+
Skip to content

Tags: todd-os/jwt

Tags

v5.2.2

Toggle v5.2.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Merge commit from fork

* Remove strings.Split and add parseToken function

* review and add tests

v4.5.2

Toggle v4.5.2's commit message
Backporting 0951d18 to v4

v4.5.1

Toggle v4.5.1's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Merge commit from fork

* Initial draft of adding text to ParseWithClaims

* Adjusted example and referring to the example in Parse functions

* Backporting logic from v5

* Added a test

v5.2.1

Toggle v5.2.1's commit message

Verified

This tag was signed with the committer’s verified signature.
mfridman Michael Fridman
Release v5.2.1

v5.2.0

Toggle v5.2.0's commit message

Verified

This tag was signed with the committer’s verified signature.
mfridman Michael Fridman
Release v5.2.0

v5.1.0

Toggle v5.1.0's commit message

Verified

This tag was signed with the committer’s verified signature.
mfridman Michael Fridman
Release v5.1.0

v5.0.0

Toggle v5.0.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
enable jwt.ParsePublicKeyFromPEM to parse PKCS1 Public Key (golang-jw…

…t#120)

v5.0.0-rc.2

Toggle v5.0.0-rc.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Adjusting the error checking example (golang-jwt#270)

This PR adjusts the error checking example so that a check for an invalid signature is also included.

See discussion in golang-jwt#143

v5.0.0-rc.1

Toggle v5.0.0-rc.1's commit message

Partially verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
We cannot verify signatures from co-authors, and some of the co-authors attributed to this commit require their commits to be signed.
`v5` Pre-Release (golang-jwt#234)

Co-authored-by: Micah Parks <66095735+MicahParks@users.noreply.github.com>
Co-authored-by: Michael Fridman <mf192@icloud.com>

v4.5.0

Toggle v4.5.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Allow strict base64 decoding (golang-jwt#259)

By default base64 decoder works in non-strict mode which
allows tweaking signatures having padding without failing validation.

This creates a potential problem if application treats token value as an identifier.

For example ES256 signature has length of 64 bytes and two padding symbols (stripped by default).
Therefore its base64-encoded value can only end with A, Q, g and w.
In non-strict mode last symbol could be tweaked resulting in 16 distinct
token values having the same signature and passing validation.

This change adds backward-compatible global config variable DecodeStrict
(similar to existing DecodePaddingAllowed) that enables strict base64 decoder mode.

See also golang/go#15656.

Signed-off-by: Alexander Yastrebov <yastrebov.alex@gmail.com>
点击 这是indexloc提供的php浏览器服务,不要输入任何密码和下载