hanzoai/node-jsonwebtoken
2
0
Fork 0
mirror of https://github.com/hanzoai/node-jsonwebtoken.git synced 2026-09-24 17:00:48 +00:00
Code Issues Packages Projects Releases Wiki Activity
389 Commits 1 Branch 75 Tags
v8.3.0
Commit Graph
389 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Eduardo Diaz 38d982b3cc 8.3.0 v8.3.0 2018-06-11 17:36:46 +02:00
Eduardo Diaz 78c8cb72d5 update changelog 2018-06-11 17:35:47 +02:00
Jaco KosterandEduardo Diaz 4d2a22c975 Secret callback revisited (#480) 
* Introduction of the secret callback

Without the more contentious 'none'-changes

* Removed some spaces...

I should really add a editor.config and eslint to this project ;-)

* Removed xtend as a dependency, as the native Object.Assign can do this as well

* Removed xtend as a dependency, as the native Object.Assign can do this as well

* Resolve feedback from review

* Added extra test and fixed the associated bug

* The return of the header

* Forgot to change this one as well... Sorry bout that

* Updated the readme and made the if-statements consistent

* Space; The final frontier
 2018-06-11 17:32:29 +02:00
Eduardo Diaz ca3cd60408 8.2.2 v8.2.2 2018-05-30 17:03:24 +02:00
Eduardo Diaz c4457360be update changelog 2018-05-30 17:01:35 +02:00
Eduardo DiazandLuciano Balmaceda 404b455fd5 deps: [email protected] (#477) 
Update 'jws' dependency to latest to fix a security issue
 2018-05-30 11:42:16 -03:00
Eduardo DiazandJason Strutz 76378b6edc add some clarifications (#473) 2018-05-23 09:27:06 -07:00
Eduardo DiazandJosé F. Romaniello f081aeffcf fix ci execution, remove not needed script (#472) 2018-05-22 12:15:22 -05:00
Josh UngerandEduardo Diaz e96b826066 Update README.md (#461) 2018-04-26 12:27:49 +02:00
Eduardo Diaz a05a4b3548 8.2.1 v8.2.1 2018-04-05 13:38:11 +02:00
Eduardo Diaz 31e0e8d2fc update changelog 2018-04-05 13:32:17 +02:00
Nicolas CognauxandEduardo Diaz e50764b070 Check payload is not null when decoded. (#444) 
* Check payload is not null when decoded.
Fixed "Cannot read property 'nbf' of null"

* Condition on obj !== null for clarity

* Added test for decoding null token
 2018-04-05 13:28:41 +02:00
David BeiteyandEduardo Diaz cc7c41b109 Clarify that buffer/string payloads must be JSON (#442) 
It does kinda go without saying that JWTs (_JSON_ Web Tokens) need to contain JSON but it's worth mentioning that signing doesn't check your payload.  In some unit tests I was writing where the payload was a dummy (non-JSON parsable) string, JWTs were being signed okay but they're not valid according to the spec.
 2018-03-02 14:08:24 +01:00
Eduardo Diaz 8bc7d5b5e7 8.2.0 v8.2.0 2018-03-02 13:56:32 +01:00
Eduardo Diaz 5276392d58 update changelog 2018-03-02 13:56:17 +01:00
Jonathan Gros-DuboisandEduardo Diaz cab1c43ee4 Add a new mutatePayload option (#446) 
This option allows you to keep a reference to the raw token payload after claims have been applied to it but before it has been encoded.
 2018-03-02 13:48:25 +01:00
Eduardo Diaz 09a2b8e855 8.1.1 v8.1.1 2018-01-22 20:27:15 +01:00
Eduardo Diaz 3ac7a784a0 update changelog 2018-01-22 20:27:15 +01:00
Tim OramandEduardo Diaz 9f9d93b40e Not Before (nbf) calculated based on iat/timestamp (#437) 
fix #435
 2018-01-19 18:28:49 +01:00
Tim OramandEduardo Diaz a6422365ab Bump ms version to add support for negative numbers (#438) 2018-01-19 14:20:57 +01:00
Daniel SchmidtandEduardo Diaz c619575175 add newer node versions to build matrix (#428) 
* add newer node versions to build matrix

* Dont test for node 9

Its not stable and seems to fail on travis
 2018-01-10 22:38:47 +01:00
Harkirat SinghandEduardo Diaz bab4a35287 Minor typo (#424) 2017-11-17 17:20:04 +01:00
Eduardo Diaz 1101e00f1e 8.1.0 v8.1.0 2017-10-09 19:36:47 +02:00
Eduardo Diaz da4564ce6a update changelog 2017-10-09 19:36:35 +02:00
Jeff AlderandEduardo Diaz b848551927 #403: Clarify error wording. (#409) 
* #403: Clarify error wording.

* #403: Improve wording for payload vs options
 2017-10-09 19:29:48 +02:00
TheBusCantSwimandEduardo Diaz 5193ee5616 Enhance audience check to verify against regular expressions (#398) 
* Enhance audience check to verify against regular expressions

* Enhance audience check to verify against regular expressions

* Adapted README to have a showcase of the new RegExp-check for the audience validation
 2017-10-09 19:29:15 +02:00
Jeff AlderandEduardo Diaz b00c459bc6 #402: Don't fail if captureStackTrace is not a function (#410) 2017-10-09 19:28:37 +02:00
Jeff AlderandEduardo Diaz a5e0c09c2d #385: Tweak README (#408) 
* #385: Tweak README

* #385 Further wording tweaks for consistency.
 2017-10-09 13:57:02 +02:00
oughterandEduardo Diaz 04a88aba0d Fix typo in 'options.header' reference; Update Buffer() example to use recommended method (#380) 2017-09-15 11:31:21 +02:00
Eduardo Diaz b3dc03e170 8.0.1 v8.0.1 2017-09-12 12:55:34 +02:00
Eduardo Diaz 0c3b67b9ab update changelog 2017-09-12 12:55:22 +02:00
Tomas ChmelevskijandEduardo Diaz 8fe1f3f44f Remove lodash.isarray dependency (#394) 2017-09-12 12:52:22 +02:00
Eduardo Diaz 96188a9990 8.0.0 v8.0.0 2017-09-06 17:45:05 +02:00
Eduardo Diaz 0e2b2c6a78 updated changelog 2017-09-06 17:44:49 +02:00
Germán LenaandGitHub 4ead059855 Merge pull request #393 from ziluvatar/migration-notes-to-readme 
docs: readme, migration notes
 2017-09-06 12:37:11 -03:00
Eduardo Diaz 8d37ed85a3 docs: readme, migration notes 2017-09-06 16:49:06 +02:00
Fredrik LiljegrenandGitHub 3f2bff62d4 Merge pull request #349 from ziluvatar/fix-max-age-number-and-seconds 
maxAge: Fix logic with number + use seconds instead of ms
 2017-09-06 16:43:23 +02:00
ilyapxandEduardo Diaz 2bbd6a37b4 verify: remove process.nextTick (#302) 
running synchronous code asynchronously using process.nextTick
has a negative latency impact
 2017-09-06 16:41:55 +02:00
Jorrit SchippersandEduardo Diaz 80b0f8535f Reduce size of NPM package (#347) 2017-09-06 16:36:01 +02:00
Chris PriceandEduardo Diaz 75b897b11d Remove joi to shrink module size (#348) 
* Add cost-of-modules report to npm test

Results before any changes

┌─────────────┬────────────┬───────┐
│ name        │ children   │ size  │
├─────────────┼────────────┼───────┤
│ joi         │ 4          │ 3.12M │ <--!!!
├─────────────┼────────────┼───────┤
│ jws         │ 5          │ 0.18M │
├─────────────┼────────────┼───────┤
│ lodash.once │ 0          │ 0.01M │
├─────────────┼────────────┼───────┤
│ ms          │ 0          │ 0.01M │
├─────────────┼────────────┼───────┤
│ xtend       │ 0          │ 0.00M │
├─────────────┼────────────┼───────┤
│ 5 modules   │ 9 children │ 3.32M │
└─────────────┴────────────┴───────┘

* Replace joi with bespoke validator based on lodash

Dramatically reduces the module size without breaking ES5 compatability -

┌──────────────────────┬────────────┬───────┐
│ name                 │ children   │ size  │
├──────────────────────┼────────────┼───────┤
│ jws                  │ 5          │ 0.18M │
├──────────────────────┼────────────┼───────┤
│ lodash.includes      │ 0          │ 0.02M │
├──────────────────────┼────────────┼───────┤
│ lodash.once          │ 0          │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ lodash.isinteger     │ 0          │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ ms                   │ 0          │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ lodash.isplainobject │ 0          │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ xtend                │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isstring      │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isboolean     │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isnumber      │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isarray       │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ 11 modules           │ 5 children │ 0.25M │
└──────────────────────┴────────────┴───────┘

* Enhance validator error messages and add tests
 2017-09-06 16:24:55 +02:00
Eduardo Diaz 23cb6f1d24 maxAge: Add validation to timespan result 2017-08-29 12:24:08 +02:00
Eduardo Diaz be10962135 update changelog 2017-08-17 16:21:21 +02:00
Eduardo Diaz 27771716b5 7.4.3 v7.4.3 2017-08-17 16:18:23 +02:00
Fredrik LiljegrenandGitHub 00b19d591b Merge pull request #386 from ziluvatar/issue_381 
Fix breaking change on 7.4.2 for empty secret + "none" algorithm (sync code style)
 2017-08-17 14:28:20 +02:00
Eduardo Diaz d63c87dc7c add test & modify guard code 2017-08-17 13:50:26 +02:00
Rhys Anthony McCaig 7ff56f77f3 Fixed alg non + secret set unit test 2017-08-11 17:32:06 -07:00
Rhys Anthony McCaig 95e73a269a Fix for #381. Set secret string before using jws when alg is none 2017-08-11 17:25:55 -07:00
Eduardo Diaz 57e97dbcb0 update changelog 2017-08-04 14:36:03 +02:00
Eduardo Diaz ee20a9e200 7.4.2 v7.4.2 2017-08-04 14:33:50 +02:00
José F. RomanielloandGitHub 36b6342170 Merge pull request #374 from ziluvatar/add-check-for-empty-secrets 
sign: add check to be sure secret has a value
 2017-08-04 09:31:49 -03:00