jwtk/njwt issues and pull requests

#107 - CVE 2024 34273

Pull Request - State: closed - Opened by jaredperreault-okta 5 months ago - 3 comments

#106 - Snyk Reported issue with @okta/[email protected] > [email protected]

Issue - State: open - Opened by RGanni49 6 months ago - 4 comments

#105 - [Security] Prototype Pollution in nJwt library

Issue - State: open - Opened by chrisandoryan 7 months ago - 1 comment

#104 - How to report security issues?

Issue - State: open - Opened by chrisandoryan 7 months ago - 1 comment

#102 - BREAKING CHANGE: update setIssuedAt method to accept Date or milliseconds instead of seconds

Pull Request - State: open - Opened by shuowu-okta over 1 year ago

#101 - Bump minimist from 1.2.5 to 1.2.8

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#100 - Bump ansi-regex from 3.0.0 to 5.0.1

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#99 - Bump flat from 4.1.1 to 5.0.2

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#98 - Bumps jsonwebtoken version, drop Node < 12 from engines

Pull Request - State: closed - Opened by jaredperreault-okta almost 2 years ago

#97 - JwtParseError: Signature verification failed

Issue - State: closed - Opened by KaitaniLabs almost 2 years ago - 1 comment

#96 - Bump jsonwebtoken from 8.5.1 to 9.0.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 3 comments
Labels: dependencies

#95 - Twistlock reported issue with test keys

Issue - State: open - Opened by rcollette almost 2 years ago - 1 comment

#94 - Bump qs from 6.5.2 to 6.5.3

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#93 - JWT expiration and issuedAt properties and setters are inconsistent

Issue - State: open - Opened by ande8135 almost 2 years ago - 1 comment

#92 - how to set expired time in jwt?

Issue - State: open - Opened by tytom2003 almost 2 years ago - 1 comment

#91 - only required files for npm

Pull Request - State: open - Opened by ElenaTv about 2 years ago - 1 comment

#90 - Make setExpiration argument optional

Pull Request - State: open - Opened by goranb over 2 years ago

#89 - Bump minimist from 1.2.5 to 1.2.6

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#88 - can skip validate the expiration

Pull Request - State: open - Opened by ElenaTv almost 3 years ago - 1 comment

#87 - Use Coveralls Github Action

Pull Request - State: closed - Opened by bdemers almost 3 years ago

#86 - Use Coveralls Github Action

Pull Request - State: closed - Opened by bdemers almost 3 years ago - 1 comment

#85 - Migrate to GH actions

Pull Request - State: closed - Opened by bdemers almost 3 years ago

#84 - chore: bump uuid dependency to 8.x and enforce minimal node version

Pull Request - State: closed - Opened by oleksandrpravosudko-okta about 3 years ago

#83 - Obvious Fix: Added "files" property to only include index.js / index.d.js / properties.json in npm package

Pull Request - State: open - Opened by MattSidor about 3 years ago - 2 comments

#82 - Bump path-parse from 1.0.6 to 1.0.7

Pull Request - State: open - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#81 - bump node version

Pull Request - State: closed - Opened by MayorMunroe over 3 years ago

#80 - Bump normalize-url from 4.5.0 to 4.5.1

Pull Request - State: open - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#79 - Bump trim-newlines from 3.0.0 to 3.0.1

Pull Request - State: open - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#78 - allocates uninitialized Buffers when number is passed in base64urlEncode input

Issue - State: open - Opened by hmangune over 3 years ago

#77 - Add TS type definitions

Pull Request - State: closed - Opened by oleksandrpravosudko-okta over 3 years ago

#76 - RSA key format

Issue - State: open - Opened by 8coins over 3 years ago

#75 - Issue creating sessions for users in different collections using mongodb

Issue - State: closed - Opened by imcyberrick about 4 years ago

#74 - Obvious Fix: RSA flaky test

Pull Request - State: open - Opened by alesbolka over 4 years ago - 1 comment

#73 - If token is not HS256 using a verifier instance will throw a JwtParseError "Unexpected signature algorithm"

Issue - State: open - Opened by Anntoin over 4 years ago - 1 comment

#72 - The Code is in ES6 - Uglify can't handle ES6 code

Issue - State: open - Opened by RALifeCoach over 4 years ago - 1 comment

#71 - JwtParseError: Unexpected signature algorithm - RS256

Issue - State: closed - Opened by ndtreviv over 4 years ago - 1 comment

#70 - error:0909006C:PEM routines:get_name:no start line

Issue - State: closed - Opened by patil-akshay over 4 years ago - 2 comments

#69 - Add Typings

Issue - State: open - Opened by elecompte60 almost 5 years ago - 7 comments

#68 - Remove jti?

Issue - State: closed - Opened by rlaferla about 5 years ago - 1 comment

#67 - Documentation for installation?

Issue - State: closed - Opened by rlaferla about 5 years ago - 1 comment

#66 - TLS issue

Issue - State: closed - Opened by jayheavner about 5 years ago

#65 - Any plan to make the NJWT library support compression and decompression?

Issue - State: closed - Opened by jjeanj1 over 5 years ago - 2 comments
Labels: enhancement, wontfix

#64 - Undocumented - Return in verify

Issue - State: closed - Opened by fabltd over 5 years ago - 2 comments

#63 - Add NBF clock tolerance

Pull Request - State: open - Opened by davidbonting over 5 years ago - 2 comments

#62 - vulnerablity found - Out-of-bounds Read

Issue - State: closed - Opened by Toxicable over 5 years ago - 2 comments

#61 - Update dep versions; Update Node ver

Pull Request - State: closed - Opened by swiftone over 5 years ago - 1 comment

#60 - release: Updates for release 0.4.1

Pull Request - State: closed - Opened by swiftone over 5 years ago - 1 comment

#59 - Updates dependencies

Pull Request - State: closed - Opened by swiftone over 5 years ago - 2 comments

#58 - Buffer fix

Pull Request - State: closed - Opened by swiftone over 5 years ago - 2 comments

#57 - Expiration check succeeds on expired tokens - 'exp' looked for in body, not in header

Issue - State: open - Opened by woodenork almost 6 years ago

#56 - Typo fix for setNotBefore in readme

Pull Request - State: closed - Opened by chrift about 6 years ago - 1 comment

#55 - Fix uninitialised memory exposure vulnerability

Pull Request - State: closed - Opened by benwiggins over 6 years ago - 3 comments

#54 - Library does not seem to comply with 'aud' claim verification

Issue - State: open - Opened by chadjaros over 6 years ago

#53 - Suggestion: throw an error if you call create with string as signing key instead of a Buffer

Issue - State: open - Opened by pingvinen over 6 years ago

#52 - Do not set an expiration claim if it has already been defined by the user

Issue - State: open - Opened by pingvinen over 6 years ago

#51 - Docker Issue

Issue - State: open - Opened by SiddiquiImran over 6 years ago

#50 - Add option to pass a fully parsed JWT object to the key resolver.

Pull Request - State: open - Opened by bemisguided almost 7 years ago - 2 comments

#49 - Corrects rsa documentation issue

Pull Request - State: open - Opened by gdovicak almost 7 years ago - 1 comment

#48 - Custom algorithm

Issue - State: open - Opened by Teukros almost 7 years ago

#47 - verify a google jwt?

Issue - State: open - Opened by walshe about 7 years ago

#46 - JwtParseError: Signature verification failed

Issue - State: closed - Opened by lexicalninja about 7 years ago - 6 comments
Labels: bug, priority-pending, awaiting-response

#45 - Times should be in seconds, not milliseconds

Issue - State: open - Opened by lylefile over 7 years ago

#44 - Feature key resolver

Pull Request - State: closed - Opened by robertjd almost 8 years ago - 2 comments

#43 - Add key resolver

Pull Request - State: closed - Opened by the-overengineer almost 8 years ago - 1 comment

#42 - Add test and docs for keylookup

Pull Request - State: open - Opened by jkevlin2 almost 8 years ago - 5 comments

#41 - Enable Key Lookup

Pull Request - State: open - Opened by jkevlin2 almost 8 years ago - 4 comments

#40 - Export Parser and test

Pull Request - State: open - Opened by jkevlin2 almost 8 years ago - 2 comments

#39 - Export the Parser

Issue - State: open - Opened by jkevlin2 almost 8 years ago

#38 - Release 0.3.2

Pull Request - State: closed - Opened by robertjd about 8 years ago - 1 comment

#37 - is setNotbefore() working?

Issue - State: closed - Opened by mikeliucc about 8 years ago - 2 comments

#36 - Update shields

Pull Request - State: closed - Opened by bretterer about 8 years ago - 1 comment

#35 - Jwt created by verify() is not setting signingKey

Issue - State: open - Opened by safm about 8 years ago - 2 comments
Labels: bug

#34 - Why not asymetric crypto?

Issue - State: open - Opened by levino about 8 years ago - 1 comment

#33 - Add JWT setters

Pull Request - State: open - Opened by typerandom about 8 years ago - 1 comment
Labels: in progress

#32 - Error should be thrown if you call a constructor without new

Issue - State: open - Opened by typerandom about 8 years ago
Labels: enhancement, 1.0

#31 - Cleanup codebase and fix formatting

Pull Request - State: open - Opened by typerandom about 8 years ago - 4 comments
Labels: in progress

#30 - Respect exp claim when provided in create()

Pull Request - State: open - Opened by typerandom about 8 years ago - 1 comment
Labels: in progress

#29 - Add typed error handling

Pull Request - State: open - Opened by typerandom about 8 years ago - 4 comments
Labels: in progress

#28 - Test all supported stable node versions

Pull Request - State: closed - Opened by robertjd about 8 years ago - 2 comments

#27 - Update ursa module

Pull Request - State: closed - Opened by robertjd about 8 years ago - 3 comments

#26 - Implement key resolver

Issue - State: closed - Opened by robertjd about 8 years ago

#25 - Add `jwt.setHeader(key,value)`

Issue - State: closed - Opened by robertjd about 8 years ago - 1 comment
Labels: needs review

#24 - Potentially support kid header?

Issue - State: closed - Opened by ethul about 8 years ago - 4 comments

#23 - create() should respect exp timestamp in claims

Issue - State: open - Opened by typerandom about 8 years ago
Labels: bug, needs review

#22 - Errors should be separately typed and documented

Issue - State: open - Opened by typerandom about 8 years ago
Labels: enhancement, needs review

#21 - Formatting should follow Crockford's JavaScript formatting conventions

Issue - State: open - Opened by typerandom about 8 years ago
Labels: enhancement, needs review

#20 - Fix package license to be a valid SPDX identifier

Pull Request - State: closed - Opened by typerandom about 8 years ago - 2 comments

#19 - handling exp default value, if exp comes from claims

Pull Request - State: closed - Opened by patoi about 8 years ago - 3 comments

#18 - Implementing 'nbf' (Not Before) Claim

Pull Request - State: closed - Opened by patoi about 8 years ago - 4 comments

#17 - Updated content per @jakubswiatczak

Pull Request - State: closed - Opened by dogeared over 8 years ago - 2 comments

#16 - 0.3.1 creates invalid tokens

Issue - State: closed - Opened by CDA0 over 8 years ago - 1 comment

#15 - Expose the Parser to the public API

Pull Request - State: closed - Opened by tyronedougherty over 8 years ago - 2 comments

#14 - View claims without verifying the signature?

Issue - State: closed - Opened by tyronedougherty over 8 years ago - 6 comments

#13 - Fix encoding of ECDSA signatures

Pull Request - State: closed - Opened by typerandom over 8 years ago - 13 comments
Labels: bug

#12 - Fix so that missing fields are not added automatically when parsing JWT

Pull Request - State: closed - Opened by typerandom over 8 years ago - 8 comments

#11 - ES* signatures are not spec compliant

Issue - State: closed - Opened by omsmith over 8 years ago - 1 comment

#10 - Please document how to create a custom header

Issue - State: open - Opened by edjiang over 8 years ago - 1 comment

#9 - `typ`, `iat` and `jti` fields are added when parsing tokens

Issue - State: closed - Opened by robertjd almost 9 years ago - 1 comment

#8 - README Documentation Incorrect

Issue - State: open - Opened by rdegges almost 9 years ago

#7 - body vs parsedBody

Issue - State: closed - Opened by jmls almost 9 years ago - 2 comments

GitHub / jwtk/njwt issues and pull requests