Skip to content

Releases: vapor/jwt-kit

JWS/x5c support with ES256 keys

26 Mar 15:28
ef12bdf
Compare
Choose a tag to compare
This patch was authored by @WFT and released by @gwynne.

Verify JWS tokens using x5c header parameters (ES256 keys only right now).

This PR is based on @0xTim’s work in #75, but uses the X509_STORE/X509_verify_cert API rather than re-implementing that logic in Swift.

Details on x5c: https://www.rfc-editor.org/rfc/rfc7515#section-4.1.6

Add support for Octet Key Pairs with the EdDSA algorithm using the ED25519 curve

19 Jan 20:00
dcd78f0
Compare
Choose a tag to compare
This patch was authored by @mgratzer and released by @0xTim.

This implements support for Octet Key Pairs (RFC8037) with the EdDSA algorithm and ED25519 curves. It closes #50.

Add `JWTSigner.unsecuredNone`

02 Aug 11:04
87ce13a
Compare
Choose a tag to compare
This patch was authored by @baarde and released by @0xTim.

This PR adds support for the "none" algorithm described in Section 6 of RFC 7519.

Add experimental watchOS support

08 Jul 23:50
aa7d9cd
Compare
Choose a tag to compare
This patch was authored by @thebabufrik and released by @0xTim.

Adds experimental watchOS support by providing a watchOS platform to match the minimum version of the dependencies so it will compile

Fix Base64URL JWK conversion for ECDSA keys

14 Jun 18:27
718e94f
Compare
Choose a tag to compare
This patch was authored by @MFranceschi6 and released by @0xTim.

Fixes an issue where JWTKit does not follow RFC7517

An jwk representing an ecdsa key is represented with the parameters x and y in base64url-encoded form. Previously the parameters were converted as Base64 encoded instead of Base64URL encoded.

Adds new APIs for converting to and from base64 URL encoded data

Update supported Swift Versions and BoringSSL

15 May 16:25
3537dd3
Compare
Choose a tag to compare
This patch was authored and released by @0xTim.

This removes support for Swift 5.2 and Swift 5.3, making Swift 5.4 the earliest supported version as
announced

Updates the version of BoringSSL vended to ce2a353d0147bac03ef883d91dcd9c405ab527fa

Expose the curve on ECDSA Keys

12 Mar 23:04
5f9c44d
Compare
Choose a tag to compare
This patch was authored by @danramteke and released by @0xTim.

Exposes the Curve on ECDSAKeys

Add ability to specify typ of JWT when signing

23 Oct 16:33
1822bb0
Compare
Choose a tag to compare
This patch was authored by @Frizlab and released by @0xTim.

Allows for a custom typ to be set in the signer instead of defaulting to JWT.

Resolves #64

Added tvOS support

28 Sep 21:20
ca2edf6
Compare
Choose a tag to compare
This patch was authored by @mbutan and released by @0xTim.

Adds support for tvOS

Expand Crypto Dependencies

27 Sep 09:31
846998c
Compare
Choose a tag to compare
This patch was authored and released by @0xTim.

Expand the versions of Swift Crypto we depend on to include Swift Crypto 2.0.0 and up