5 Commits

Author	SHA1	Message	Date
Sebastiaan van Stijn	8e9d9ebf6f	Fix security vulnerability (#40) ... Fixes a security vulnerability where a jwt token could potentially be validated having invalid string characters. (cherry picked from commit a211650c6ae1cff6d7347d3e24070d65dcfb1122) https://github.com/form3tech-oss/jwt-go/pull/14 Co-Authored-By: Giorgos Lampadakis <82932062+giorgos-f3@users.noreply.github.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2021-07-30 22:27:54 +02:00
Alistair Hey	0f726ea0e7	Fix issue with MapClaims VerifyAudience []string (#12) ... * Fix issue with MapClaims VerifyAudience []string There was an issue in MapClaims's VerifyAudiance where a []string (which is valid in the spec) would return true (claim is found, or nil) when required was not set. It now checks interface types correctly and has tests written Signed-off-by: Alistair Hey <alistair@heyal.co.uk> * Keep aud validation constant time compare Keep aud validation using constant time compare by not instantly returning on a true comparison, keep comparing all options and store result in a variable Signed-off-by: Alistair Hey <alistair@heyal.co.uk> Co-authored-by: Banse, Christian <christian.banse@aisec.fraunhofer.de>	2021-05-28 22:45:11 -03:00
Kévin Dunglas	42625203e8	chore: code cleanup (#10)	2021-05-27 19:26:21 -04:00
Dave Grijalva	317b82a681	Merge remote-tracking branch 'origin/master' into release_3_0_0	2016-06-06 18:20:35 -07:00
Dave Grijalva	70eefe1649	moved map claims to its own file	2016-04-12 16:22:14 -07:00