Skip to content
This repository has been archived by the owner on Feb 27, 2023. It is now read-only.

Version 2.3.0
Compare
Choose a tag to compare
@csstaub csstaub released this 27 Feb 00:14
· 123 commits to master since this release
v2.3.0
This tag was signed with the committer’s verified signature.
csstaub Cedric Staub
GPG key ID: CF5A0B62B8712EBE
Verified
Learn about vigilant mode.
628223f
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

New Features

  • Add support for unwrapping JSON Web Key Set in the jwt sub-package. This means the key passed to Claims or Decrypt can now be a set of keys (of type *jose.JSONWebKeySet), and the key will be selected automatically based on the key id in the header of the token.

Bug Fixes

  • Improves handling of exp, iat and nbf claims. This means proper handling for zero dates (#214), don't error if optional exp and nbf claims are missing from the token (#220), and perform an extra check on iat if it is present (#217). Note that expiration in tokens is optional per standard, if you want to require expiration or other claims to be absolutely present in a token be sure to check the claim is present.

Note this release also drops support for Go 1.5 and Go 1.6, we now require Go 1.7 or later.

Assets 2
Loading