Skip to content

Version 3.0.0
Compare
Choose a tag to compare
@lcobucci lcobucci released this 01 Apr 15:59
· 1544 commits to 5.5.x since this release
3.0.0
88ed5f4

For security reasons we recommend that users upgrade to this last version.

Fixes:

  • Parser is not relying on alg header to retrieve the signature algorithm (#21)

Improvements:

  • Token class simplified (#22)
  • JSON decoder is not converting to arrays anymore (#23)

The major thing of this version is that you should now specify the signer in order to verify a token, so one would not be able to forge tokens with different algorithms than the expected one.

Assets 2
Loading