JWT v2.2.2 Release Notes

Release Date: 2020-08-18 // over 3 years ago
  • ๐Ÿ’Ž Full Changelog

    Implemented enhancements:

    • ๐Ÿ’Ž JWK does not decode. #332
    • ๐Ÿ’Ž Inconsistent use of symbol and string keys in args (exp and alrogithm). #331
    • ๐Ÿ“Œ Pin simplecov to < 0.18 #356 (anakinj)
    • ๐Ÿ’Ž verifies algorithm before evaluating keyfinder #346 (jb08)
    • ๐Ÿš€ Update Rails 6 appraisal to use actual release version #336 (smudge)
    • โšก๏ธ Update Travis #326 (berkos)
    • ๐Ÿ‘Œ Improvement/encode hmac without key #312 (JotaSe)

    ๐Ÿ›  Fixed bugs:

    • โš  v2.2.1 warning: already initialized constant JWT Error #335
    • ๐Ÿ’Ž 2.2.1 is no longer raising JWT::DecodeError on nil verification key #328
    • ๐Ÿ›  Fix algorithm picking from decode options #359 (excpt)
    • ๐Ÿšฉ Raise error when verification key is empty #358 (anakinj)

    Closed issues:

    • ๐Ÿ’Ž JWT RSA: is it possible to encrypt using the public key? #366
    • ๐Ÿ’Ž Example unsigned token that bypasses verification #364
    • ๐Ÿ‘Œ Verify exp claim/field even if it's not present #363
    • ๐Ÿ’Ž Decode any token #360
    • ๐Ÿ’Ž [question] example of using a pub/priv keys for signing? #351
    • ๐Ÿ›ฐ JWT::ExpiredSignature raised for non-JSON payloads #350
    • ๐Ÿ‘Œ verify_aud only verifies that at least one aud is expected #345
    • ๐Ÿ’Ž Sinatra 4.90s TTFB #344
    • ๐Ÿ’Ž How to Logout #342
    • ๐Ÿ’Ž jwt token decoding even when wrong token is provided for some letters #337
    • ๐Ÿ’Ž Need to use symbolize_keys everywhere! #330
    • ๐Ÿ’Ž eval() used in Forwardable limits usage in iOS App Store #324
    • ๐Ÿ’Ž HS512256 OpenSSL Exception: First num too large #322
    • ๐Ÿ’Ž Can we change the separator character? #321
    • ๐Ÿ‘Œ Verifying iat without leeway may break with poorly synced clocks #319
    • โž• Adding support for 'hd' hosted domain string #314
    • ๐Ÿ’Ž There is no "typ" header in version 2.0.0 #233

    ๐Ÿ”€ Merged pull requests:

    • ๐Ÿš€ Release v2.2.2 #367 (excpt)
    • ๐Ÿ›  Fix 'already initialized constant JWT Error' #357 (excpt)
    • ๐Ÿ‘Œ Support RSA.import for all Ruby versions. #333 (rabajaj0509)
    • โœ‚ Removed forwardable dependency #325 (anakinj)