diff --git a/VERSION_HISTORY.md b/VERSION_HISTORY.md index 993eac9..b605b45 100644 --- a/VERSION_HISTORY.md +++ b/VERSION_HISTORY.md @@ -2,7 +2,7 @@ #### 3.0.0 -* **Compatibility Breaking Changes** +* **Compatibility Breaking Changes**: See MIGRATION_GUIDE.md for tips on updating your code * Dropped support for `[]byte` keys when using RSA signing methods. This convenience feature could contribute to security vulnerabilities involving mismatched key types with signing methods. * `ParseFromRequest` has been moved to `request` subpackage and usage has changed * The `Claims` property on `Token` is now type `Claims` instead of `map[string]interface{}`. The default value is type `MapClaims`, which is an alias to `map[string]interface{}`. This makes it possible to use a custom type when decoding claims. @@ -17,9 +17,16 @@ * Signing method registry is now thread safe * Added new property to `ValidationError`, which contains the raw error returned by calls made by parse/verify (such as those returned by keyfunc or json parser) -#### 2.6.0 +#### 2.7.0 -This will likely be the last backwards compatible release before 3.0.0. +This will likely be the last backwards compatible release before 3.0.0, excluding essential bug fixes. + +* Added new option `-show` to the `jwt` command that will just output the decoded token without verifying +* Error text for expired tokens includes how long it's been expired +* Fixed incorrect error returned from `ParseRSAPublicKeyFromPEM` +* Documentation updates + +#### 2.6.0 * Exposed inner error within ValidationError * Fixed validation errors when using UseJSONNumber flag