Releases: vapor/jwt-kit
Releases · vapor/jwt-kit
Update BoringSSL to 80df7398ce52574801821ce7a76c031c35d6b882
This patch was authored and released by @0xTim.
- Update vendor script
- Update BoringSSL to 80df7398ce52574801821ce7a76c031c35d6b882
Add `is_private_email` claim to `AppleIdentityToken`
Unify Vendor Claim Verification Failure Message
Make CJWTKitBoringSSL implementation only
Add `ECDSAKey` support to `JWKS`
This patch was authored and released by @JaapWijnen.
- Allows to create
JWK
's usingECDSAKey
s - Allows use of
ECDSAKey
s withJWTSigner
. - Prevents a crash when using the
.es384
curve forECDSAKey
s
let key = ECDSAKey.generate(curve: .p384)
let jwks = JWKS(keys: [
JWK.ecdsa(.es384, identifier: JWKIdentifier(string: "token-kid"), x: key.parameters!.x, y: key.parameters!.y, curve: .p384)
])
let key = ECDSAKey.generate(curve: .p384)
let signer = JWTSigner.es384(key: key)
Add RSAKey support for x509 certificate
This patch was authored and released by @tanner0101.
Adds support for initializing RSAKey
from X.509 certificate pem files (#42).
// Create signer from X.509 certificate
let signer = try JWTSigner.rs256(key: .certificate(pem: ...))
Set default signer when using JWKs
This patch was authored and released by @tanner0101.
Fixes an issue causing no default signer to be set when configuring only JWKs (#39).
JWTKit 4.0.0
This patch was authored and released by @tanner0101.
Docs:
https://github.com/vapor/jwt-kit
More information on Vapor 4 official release:
https://forums.swift.org/t/vapor-4-official-release-begins/34802
Add support for Microsoft JWTs
This patch was authored and released by @tanner0101.
Adds new MicrosoftIdentityToken
that supports Microsoft's JWT format (#36).
Support JWKs with no algorithm
This patch was authored and released by @tanner0101.
Adds support for JSON Web Keys that do not specify an algorithm (#34).
JWKs are now stored directly in JWTSigners
via the use(jwk:)
method. When a request to verify a JWT is received that matches a JWK, both the JWT and the JWK's algorithm header is checked. A signer is then created on the fly to handle the request.