v2.2.4

Security

• Bump crypto-js from 4.1.1 to 4.2.0 #176 (dependabot[bot])

v2.2.3

Changed

• SDK-3693 Readme Redesign #159 (stevehobbsdev)

Security

• Bump jsonwebtoken from 8.5.1 to 9.0.0 #165 (dependabot[bot])

v2.2.2

Fixed

• Fix types for overloaded verify method #145 (stevehobbsdev)

v2.2.1

Security

• Dependency updates, including crypto-js@4 #138 (stevehobbsdev)

v2.2.0

Added

• Added TypeScript typings #122 (ItalyPaleAle)

v2.1.1

Fixed

• Fixed: exception when key not found in JWKS #121 (ItalyPaleAle)
• Remove inconsistencies in verify method's callback invocations #120 (ItalyPaleAle)

Security

• Fix vulnerability with crypto-js 3.3.0 and run audit fix #128 (frederikprijck)
• [Security] Bump y18n from 4.0.0 to 4.0.1 #119 (dependabot-preview[bot])

v2.1.0

Changed

• Asynchronous JWKS cache #107 (ItalyPaleAle)
• Migrate to NPM package lock over Yarn, and update dependencies #114 (stevehobbsdev)

Security

• Bump bl from 3.0.0 to 3.0.1 #111 (dependabot[bot])
• Bump codecov from 3.6.5 to 3.7.1 #109 (dependabot-preview[bot])
• Bump lodash from 4.17.15 to 4.17.19 #108 (dependabot[bot])
• Bump handlebars from 4.5.3 to 4.7.6 #106 (dependabot-preview[bot])

v2.0.3

Full Changelog

Fixed

• Fixed bug with keys not first in keybag #101 (ItalyPaleAle)

v2.0.2

Full Changelog

Security

• [Snyk] Security upgrade crypto-js from 3.1.9-1 to 3.2.1 #98 (crew-security)

v2.0.1

Removed

• [SDK-1266] Removed iat future value check #95 (stevehobbsdev)