0
2016-04-27 13:23:24 -03:00
José F. Romaniello
2736ac2654
6.0.1
2016-04-27 12:50:10 -03:00
José F. Romaniello
fc5cf65493
6.0.0
2016-04-27 12:40:55 -03:00
José F. Romaniello
53c3987b3c
Improved the sign method
...
Notable changes:
1. `expiresInMinutes` and `expiresInSeconds` are deprecated and no longer supported.
2. `notBeforeInMinutes` and `notBeforeInSeconds` are deprecated and no longer supported.
3. options are properly validated.
4. `options.expiresIn`, `options.notBefore`, `options.audience`, `options.issuer`, `options.subject` and `options.jwtid` are mutually exclusive with `payload.exp`, `payload.nbf`, `payload.aud`, `payload.iss`, `payload.sub` and `payload.jti` respectively.
5. `options.algorithm` is properly validated.
6. `options.headers` is renamed to `options.header`.
2016-04-27 12:40:28 -03:00
José F. Romaniello
b87a1a8d2e
update CHANGELOG to reflect most of the changes. closes #136
2016-02-16 10:48:56 -03:00
José F. Romaniello
cb33aabc43
5.7.0
2016-02-16 09:23:44 -03:00
José F. Romaniello
195940409e
5.6.2
2016-02-16 08:59:30 -03:00
José F. Romaniello
06d8209d49
5.6.1
2016-02-16 08:59:19 -03:00
José F. Romaniello
ae13271837
5.6.0
2016-02-16 08:49:00 -03:00
José F. Romaniello
10266c1392
5.5.4
2016-01-04 12:43:16 -03:00
José F. Romaniello
04a76d51f1
5.5.3
2016-01-04 09:31:53 -03:00
José F. Romaniello
e403a66bee
5.5.2
2016-01-04 09:06:00 -03:00
Eduardo Diaz