Skip to content

Releases: lcobucci/jwt

Version 3.0.1

10 Jun 18:17
Compare
Choose a tag to compare

Fixes:

  • Removing possible warning in HMAC signer caused by invalid argument (#24)

Version 3.0.0

01 Apr 15:59
Compare
Choose a tag to compare

For security reasons we recommend that users upgrade to this last version.

Fixes:

  • Parser is not relying on alg header to retrieve the signature algorithm (#21)

Improvements:

  • Token class simplified (#22)
  • JSON decoder is not converting to arrays anymore (#23)

The major thing of this version is that you should now specify the signer in order to verify a token, so one would not be able to forge tokens with different algorithms than the expected one.

Version 2.1.1

13 Mar 13:57
Compare
Choose a tag to compare
  • Typo fixed (#20)

Version 2.1.0

07 Mar 07:29
Compare
Choose a tag to compare

New features:

  • RSA signers
  • ECDSA signers
  • Token::getClaim() method

Improved readme

1.0.1

07 Mar 07:30
Compare
Choose a tag to compare

Fixing some codign style

1.0.0: * JWT plain token creation

08 Mar 06:16
Compare
Choose a tag to compare

Implemented features

  • JWT plain token creation
  • JWS with HMAC-SHA256, HMAC-SHA384 and HMAC-SHA512 creation
  • Parsing JWT/JWS from strings