jwt

Jun 5, 2021 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

May 1, 2020 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Mar 8, 2020 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Dec 16, 2019 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Oct 22, 2019 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Apr 10, 2019 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Feb 26, 2019 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Changes in this version

+ var ErrIssuedInTheFuture = errors.New("square/go-jose/jwt: validation field, token issued in the future (iat)")

Dec 20, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Dec 5, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Nov 30, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Sep 20, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Aug 1, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Jul 25, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Changes in this version

type JSONWebToken

+ func (t *JSONWebToken) UnsafeClaimsWithoutVerification(dest ...interface{}) error

Mar 29, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Mar 23, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Feb 28, 2018 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Sep 13, 2017 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Jun 7, 2017 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Mar 24, 2017 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Feb 24, 2017 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Nov 17, 2016 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Changes in this version

+ var ErrInvalidContentType = errors.New("square/go-jose/jwt: expected content type to be JWT (cty header)")

+ type NestedBuilder interface

+ Claims func(i interface{}) NestedBuilder

+ CompactSerialize func() (string, error)

+ FullSerialize func() (string, error)

+ Token func() (*NestedJSONWebToken, error)

+ func SignedAndEncrypted(sig jose.Signer, enc jose.Encrypter) NestedBuilder

+ type NestedJSONWebToken struct

+ Headers []jose.Header

+ func ParseSignedAndEncrypted(s string) (*NestedJSONWebToken, error)

+ func (t *NestedJSONWebToken) Decrypt(decryptionKey interface{}) (*JSONWebToken, error)

Oct 27, 2016 GO-2024-2631

  GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Changes in this version

+ const DefaultLeeway

+ var ErrExpired = errors.New("square/go-jose/jwt: validation failed, token is expired (exp)")

+ var ErrInvalidAudience = errors.New("square/go-jose/jwt: validation failed, invalid audience claim (aud)")

+ var ErrInvalidClaims = errors.New("square/go-jose/jwt: expected claims to be value convertible into JSON object")

+ var ErrInvalidID = errors.New("square/go-jose/jwt: validation failed, invalid ID claim (jti)")

+ var ErrInvalidIssuer = errors.New("square/go-jose/jwt: validation failed, invalid issuer claim (iss)")

+ var ErrInvalidSubject = errors.New("square/go-jose/jwt: validation failed, invalid subject claim (sub)")

+ var ErrNotValidYet = errors.New("square/go-jose/jwt: validation failed, token not valid yet (nbf)")

+ var ErrUnmarshalAudience = errors.New("square/go-jose/jwt: expected string or array value to unmarshal to Audience")

+ var ErrUnmarshalNumericDate = errors.New("square/go-jose/jwt: expected number value to unmarshal NumericDate")

+ type Audience []string

+ func (s *Audience) UnmarshalJSON(b []byte) error

+ func (s Audience) Contains(v string) bool

+ type Builder interface

+ Claims func(i interface{}) Builder

+ CompactSerialize func() (string, error)

+ FullSerialize func() (string, error)

+ Token func() (*JSONWebToken, error)

+ func Encrypted(enc jose.Encrypter) Builder

+ func Signed(sig jose.Signer) Builder

+ type Claims struct

+ Audience Audience

+ Expiry NumericDate

+ ID string

+ IssuedAt NumericDate

+ Issuer string

+ NotBefore NumericDate

+ Subject string

+ func (c Claims) Validate(e Expected) error

+ func (c Claims) ValidateWithLeeway(e Expected, leeway time.Duration) error

+ type Expected struct

+ Audience Audience

+ ID string

+ Issuer string

+ Subject string

+ Time time.Time

+ func (e Expected) WithTime(t time.Time) Expected

+ type JSONWebToken struct

+ Headers []jose.Header

+ func ParseEncrypted(s string) (*JSONWebToken, error)

+ func ParseSigned(s string) (*JSONWebToken, error)

+ func (t *JSONWebToken) Claims(key interface{}, dest ...interface{}) error

+ type NumericDate int64

+ func NewNumericDate(t time.Time) NumericDate

+ func (n *NumericDate) UnmarshalJSON(b []byte) error

+ func (n NumericDate) MarshalJSON() ([]byte, error)

+ func (n NumericDate) Time() time.Time