jwt 2.2.2

jwt-2.2.2

on Ruby Gems

v2.2.2 (2020-08-18)

Full Changelog

Implemented enhancements:

• JWK does not decode. #332
• Inconsistent use of symbol and string keys in args (exp and alrogithm). #331
• Pin simplecov to < 0.18 #356 (anakinj)
• verifies algorithm before evaluating keyfinder #346 (jb08)
• Update Rails 6 appraisal to use actual release version #336 (smudge)
• Update Travis #326 (berkos)
• Improvement/encode hmac without key #312 (JotaSe)

Fixed bugs:

• v2.2.1 warning: already initialized constant JWT Error #335
• 2.2.1 is no longer raising JWT::DecodeError on nil verification key #328
• Fix algorithm picking from decode options #359 (excpt)
• Raise error when verification key is empty #358 (anakinj)

Closed issues:

• JWT RSA: is it possible to encrypt using the public key? #366
• Example unsigned token that bypasses verification #364
• Verify exp claim/field even if it's not present #363
• Decode any token #360
• [question] example of using a pub/priv keys for signing? #351
• JWT::ExpiredSignature raised for non-JSON payloads #350
• verify_aud only verifies that at least one aud is expected #345
• Sinatra 4.90s TTFB #344
• How to Logout #342
• jwt token decoding even when wrong token is provided for some letters #337
• Need to use symbolize\_keys everywhere! #330
• eval() used in Forwardable limits usage in iOS App Store #324
• HS512256 OpenSSL Exception: First num too large #322
• Can we change the separator character? #321
• Verifying iat without leeway may break with poorly synced clocks #319
• Adding support for 'hd' hosted domain string #314
• There is no "typ" header in version 2.0.0 #233

Merged pull requests:

• Fix 'already initialized constant JWT Error' #357 (excpt)
• Support RSA.import for all Ruby versions. #333 (rabajaj0509)
• Removed forwardable dependency #325 (anakinj)