All Versions
33
Latest Version
Avg Release Cycle
132 days
Latest Release
615 days ago

Changelog History
Page 2

  • v2.0.0.beta1 Changes

    February 27, 2017

    🔄 Changelog

    💎 v2.0.0.beta1 (2017-02-27)

    💎 Full Changelog

    Implemented enhancements:

    🛠 Fixed bugs:

    • ruby-jwt::raw_to_asn1: Fails for signatures less than byte_size #155
    • 💎 The leeway parameter is applies to all time based verifications #129
    • ➕ Add options for claim-specific leeway #187 (EmilioCristalli)
    • 💎 Make algorithm option required to verify signature #184 (EmilioCristalli)
    • 🛰 Validate audience when payload is a scalar and options is an array #183 (steti)

    Closed issues:

    • 💎 Different encoded value between servers with same password #197
    • 💎 Signature is different at each run #190
    • 💎 Include custom headers with password #189
    • 💎 can't create token - 'NotImplementedError: Unsupported signing method' #186
    • 💎 Why jwt depends on json < 2.0 ? #179
    • 💎 Cannot verify JWT at all?? #177
    • 👌 verify_iss: true is raising JWT::DecodeError instead of JWT::InvalidIssuerError #170

    🔀 Merged pull requests:

  • v1.5.6 Changes

    September 19, 2016

    💎 Full Changelog

    🛠 Fixed bugs:

    • 🛠 Fix missing symbol handling in aud verify code #166 (excpt)

    🔀 Merged pull requests:

  • v1.5.5 Changes

    September 16, 2016

    💎 Full Changelog

    Implemented enhancements:

    • 💎 JWT.decode always raises JWT::ExpiredSignature for tokens created with Time objects passed as the exp parameter #148

    🛠 Fixed bugs:

    • 💎 expiration check does not give "Signature has expired" error for the exact time of expiration #157
    • 💎 JTI claim broken? #152
    • 💎 Audience Claim broken? #151
    • 💎 1.5.3 breaks compatibility with 1.5.2 #133
    • 🔖 Version 1.5.3 breaks 1.9.3 compatibility, but not documented as such #132
    • 🛠 Fix: exp claim check #161 (excpt)

    Closed issues:

    • 💎 Rendering Json Results in JWT::DecodeError #162
    • 💎 PHP Libraries #154
    • 🔒 [security] Signature verified after expiration/sub/iss checks #153
    • 💎 Is ruby-jwt thread-safe? #150
    • 💎 JWT 1.5.3 #143
    • 💎 gem install v 1.5.3 returns error #141
    • ➕ Adding a CHANGELOG #140

    🔀 Merged pull requests:

  • v1.5.4 Changes

    March 24, 2016

    💎 Full Changelog

    Closed issues:

    🔀 Merged pull requests:

  • v1.5.3 Changes

    February 24, 2016

    🔄 Changelog

    • ⬇️ Dropped ruby 1.9.3 support #131
    • 📚 Update README.md - improve documentation and fix typos
    • ✂ Removed echoe dependency
    • 🛠 Fix hash/string key issue in options #130
    • 👍 Allow a proc to be passed for JTI verification #126
    • 🔨 Code refactoring and code smell fixes

    Commits

    🔀 4a0b939 Merge pull request #131 from jwt/drop-ruby-1.9.3-support
    ⚡️ cfc8362 Update .travis.yml
    🔀 04120f6 Merge pull request #130 from tpickett66/hash-keys
    💎 a4d0473 Bump version
    💎 a6d1a33 Allow verification option keys to be strings or symbols
    💎 b47ab94 Make Verify an instantiatable class
    🛰 6a9b5cc Adjust aud checking to use a string key against the payload
    🚚 7b80ec9 Move Verify specs to a separate file.
    ⚡️ 2c7837f update testing and install sections of readme
    🔀 d4fca40 Merge pull request #126 from yahooguntu/master
    💎 0100ad6 Allow a proc to be passed for JTI verification
    🔨 b85b30e Merge pull request #122 from excpt/refactor-json-dependency
    🔀 1499b16 Merge pull request #123 from excpt/ci-settings
    🚚 2d5bc86 Remove obsolete json code
    ✅ a03fbaf Add ruby 2.3.0 for travis ci testing
    ⚡️ 91b4220 Update README.md
    🔀 86f470b Merge pull request #118 from excpt/master
    💎 a6672da Add fancy badges to README.md
    🔀 0a2fa6c Merge pull request #117 from excpt/master
    🔀 707376a Fix merge options bug
    💎 f889e49 Fix some code smells
    💎 a0815ee Fix some more code smells
    💎 e556eb9 Fix some code smells in JWT::Verify class
    🔨 7a7ac9a Refactor decode and verify functionality
    🔀 59dd2e0 Merge pull request #116 from excpt/master
    💎 79cdce8 Fix code smell reported by rubocop
    💎 451d950 Fix code smells reported by rubocop
    ✅ 4d440dc Fix travis test command
    🚚 279df0e Remove echoe dependency
    🚚 4f45b66 Add version class, remove utf8 encoding comment
    ⚡️ 559a23b Update codeclimate settings
    🔀 cabde34 Merge pull request #114 from FXFusion/master
    ⚡️ e5a94db Updated readme for iss/aud options
    🔀 6c84213 Merge pull request #113 from lwe/lwe-jti-validation-fix
    💎 320306b relax restrictions on "jti" claim verification
    🔀 27c7412 Merge pull request #112 from kat3kasper/fix/misspelling
    💎 02cbbd6 Fix error misspelling

  • v1.5.2 Changes

    October 27, 2015

    💎 Full Changelog

    Implemented enhancements:

    • 💎 Must we specify algorithm when calling decode to avoid vulnerabilities? #107
    • 🔨 Code review: Rspec test refactoring #85 (excpt)

    🛠 Fixed bugs:

    • 💎 aud verifies if aud is passed in, :sub does not #102
    • 💎 iat check does not use leeway so nbf could pass, but iat fail #83

    Closed issues:

    • ✅ Test ticket from Code Climate #104
    • ✅ Test ticket from Code Climate #100
    • 🛰 Is it possible to decode the payload without validating the signature? #97
    • 💎 What is audience? #96
    • 💎 Options hash uses both symbols and strings as keys. #95

    🔀 Merged pull requests:

  • v1.5.1 Changes

    June 22, 2015

    💎 Full Changelog

    Implemented enhancements:

    • 🛠 Fix either README or source code #78
    • 💎 Validate against draft 20 #38

    🛠 Fixed bugs:

    • 💎 ECDSA signature verification fails for valid tokens #84
    • 💎 Shouldn't verification of additional claims, like iss, aud etc. be enforced when in options? #81
    • 🛠 Fix either README or source code #78
    • 💎 decode fails with 'none' algorithm and verify #75

    Closed issues:

    • 💎 Doc mismatch: uninitialized constant JWT::ExpiredSignature #79
    • 💎 TypeError when specifying a wrong algorithm #77
    • 💎 jti verification doesn't prevent replays #73

    🔀 Merged pull requests:

    • 💎 Correctly sign ECDSA JWTs #87 (jurriaan)
    • 🛠 fixed results of decoded tokens in readme #86 (piscolomo)
    • 💎 Force verification of "iss" and "aud" claims #82 (lwe)

  • v1.5.0 Changes

    May 09, 2015

    💎 Full Changelog

    Implemented enhancements:

    • 💎 Needs to support asymmetric key signatures over shared secrets #46
    • 💎 Implement Elliptic Curve Crypto Signatures #74 (jtdowney)
    • ➕ Add an option to verify the signature on decode #71 (javawizard)

    Closed issues:

    • 💎 Check JWT vulnerability #76

    🔀 Merged pull requests:

    • 🛠 Fixed some examples to make them copy-pastable #72 (jer)

  • v1.4.1 Changes

    March 12, 2015

    💎 Full Changelog

    🛠 Fixed bugs:

    • 💎 jti verification not working per the spec #68
    • 👌 Verify ISS should be off by default #66

    🔀 Merged pull requests:

  • v1.4.0 Changes

    March 10, 2015

    💎 Full Changelog

    Closed issues:

    • 💎 The behavior using 'json' differs from 'multi_json' #41

    🔀 Merged pull requests: