« Changelog History


JWT v2.2.3 Release Notes

Release Date: 2021-04-19 // 6 months ago

  • 💎 Full Changelog

    Implemented enhancements:

    • 👌 Verify algorithm before evaluating keyfinder #343
    • 💎 Why jwt depends on json < 2.0 ? #179
    • 👌 Support for JWK in-lieu of rsa_public #158
    • 🛠 Fix rspec raise_error warning #413 (excpt)
    • ➕ Add support for JWKs with HMAC key type. #372 (phlegx)
    • 👌 Improve 'none' algorithm handling #365 (danleyden)
    • 📜 Handle parsed JSON JWKS input with string keys #348 (martinemde)
    • 👍 Allow Numeric values during encoding #327 (fanfilmu)

    Closed issues:

    • 💎 "Signature verification raised", yet jwt.io says "Signature Verified" #401
    • 🏗 truffleruby-head build is failing #396
    • 💎 JWT::JWK::EC needs require 'forwardable' #392
    • 💎 How to use a 'signing key' as used by next-auth #389
    • 💎 undefined method `verify' for nil:NilClass when validate a JWT with JWK #383
    • 💎 Make specifying "algorithm" optional on decode #380
    • 💎 ADFS created access tokens can't be validated due to missing 'kid' header #370
    • 🆕 new version? #355
    • 💎 JWT gitlab OmniAuth provider setup support #354
    • 🚀 Release with support for RSA.import for ruby < 2.4 hasn't been released #347
    • 💎 cannot load such file -- jwt #339

    🔀 Merged pull requests:

    • ✂ Remove codeclimate code coverage dev dependency #414 (excpt)
    • ➕ Add forwardable dependency #408 (anakinj)
    • 💎 Ignore casing of algorithm #405 (johnnyshields)
    • ✅ Document function and add tests for verify claims method #404 (yasonk)
    • 💎 documenting calling verify_jti callback with 2 arguments in the readme #402 (HoneyryderChuck)
    • 🏗 Target the master branch on the build status badge #399 (anakinj)
    • 💎 Improving the local development experience #397 (anakinj)
    • 🛠 Fix sourcelevel broken links #395 (anakinj)
    • 💎 Don't recommend installing gem with sudo #391 (tjschuck)
    • 💎 Enable rubocop locally and on ci #390 (anakinj)
    • ✅ Ci and test cleanup #387 (anakinj)
    • 💎 Make JWT::JWK::EC compatible with Ruby 2.3 #386 (anakinj)
    • 👌 Support JWKs for pre 2.3 rubies #382 (anakinj)
    • 👷 Replace Travis CI with GitHub Actions (also favor openssl/rbnacl combinations over rails compatibility tests) #381 (anakinj)
    • ➕ Add auth0 sponsor message #379 (excpt)
    • 💅 Adapt HMAC to JWK RSA code style. #378 (phlegx)
    • 💎 Disable Rails cops #376 (anakinj)
    • 👌 Support exporting RSA JWK private keys #375 (anakinj)
    • 💎 Ebert is SourceLevel nowadays #374 (anakinj)
    • ➕ Add support for JWKs with EC key type #371 (richardlarocque)
    • ➕ Add Truffleruby head to CI #368 (gogainda)
    • ➕ Add more docs about JWK support #341 (take)

Previous changes from v2.2.2

  • 💎 Full Changelog

    Implemented enhancements:

    • 💎 JWK does not decode. #332
    • 💎 Inconsistent use of symbol and string keys in args (exp and alrogithm). #331
    • 📌 Pin simplecov to < 0.18 #356 (anakinj)
    • 💎 verifies algorithm before evaluating keyfinder #346 (jb08)
    • 🚀 Update Rails 6 appraisal to use actual release version #336 (smudge)
    • ⚡️ Update Travis #326 (berkos)
    • 👌 Improvement/encode hmac without key #312 (JotaSe)

    🛠 Fixed bugs:

    • ⚠ v2.2.1 warning: already initialized constant JWT Error #335
    • 💎 2.2.1 is no longer raising JWT::DecodeError on nil verification key #328
    • 🛠 Fix algorithm picking from decode options #359 (excpt)
    • 🚩 Raise error when verification key is empty #358 (anakinj)

    Closed issues:

    • 💎 JWT RSA: is it possible to encrypt using the public key? #366
    • 💎 Example unsigned token that bypasses verification #364
    • 👌 Verify exp claim/field even if it's not present #363
    • 💎 Decode any token #360
    • 💎 [question] example of using a pub/priv keys for signing? #351
    • 🛰 JWT::ExpiredSignature raised for non-JSON payloads #350
    • 👌 verify_aud only verifies that at least one aud is expected #345
    • 💎 Sinatra 4.90s TTFB #344
    • 💎 How to Logout #342
    • 💎 jwt token decoding even when wrong token is provided for some letters #337
    • 💎 Need to use symbolize_keys everywhere! #330
    • 💎 eval() used in Forwardable limits usage in iOS App Store #324
    • 💎 HS512256 OpenSSL Exception: First num too large #322
    • 💎 Can we change the separator character? #321
    • 👌 Verifying iat without leeway may break with poorly synced clocks #319
    • ➕ Adding support for 'hd' hosted domain string #314
    • 💎 There is no "typ" header in version 2.0.0 #233

    🔀 Merged pull requests: