« Changelog History


jose v1.4.0 Release Notes

Release Date: 2015-11-17 // over 8 years ago
    • ✨ Enhancements
      • Added JOSE.unsecured_signing/0 and JOSE.unsecured_signing/1 for disabling the "none" algorithm due to the unsecured signing vulnerability and in relation to #10
      • Added JOSE.JWK.verify_strict/3, JOSE.JWS.verify_strict/3, and JOSE.JWT.verify_strict/3 for whitelisting which signing algorithms are allowed for verification.
      • Added JOSE.JWT.peek_payload/1 and JOSE.JWT.peek_protected/1 for inspecting the payload and protected parts of a signature.