113 Commits
Author SHA1 Message Date
Eduardo Diaz 38d982b3cc 8.3.0 2018-06-11 17:36:46 +02:00
Jaco KosterandEduardo Diaz 4d2a22c975 Secret callback revisited (#480)
* Introduction of the secret callback

Without the more contentious 'none'-changes

* Removed some spaces...

I should really add a editor.config and eslint to this project ;-)

* Removed xtend as a dependency, as the native Object.Assign can do this as well

* Removed xtend as a dependency, as the native Object.Assign can do this as well

* Resolve feedback from review

* Added extra test and fixed the associated bug

* The return of the header

* Forgot to change this one as well... Sorry bout that

* Updated the readme and made the if-statements consistent

* Space; The final frontier
2018-06-11 17:32:29 +02:00
Eduardo Diaz ca3cd60408 8.2.2 2018-05-30 17:03:24 +02:00
Eduardo DiazandLuciano Balmaceda 404b455fd5 deps: [email protected] (#477)
Update 'jws' dependency to latest to fix a security issue
2018-05-30 11:42:16 -03:00
Eduardo Diaz a05a4b3548 8.2.1 2018-04-05 13:38:11 +02:00
Eduardo Diaz 8bc7d5b5e7 8.2.0 2018-03-02 13:56:32 +01:00
Eduardo Diaz 09a2b8e855 8.1.1 2018-01-22 20:27:15 +01:00
Tim OramandEduardo Diaz a6422365ab Bump ms version to add support for negative numbers (#438) 2018-01-19 14:20:57 +01:00
Eduardo Diaz 1101e00f1e 8.1.0 2017-10-09 19:36:47 +02:00
Eduardo Diaz b3dc03e170 8.0.1 2017-09-12 12:55:34 +02:00
Tomas ChmelevskijandEduardo Diaz 8fe1f3f44f Remove lodash.isarray dependency (#394) 2017-09-12 12:52:22 +02:00
Eduardo Diaz 96188a9990 8.0.0 2017-09-06 17:45:05 +02:00
Jorrit SchippersandEduardo Diaz 80b0f8535f Reduce size of NPM package (#347) 2017-09-06 16:36:01 +02:00
Chris PriceandEduardo Diaz 75b897b11d Remove joi to shrink module size (#348)
* Add cost-of-modules report to npm test

Results before any changes

┌─────────────┬────────────┬───────┐
│ name        │ children   │ size  │
├─────────────┼────────────┼───────┤
│ joi         │ 4          │ 3.12M │ <--!!!
├─────────────┼────────────┼───────┤
│ jws         │ 5          │ 0.18M │
├─────────────┼────────────┼───────┤
│ lodash.once │ 0          │ 0.01M │
├─────────────┼────────────┼───────┤
│ ms          │ 0          │ 0.01M │
├─────────────┼────────────┼───────┤
│ xtend       │ 0          │ 0.00M │
├─────────────┼────────────┼───────┤
│ 5 modules   │ 9 children │ 3.32M │
└─────────────┴────────────┴───────┘

* Replace joi with bespoke validator based on lodash

Dramatically reduces the module size without breaking ES5 compatability -

┌──────────────────────┬────────────┬───────┐
│ name                 │ children   │ size  │
├──────────────────────┼────────────┼───────┤
│ jws                  │ 5          │ 0.18M │
├──────────────────────┼────────────┼───────┤
│ lodash.includes      │ 0          │ 0.02M │
├──────────────────────┼────────────┼───────┤
│ lodash.once          │ 0          │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ lodash.isinteger     │ 0          │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ ms                   │ 0          │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ lodash.isplainobject │ 0          │ 0.01M │
├──────────────────────┼────────────┼───────┤
│ xtend                │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isstring      │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isboolean     │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isnumber      │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ lodash.isarray       │ 0          │ 0.00M │
├──────────────────────┼────────────┼───────┤
│ 11 modules           │ 5 children │ 0.25M │
└──────────────────────┴────────────┴───────┘

* Enhance validator error messages and add tests
2017-09-06 16:24:55 +02:00
Eduardo Diaz 27771716b5 7.4.3 2017-08-17 16:18:23 +02:00
Eduardo Diaz ee20a9e200 7.4.2 2017-08-04 14:33:50 +02:00
Eduardo Diaz a3f364a4d2 7.4.1 2017-05-17 11:30:53 +02:00
Dominykas BlyžėandEduardo Diaz d194df0171 bump ms to v2 due a ReDoS vuln (#352)
[email protected] is vulnerable to a ReDoS attack: https://snyk.io/vuln/npm:ms:20170412

Looking at the code, the breaking change in [email protected] that the accepted string is now limited to 100 chars.
2017-05-17 11:29:48 +02:00
Eduardo Diaz 045390c28c 7.4.0 2017-04-24 19:15:10 +02:00
Eduardo Diaz aeaf2e8d2a 7.3.0 2017-02-13 19:39:18 +01:00
José F. Romaniello bf6bedc4ba 7.2.1 2016-12-07 11:02:36 -03:00
José F. Romaniello 790cc72894 add nsp check to find vulnerabilities on npm test 2016-12-07 11:02:32 -03:00
José F. Romaniello d0ea609426 revert to joi@^6 to keep ES5 compatibility 2016-12-07 10:59:23 -03:00
José F. Romaniello ded1a5140c 7.2.0 2016-12-06 09:39:52 -03:00
José F. Romaniello 1cf1b5d3aa Merge branch 'latest-joi' of https://github.com/dominykas/node-jsonwebtoken into dominykas-latest-joi 2016-12-06 09:32:49 -03:00
José F. Romaniello 4a4f74f201 7.1.10 2016-12-06 09:28:13 -03:00
Dominykas Blyžė 715e3d9280 upgrade joi 2016-11-28 15:41:22 +00:00
Matt O'Connell 07813dd719 Bump node-jws version number
Bump node-jws version number from 3.1.3 -> 3.1.4.
Version 3.1.3 has a dependency on base64url ~1.0.4 which is throwing the
NodeJS Buffer DeprecationWarning. version 3.1.4 pulls in base64url ^2.0.0
which address the issue.
2016-11-17 08:32:25 -05:00
José F. Romaniello cc0f4d67b6 7.1.9 2016-08-11 13:23:12 -03:00
José F. Romaniello 51c4fef050 7.1.8 2016-08-10 09:52:59 -03:00
José F. Romaniello de2099b570 7.1.7 2016-07-29 15:55:14 -03:00
Christian Holm 3ac95ad93e Use lodash.once instead of unlicensed/unmaintained cb 2016-07-21 08:48:32 +02:00
José F. Romaniello ae360b5679 7.1.6 2016-07-15 09:32:38 -03:00
José F. Romaniello 184f28dbc0 7.1.5 2016-07-15 09:12:14 -03:00
José F. Romaniello b6260951ee update jws in package.json 2016-07-15 09:12:11 -03:00
José F. Romaniello 40ef387f75 7.1.4 2016-07-14 17:30:30 -03:00
José F. Romaniello 758ca5eeca temporarly fix an issue of double callback in JWS 2016-07-14 17:30:25 -03:00
José F. Romaniello c318b63c53 7.1.3 2016-07-12 10:07:51 -03:00
José F. Romaniello 076991f7e1 7.1.2 2016-07-12 10:06:27 -03:00
José F. Romaniello 9bd08bc51e 7.1.1 2016-07-12 09:58:40 -03:00
José F. Romaniello 4e1e5810aa 7.1.0 2016-07-12 09:38:43 -03:00
José F. Romaniello 2a91a0235d 7.0.1 2016-06-14 14:43:55 -03:00
José F. Romaniello a79ac9add3 7.0.0 2016-05-19 12:47:46 -03:00
José F. Romaniello 31625b5c01 6.2.0 2016-04-29 11:31:38 -03:00
José F. Romaniello d78659fe58 6.1.2 2016-04-29 08:57:09 -03:00
José F. Romaniello 9c38374142 fix sign method for node.js 0.12. closes #193 2016-04-29 08:57:06 -03:00
José F. Romaniello 252110e410 6.1.1 2016-04-28 19:55:10 -03:00
José F. Romaniello 75c50a2414 6.1.0 2016-04-27 13:23:24 -03:00
José F. Romaniello 2736ac2654 6.0.1 2016-04-27 12:50:10 -03:00
José F. Romaniello fc5cf65493 6.0.0 2016-04-27 12:40:55 -03:00