Change Log

All notable changes to this project will be documented in this file. This project adheres to Semantic Versioning.

Unreleased

Changed

Fixed

v1.1.0

Added

• Added support for PS256, PS384, and PS512 algorithms. #132
• Added flexible and complete verification options during decode. #131
• Added this CHANGELOG.md file.

Deprecated

• Deprecated usage of the .decode(..., verify=False) parameter.

Fixed

• Fixed command line encoding. #128

v1.0.1

Fixed

• Include jwt/contrib' and jwt/contrib/algorithms` in setup.py so that they will actually be included when installing. 882524d
• Fix bin/jwt after removing jwt.header(). bd57b02

[v1.0.0][1.0.0]

Changed

• Moved jwt.api.header out of the public API. #85
• Added README details how to extract public / private keys from an x509 certificate. #100
• Refactor api.py functions into an object (PyJWT). #101
• Added support for PyCrypto and ecdsa when cryptography isn't available. #101

Fixed

• Fixed a security vulnerability where alg=None header could bypass signature verification. #109
• Fixed a security vulnerability by adding support for a whitelist of allowed alg values jwt.decode(algorithms=[]). #110