hanzoai/passport-jwt
2
0
Fork 0
mirror of https://github.com/hanzoai/passport-jwt.git synced 2026-09-24 17:01:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
174 Commits 2 Branches 15 Tags
master
Commit Graph
25 Commits
Author SHA1 Message Date
Mike Nicholson 0bb663be0c 4.0.1 release 
* Updates jsonwebtoken dependency to ^9.0.0 to address high severity
  vulnerability CVE-2022-3517
* Updates a number of other dependencies
* Fixes a number of typos

[Developer facing]
* Updates CI to use github actions
 2022-12-24 00:15:42 -05:00
Mike Nicholson 27a2748498 Update jsonwebtoken to 9.0.0 
Previous version was affected by high severity vulnerability CVE-2022-23529.

Resolves #244
 2022-12-24 00:01:50 -05:00
Mike Nicholson 40892bd81c Update jsonwebtoken and run npm audit fix 2022-02-21 21:52:41 -05:00
Mike Nicholson ebd474b0f1 Update mocha to resolve vulnerabilities 2020-08-04 22:56:47 -04:00
Mike Nicholson c46e344ad4 Use nyc for coverage 2020-08-04 22:56:41 -04:00
Mike Nicholson 214aec05b6 Update dependencies to resolve vulnerabilities. 
`npm audit` and GitHub were flagging vulnerabilities in some
dependencies of Mocha. Update dependencies to newer versions without
those vulnerabilities.
 2019-05-22 22:42:57 -04:00
Mike Nicholson 24892b8359 Update URLs to reference new GitHub username 2019-05-22 22:42:18 -04:00
Mike Nicholson 8f543a96f7 Update version to 4.0.0 2018-03-12 22:36:04 -04:00
Mike Nicholson 5497660729 Update jsonwebtoken dependency to latest. 
Add package-lock.json as well.
 2018-03-12 22:15:39 -04:00
Mike Nicholson 6d4b3fafff Rev patch version for doc update 2017-10-26 21:40:16 -04:00
Mike Nicholson 28ffbb0f71 Update package version 2017-08-15 23:26:52 -04:00
Matt Bond a8b3d9acb8 update dependencies to most recent major versions and add istanbul 2016-11-01 14:28:13 -04:00
Mike Nicholson 9fd7f9761e Fix version in package.json 
This commit is the real 2.2.0 release.
 2016-10-30 23:17:41 -04:00
Mike Nicholson 7a09b64a5d [Updated] v2.1.0 -> 2.2.0 
This version includes the following changes:
    - Adds new fromExtrators extrator
    - Fixes typeError with body field extractor
 2016-10-30 23:09:47 -04:00
Mike Nicholson 269d5cad90 [Updated] v2.0.0 -> 2.1.0 
This version includes the following changes:
    - Fixes nodejs 6 support (issue #62)
    - Adds the ability to chain multiple extractor functions via
      fromExtractors([ext1, ext2, ...])
 2016-06-21 00:45:55 -04:00
Mike Nicholson 4e729f1fc0 [Update] v1.2.1 -> v2.0.0 
Note: This is a breaking change to the API.  See README.md for more info.

New Features:
    Switch to using functions (extractors) for parsing JWT from request

    Provide a number of commonly used extractors

    Provide a versionOneCompatibility extractor to mimic legacy behavior
 2016-02-11 00:08:29 -05:00
Mike Nicholson c2e214d851 Add code-coverage script 2015-12-29 18:33:32 -05:00
Mike Nicholson c88c3a9f15 [Updated] v1.1.1 -> v1.2.1 
New Features:
        #25 Added algorithms option to allow user to specify
            allowabe JWT signing algorithms.
        #13 Add ignoreExpiration option to allow user to skip
            validation of token's expiration date.

    Bug Fixes:
        #30 Fixed typos in unit test strings
 2015-09-16 21:20:09 -04:00
Mike Nicholson 0f4ffa460a [Update] v1.1.0 -> v1.1.1 
Bug Fixes:
    #22 variable 'leaked' into global space
    #17 potential crash if request.url is missing token property
Misc:
   Various README cleanups
 2015-08-20 00:29:17 -04:00
Mike Nicholson fb1a12fca4 [Update] v1.0.1 -> 1.1.0 
Fixes security issue with old jsonwebtoken dependency
https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/

Jwt can now be passed via query parameter.
 2015-04-23 23:16:21 -04:00
BDiehr fccb0f3dc4 Update jsonwebtoken dependency 
Critical vulenerabilities in early versions of the jsonwebtoken dependency, read more about it here:

https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/
 2015-04-14 09:08:49 -04:00
Mike Nicholson 39d7254cb6 [Update] v0.1.1 v1.0.0 
Move to v1.0.0 due to a change in the way the constructor is called.
secretOrKey was moved into the opts object.
 2015-03-02 23:15:56 -05:00
Mike Nicholson f2d4fa313e [Update] v0.1.0 -> v0.1.1 
- passReqToCallback constructor option is now honored.
- various README.md and documentation updates.
 2015-03-02 22:43:05 -05:00
Mike Nicholson a77b85edfa 0.1.0 2014-11-11 22:14:27 -05:00
Mike Nicholson aec0fba51a Initial check in 2014-11-09 00:43:38 -05:00