v1.9.0

Features

• allow JWKS.asKeyStore to swallow errors (78398d3)

v1.8.0

Features

• added Node.js lts/dubnium support for runtime supported features (67a8601)

v1.7.0

Features

• add RSA-OAEP-256 support (when a node version supports it) (28d7cf8), closes #29

v1.6.1

Bug Fixes

• properly pad calculated RSA primes (dd121ce)

v1.6.0

Bug Fixes

• use the correct ECPrivateKey version when importing EC JWK (24acd20)

Features

• electron v6.x support (e7ad82c)

Notes

Electron v6.x runtime is supported to the extent of the crypto engine BoringSSL feature parity with standard Node.js OpenSSL. The following is disabled in Electron runtime because of its lack of support.

• JWE A128KW, A192KW and A256KW algs are not available, this also means that other JWAs depending on those are not working, those are ECDH-ES+A128KW, ECDH-ES+A192KW, ECDH-ES+A256KW, PBES2-HS256+A128KW, PBES2-HS384+A192KW, PBES2-HS512+A256KW)
• OKP curves Ed448, X25519 and X448 are not supported
• EC curve secp256k1 is not supported

v1.5.2

Bug Fixes

• importing x5c in electron requires the input split (181fd09)

v1.5.1

Bug Fixes

• correctly pad integers when importing RSA JWK (1dc7f35)

v1.5.0

Features

• validate JWTs according to a JWT profile - ID Token (6c98b61)

It is now possible to pass a profile to JWT.verify and have the JWT validated according to it. This makes sure you pass all the right options and that required claims are present, prohibited claims are missing and that the right JWT typ is used.

More profiles will be added in the future.

v1.4.1

Bug Fixes

• honour the JWT.sign jti option (36c9ce2), closes #33

v1.4.0

Features

• add secp256k1 EC Key curve and ES256K (211d7af)