« Changelog History


go-jose v2.3.0 Release Notes

Release Date: 2019-02-27 // about 5 years ago

  • New Features

    • Add support for unwrapping JSON Web Key Set in the jwt sub-package. This means the key passed to Claims or Decrypt can now be a set of keys (of type *jose.JSONWebKeySet), and the key will be selected automatically based on the key id in the header of the token.

    🐛 Bug Fixes

    • 👌 Improves handling of exp, iat and nbf claims. This means proper handling for zero dates (#214), don't error if optional exp and nbf claims are missing from the token (#220), and perform an extra check on iat if it is present (#217). Note that expiration in tokens is optional per standard, if you want to require expiration or other claims to be absolutely present in a token be sure to check the claim is present.

    🚀 Note this release also drops support for Go 1.5 and Go 1.6, we now require Go 1.7 or later.