v3.3.0 (2026-09-11)
Features:
- Allow a leeway to be given for the
iatclaim verification #747 - (@denis1011101) - Revamp the error hierarchy under a new
JWT::Errorbase class; signing failures now consistently raiseJWT::EncodeError, see UPGRADING.md #722 (@anakinj)
Fixes and enhancements:
- Refactor
JWT::JWK::Set#initializeso each construction path is a named method #758 (@anakinj) - Fix rejection of unknown algorithms from JWKs for RFC compliance and pquip #728
- Fix the
Style/DirectiveScopeRuboCop offense failing the build #752 - Fix
JWT::JWK::Setsharing its key collection with the set it was copied from #751 - Reset the decoded payload and verification state in
JWT::EncodedToken#encoded_payload=#749 - Fix
JWT::Token#detach_payload!not invalidating an already rendered token #748