4 Commits

Author	SHA1	Message	Date
Hinagiku Soranoba	02bc1ac506	When exp indicates the present, make it invalid. (#86) ... * When exp indicates the present, make it invalid. * Update map_claims_test.go Co-authored-by: Christian Banse <oxisto@aybaze.com>	2021-09-10 17:44:55 -04:00
Alexander F. Rødseth	eac9e9edf2	Format code with "go fmt" (#53)	2021-08-20 20:43:08 -03:00
Sebastiaan van Stijn	8e9d9ebf6f	Fix security vulnerability (#40) ... Fixes a security vulnerability where a jwt token could potentially be validated having invalid string characters. (cherry picked from commit a211650c6ae1cff6d7347d3e24070d65dcfb1122) https://github.com/form3tech-oss/jwt-go/pull/14 Co-Authored-By: Giorgos Lampadakis <82932062+giorgos-f3@users.noreply.github.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2021-07-30 22:27:54 +02:00
Alistair Hey	0f726ea0e7	Fix issue with MapClaims VerifyAudience []string (#12) ... * Fix issue with MapClaims VerifyAudience []string There was an issue in MapClaims's VerifyAudiance where a []string (which is valid in the spec) would return true (claim is found, or nil) when required was not set. It now checks interface types correctly and has tests written Signed-off-by: Alistair Hey <alistair@heyal.co.uk> * Keep aud validation constant time compare Keep aud validation using constant time compare by not instantly returning on a true comparison, keep comparing all options and store result in a variable Signed-off-by: Alistair Hey <alistair@heyal.co.uk> Co-authored-by: Banse, Christian <christian.banse@aisec.fraunhofer.de>	2021-05-28 22:45:11 -03:00