Skip to content

Version 3.0.0
Compare
Choose a tag to compare
@csstaub csstaub released this 31 Jul 20:39
· 36 commits to v3 since this release
v3.0.0
This tag was signed with the committer’s verified signature. The key has expired.
csstaub Cedric Staub
GPG key ID: 4BBD76ECCCDB403B
Expired
Learn about vigilant mode.
a563785
This commit was signed with the committer’s verified signature. The key has expired.
csstaub Cedric Staub
GPG key ID: 4BBD76ECCCDB403B
Expired
Learn about vigilant mode.

First release after moving from square/go-jose to the new go-jose/go-jose repository.

Fixes & Improvements
a10ff54 - Fix for EC thumbprint template so we compute EC thumbprints correctly
30f4a6a - Treat zero Expected.Time as now in Claims.Validate when verifying JWTs
4ac8eda - Fix handling of the x5u header (X.509 certificate URL) in JWKs
d7b900b - Strip padding off base64 strings, to match spec per RFC7515 Appendix C
7f81482 - Extract key from JWKs to ensure you can use it when verifying a detached signature
e225b2d - Support non-pointer JWKs to match behavior for other key types
94cbec2 - Use ed25519 from the stdlib instead of the golang.org/x/crypto version
eae0da4 - Export jose-util helpers as they might be useful for others
4bac79d - Fix issue square/go-jose#182 that caused panic on claims with invalid JWT payload
60a6e9d - Use string.Builder to remove whitespace, instead of a regexp to improve performance
2009556 - Better error handling to avoid panic that can be caused by invalid headers

This release also cleans up a number of module references for the new repo migration, fixed some typos in comments, and more.

Assets 2
Loading