hanzoai/passport-jwt
2
0
Fork 0
mirror of https://github.com/hanzoai/passport-jwt.git synced 2026-09-24 17:01:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
174 Commits 2 Branches 15 Tags
master
Commit Graph
174 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
zandGitHub 9f8abaf174 Delete upstream workflows 
This fork does not ship upstream's releases, and its hosted-runner jobs
never start here.

Claude-Session: https://claude.ai/code/session_01HuMDfgFssPUptYUzgZ6Cp8
 2026-09-24 10:01:37 -07:00
zeekayandHanzo Dev 712b4f0934 ci: canonical pair — hanzo.yml + forge caller 
github.com has no runner for hanzo-build-linux-amd64, so a caller under
.github/workflows is a gate that can never be scheduled. This is the ~7-line
caller on the plane that can (git.hanzo.ai git-runner fleet), pinned @v1.

Co-authored-by: Hanzo Dev <[email protected]>
 2026-08-06 02:35:18 -07:00
Mike Nicholson 0bb663be0c 4.0.1 release 
* Updates jsonwebtoken dependency to ^9.0.0 to address high severity
  vulnerability CVE-2022-3517
* Updates a number of other dependencies
* Fixes a number of typos

[Developer facing]
* Updates CI to use github actions
v4.0.1 		2022-12-24 00:15:42 -05:00
Mike NicholsonandGitHub 50e239f396 Merge pull request #248 from mikenicholson/update-minmatch 
Address minmatch vulnerability
 2022-12-24 00:09:21 -05:00
Mike Nicholson 9889641121 Address minmatch vulnerability 
Mocha depends on minmatch.  Update to address CVE-2022-3517.
 2022-12-24 00:07:51 -05:00
Mike NicholsonandGitHub b24d80a56d Merge pull request #247 from mikenicholson/jsonwebtoken-9 
Update jsonwebtoken to 9.0.0
 2022-12-24 00:04:00 -05:00
Mike Nicholson 27a2748498 Update jsonwebtoken to 9.0.0 
Previous version was affected by high severity vulnerability CVE-2022-23529.

Resolves #244
 2022-12-24 00:01:50 -05:00
Mike Nicholson 953432caa0 Update minimist due to prototype pollution vulnerability in previous version 2022-09-19 22:17:42 -04:00
Mike NicholsonandGitHub 55beaa9dd7 Merge pull request #192 from markhoney/patch-1 
Fix typo
 2022-02-21 22:12:08 -05:00
Mike Nicholson 40892bd81c Update jsonwebtoken and run npm audit fix 2022-02-21 21:52:41 -05:00
Mike Nicholson c410f0fc6a Remove older node versions shiping npm without support for "ci" 2022-02-21 21:48:21 -05:00
Mike Nicholson ec5d71d9b4 Add CI workflow in GitHub Actions 2022-02-21 21:37:37 -05:00
Mike NicholsonandGitHub eb7ee131b9 Merge pull request #218 from Sambego/patch-1 
Update Auth0 sponsorship link
 2020-10-14 21:09:19 -04:00
Sam BellenandGitHub 533dc55ffd Update Auth0 sponsorship link 
Hey

We recently launched a new page specifically geared towards developers on auth0.com.
Can we change the link in the sponsorship message?

Thanks again for your open-source work!
 2020-09-24 13:15:28 +02:00
Mike Nicholson f25096eac6 Add nodejs 13 & 14 to CI 2020-08-04 22:56:47 -04:00
Mike Nicholson ebd474b0f1 Update mocha to resolve vulnerabilities 2020-08-04 22:56:47 -04:00
Mike Nicholson c46e344ad4 Use nyc for coverage 2020-08-04 22:56:41 -04:00
Mark HoneychurchandGitHub 87275151e8 Fix typo 2020-01-15 14:00:17 +13:00
Mike NicholsonandGitHub 7516daa51e Merge pull request #176 from epicfaace/patch-1 
Rename extrators-test.js to extractors-test.js
 2019-05-22 22:59:12 -04:00
Mike Nicholson a9317b969c Stop building for Node v5 and earlier 
These older versions of node are not support by the latest version of
Mocha. Passport-jwt may continue working for these older versions of
node but its no longer guaranteed.
 2019-05-22 22:50:28 -04:00
Mike Nicholson 14243dded8 Add newer node versions to Travis CI build 2019-05-22 22:46:05 -04:00
Mike Nicholson 214aec05b6 Update dependencies to resolve vulnerabilities. 
`npm audit` and GitHub were flagging vulnerabilities in some
dependencies of Mocha. Update dependencies to newer versions without
those vulnerabilities.
 2019-05-22 22:42:57 -04:00
Mike Nicholson 24892b8359 Update URLs to reference new GitHub username 2019-05-22 22:42:18 -04:00
Ashwin RamaswamiandGitHub cb150f2227 Rename extrators-test.js to extractors-test.js 2019-03-28 06:48:17 -04:00
Mike Nicholson 3f99019ce4 Clarify use of custom extractor function. 
In lieu of PR #170.
 2019-03-16 19:26:13 -04:00
Mike Nicholson aed12b2336 Add js formatting to extractor example in README. 
See PR #171.  The PR attempted to make style match but left out the
space between the paren and the curly bracket.
 2019-03-16 19:20:55 -04:00
Mike NicholsonandGitHub 13ded99121 strategy.js: fixed typo in comment 
Merge pull request #152 from VivienAdnot/patch-1
 2018-11-04 23:14:31 -05:00
Vivien AdnotandGitHub d2874ad1be Update strategy.js 2018-03-19 13:46:40 +01:00
Mike Nicholson d12cc69ef4 Update Including JWT section for extractors 
Fixes #138
 2018-03-12 23:15:25 -04:00
Mike NicholsonandGitHub 9c8ff52567 Merge pull request #148 from tanem/fix-typos 
Fix tiny comment typo
 2018-03-12 23:01:11 -04:00
Mike NicholsonandGitHub 3f0f53a860 Merge pull request #140 from MarkHerhold/patch-1 
typo
 2018-03-12 23:00:29 -04:00
Mike Nicholson 8f543a96f7 Update version to 4.0.0 v4.0.0 2018-03-12 22:36:04 -04:00
Mike Nicholson f381cea6a0 Updating migration guide for 4.0.0 2018-03-12 22:35:31 -04:00
Mike Nicholson 5497660729 Update jsonwebtoken dependency to latest. 
Add package-lock.json as well.
 2018-03-12 22:15:39 -04:00
tanem 85156e5574 Fix tiny comment typo 2018-02-21 06:31:00 +13:00
Mark HerholdandGitHub fef623d1cb typo 2018-01-02 16:19:59 -05:00
Mike Nicholson 685fffea94 Move supporters up a little higher in README 2017-12-26 15:41:43 -05:00
Mike Nicholson d2d950eb2d Remove codesponsor.io link 2017-12-26 15:39:30 -05:00
Mike Nicholson 6d4b3fafff Rev patch version for doc update v3.0.1 2017-10-26 21:40:16 -04:00
Mike Nicholson f39b87f4d7 Merge branch 'add-auth0-sponsor' 2017-10-26 21:39:14 -04:00
Mike Nicholson 34010156a1 Simplify "supported by" section 2017-10-26 21:38:58 -04:00
Mike Nicholson 5fc1cd80d6 Add sponsor link and put all migration docs in one file 2017-10-26 21:38:48 -04:00
Mike NicholsonandGitHub cfb13c08d1 Add Codesponsor.io link 2017-10-16 10:50:39 -04:00
Mike Nicholson 28ffbb0f71 Update package version v3.0.0 2017-08-15 23:26:52 -04:00
Mike Nicholson cfa4db3b8e Merge branch 'pr108-secret-key-provider' 
Adds ability for secretOrKey to be provided by a function
called on every request
 2017-08-15 23:23:07 -04:00
Mike Nicholson 3a07c77ae3 Update docs for 2.x.x to 3.0.0 migration 2017-08-15 23:12:46 -04:00
Mike Nicholson d5af311dce Get rid of JWT as the default auth scheme. 
Per #87 'jwt' was not a great choice of default value for the
authorization scheme since RFC6750 explicitly states that 'bearer'
is the proper scheme, at least in the context of OAuth 2.0.

Since this change breaks backwards compatibility I tried to be very
explicit.  extractors.fromAuthHeader() was removed and replaced with
the more explicit 'extractors.fromAuthHeaderAsBearerToken()'.

Anyone wanting to maintain passport-jwt 2.* behavior may use the
follinwg extractor instead of fromAuthHeader():

    extractors.fromAuthHeaderWithScheme('jwt')

The legacy (v 1.*) extractor, extractors.versionOneCompatibilit() still
iuses 'JWT' as the default auth scheme.

Fixes #87
 2017-08-01 21:55:26 -04:00
Mike Nicholson 80e049c5ac Travis docs don't specifically mention v8 
but will this work?
 2017-07-28 00:01:27 -04:00
Mike Nicholson ef0cecdc67 Add test to cover missed branch in strategy. 2017-07-27 23:46:00 -04:00
Mike Nicholson 1bb3d5ba52 should be clear that jwt passed to secretOrKeyProvider is not decoded 2017-07-27 23:45:12 -04:00