There are breaking changes in this release:
ring
was upgraded to 0.12. Until #619 lands, this crate will now be incompatible with all other crates that uses a different version ofring
.jwa::rng
is no longer public- #84 All AES GCM encryption now requires a user provided nonce. See this example.
SignatureAlgorithm::verify
now returnsResult<(), Error>
instead ofResult<bool, Error>
.- Bumped various dependencies, although they should not break any user facing code:
lazy_static
,data-encoding
.
Other non-breaking changes include:
- New helper
function in
JWKSet
to find key by Key ID - New helper functions in
jws::Compact
to retrieve parts without signature verification.
There are no breaking changes in this release.
Added a convenience validate_times
function to jwe::Compact
and jws::Compact
that allows
quick temporal validation if their payloads are ClaimSet
s.
This release adds no new features and breaks no API. It simply bumps ring
to 0.11.
This release adds no new features and breaks no API. It simply bumps Chrono and Ring to their newest version.
Update dependency to ring
0.9.4 so that different versions of ring
can no longer be used in a Rust build.
There are no new features or API change.
Minor bug fix release. Fixed incorrect ECDSA signature verification.
Thanks to @hobofan.
This is a major breaking release. Not all algorithms, verification, and features are supported yet.
- JSON Web Encryption support (JWE)
- JSON Web Key (JWK)
- Replaced
rustc_serialize
withserde
- Support custom headers for JWS
- Added a
biscuit::Empty
convenice empty struct that users can plug into type parameters when they do not need them, such as the type parameter of custom headers. - Added
SingleOrMultiple
andStringOrUri
enums to better represent the types of values that the JOSE RFCs allow.
biscuit::JWT
is no longer a struct. It is now a type alias forjws::Compact
, which according to the RFC, is the compact serialization of a JSON Web Signature (JWS).- Moved
biscuit::Algorithm
tobiscuit::jwa::SignatureAlgorithm
to better reflect its use. - Various internal traits that should be implementation detail and opaque to users of
biscuit
have been changed, added, or removed.
This is an initial release after forking from Version 1.1.6 of Keats/rust-jwt
.
- Added RSA signing and verification
- Added ECDSA verification (signing support is pending addition of support in
ring
)