Current section

Files

Jump to
joken CHANGELOG.md
Raw

CHANGELOG.md

# v0.13.1
* Enhancements
* Checking to make sure signature is on token unless `:none` is passed as the algorithm
# v0.13.0
* Enhancements
* Validating iat claim
* Verifying signature before getting the data
# v0.12.0
* Enhancements
* Signature is now verified just from the header and payload strings.
* Added `decode_secret_key?` parameter
# v0.11.0
* Enhancements
* `Joken` module now looks more like old API from 0.8 with the exception that it reads configuration from a :joken config block.
* For security reasons, now using the configured algorithm for checking signature instead of the one specified in the header.
* Added algorithm paramter to `Joken.Token.decode` to be used when verifying signatures
# v0.10.1
* Enhancements
* Fixed documentation typos
* Joken now uses an Agent instead of implementing GenServer
# v0.10.0
* Enhancements
* No longer has a dependency on Timex or JSX
* Can now use any json library as long as you implement the behaviour, `Joken.Codec`
* Joken module is now a GenServer
* secret_key, algorithm, and json_module are now configured when the starting Joken module
* Breaking
* `Joken.encode(payload, secret, algorithm, claims)` is now `Joken.encode(pid, payload, claims)` and `Joken.decode(token, secret, claims)` is now `Joken.decode(pid, token, claims)`. `secret_key` and `algorithm` are now configured along with `json_module` when starting the Joken module via any of the `Joken.start_link` functions. You could also use the `Joken.Token` module directly instead which isn't a GenServer and allows you to put in all of the parameters needed whenever you call encode or decode.