jwt

package

Go to main page

Versions in this module

v3

v3.0.3

Mar 7, 2024

v3.0.2

Feb 23, 2024 GO-2024-2631

GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

v3.0.1

Nov 8, 2023 GO-2024-2631

GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

v3.0.0

Jun 5, 2021 GO-2023-2334GO-2024-2631

GO-2023-2334: Denial of service via decryption of malicious PBES2 JWE objects in github.com/go-jose/go-jose/v3

GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Changes in this version

+ const DefaultLeeway

+ var ErrExpired = errors.New("go-jose/go-jose/jwt: validation failed, token is expired (exp)")

+ var ErrInvalidAudience = errors.New("go-jose/go-jose/jwt: validation failed, invalid audience claim (aud)")

+ var ErrInvalidClaims = errors.New(...)

+ var ErrInvalidContentType = errors.New("go-jose/go-jose/jwt: expected content type to be JWT (cty header)")

+ var ErrInvalidID = errors.New("go-jose/go-jose/jwt: validation failed, invalid ID claim (jti)")

+ var ErrInvalidIssuer = errors.New("go-jose/go-jose/jwt: validation failed, invalid issuer claim (iss)")

+ var ErrInvalidSubject = errors.New("go-jose/go-jose/jwt: validation failed, invalid subject claim (sub)")

+ var ErrIssuedInTheFuture = errors.New("go-jose/go-jose/jwt: validation field, token issued in the future (iat)")

+ var ErrNotValidYet = errors.New("go-jose/go-jose/jwt: validation failed, token not valid yet (nbf)")

+ var ErrUnmarshalAudience = errors.New("go-jose/go-jose/jwt: expected string or array value to unmarshal to Audience")

+ var ErrUnmarshalNumericDate = errors.New("go-jose/go-jose/jwt: expected number value to unmarshal NumericDate")

+ type Audience []string

+ func (s *Audience) UnmarshalJSON(b []byte) error

+ func (s Audience) Contains(v string) bool

+ func (s Audience) MarshalJSON() ([]byte, error)

+ type Builder interface

+ Claims func(i interface{}) Builder

+ CompactSerialize func() (string, error)

+ FullSerialize func() (string, error)

+ Token func() (*JSONWebToken, error)

+ func Encrypted(enc jose.Encrypter) Builder

+ func Signed(sig jose.Signer) Builder

+ type Claims struct

+ Audience Audience

+ Expiry *NumericDate

+ ID string

+ IssuedAt *NumericDate

+ Issuer string

+ NotBefore *NumericDate

+ Subject string

+ func (c Claims) Validate(e Expected) error

+ func (c Claims) ValidateWithLeeway(e Expected, leeway time.Duration) error

+ type Expected struct

+ Audience Audience

+ ID string

+ Issuer string

+ Subject string

+ Time time.Time

+ func (e Expected) WithTime(t time.Time) Expected

+ type JSONWebToken struct

+ Headers []jose.Header

+ func ParseEncrypted(s string) (*JSONWebToken, error)

+ func ParseSigned(s string) (*JSONWebToken, error)

+ func (t *JSONWebToken) Claims(key interface{}, dest ...interface{}) error

+ func (t *JSONWebToken) UnsafeClaimsWithoutVerification(dest ...interface{}) error

+ type NestedBuilder interface

+ Claims func(i interface{}) NestedBuilder

+ CompactSerialize func() (string, error)

+ FullSerialize func() (string, error)

+ Token func() (*NestedJSONWebToken, error)

+ func SignedAndEncrypted(sig jose.Signer, enc jose.Encrypter) NestedBuilder

+ type NestedJSONWebToken struct

+ Headers []jose.Header

+ func ParseSignedAndEncrypted(s string) (*NestedJSONWebToken, error)

+ func (t *NestedJSONWebToken) Decrypt(decryptionKey interface{}) (*JSONWebToken, error)

+ type NumericDate int64

+ func NewNumericDate(t time.Time) *NumericDate

+ func (n *NumericDate) Time() time.Time

+ func (n *NumericDate) UnmarshalJSON(b []byte) error

+ func (n NumericDate) MarshalJSON() ([]byte, error)

v3.0.0-rc.1

Jun 5, 2021 GO-2023-2334GO-2024-2631

GO-2023-2334: Denial of service via decryption of malicious PBES2 JWE objects in github.com/go-jose/go-jose/v3

GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Other modules containing this package

github.com/go-jose/go-jose

github.com/go-jose/go-jose/v4

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL