Release v2.6.1 - 2024-04-11

[2.6.1] - 2024-04-11

Added

• Allow PEM keys to specify a password (#392 thanks to @jeremyowensboggs)

Fixed

• Updated erlang JOSE to deal with CVE-2023-50966 (#418 thanks to @up2jj)

Release v2.6.0 - 2023-01-29

Changed

• Allow EdDSA keys (thanks @Tarang)
• Bump JOSE to 1.11.5
• Fix after_sign spec
• handle non binary hmac sha key error (thanks @alecostard)
• Fixes typ header claim not being over writable
• doc fixes all over
• raised Elixir version to 1.13 (JOSE raised it too so we follow)

Release v2.5.0 - 2022-06-18

[2.5.0] - 2022-06-18

Changed

• Update release workflow (thanks @dolfinus)
• Migrate GitHub Actions to erlef/setup-beam (thanks @kianmeng)
• Fix typespecs (thanks @mustardnoise)
• small refactor of CI
• raised Elixir version to 1.10

Release [2.4.1] - 2021-10-26

[2.4.1] - 2021-10-26

Changed

• fix: readme refs (thanks to @danferreira)
• Fix generate_and_sign examples in guides' documentation (thanks to @f-francine)
• Remove no_return from methods that can return (thanks to @jsmestad)
• Fix typos (thanks to @kianmeng)

Release v2.4.0

Changed

• Major docs reviews and corrections (thanks to @kianmeng, @andreasknoepfle, Jon Forsyth, @fuelen)
• Change of CI pipeline (thanks to @dolfinus)
• Now uses Elixir 1.8 as minimum (and actually test the mininum version on CI)

Fixed

• Fixed arity of Joken.Config.validate (thanks to @blagh)
• Compatibility with OTP 24.0 with JOSE update to 1.11.2

Release [2.3.0] - 2020-09-27

[2.3.0] - 2020-09-27

Changed

• (@supersimple with @bryanjos) Update CHANGELOG.md (#257)
• (@victorolinasc) chore: add public PEM only signer test
• (@victorolinasc) chore: update deps
• (@victorolinasc) Adding error handling (#277)
• (@ideaMarcos) Update common_use_cases.md (#285)
• (@victorolinasc) Clean up versions and compatibility with OTP 23 (#291)

Fixed

• (@woylie) fix type specs and doc (#266)

Release [2.2.0] - 2019-11-08

[2.2.0] - 2019-11-08

Added

• (@bryanjos) Update .travis.yml to deploy to hex on tag (#232)
• (@thefuture2092) Access current_time_adapter in runtime instead of compile time (#252)
• (@victorolinasc) feat: add required claims hook (#250)

Changed

• Several deps updates by dependabot =)

Fixed

• (@llxff) Fix small typo in "Asymmetric cryptography signers" guide (#235)
• (@polvalente) fix: treat improper token properly (#237)
• (@chulkilee) Use short identifier from SPDX License List (#255)

Release [2.1.0] - 2019-05-27

[2.1.0] - 2019-05-27

Added

• (@tgturner) Allow custom error messages on claim validation (#221)

Changed

• (@sgtpepper43) Get default signer at runtime (#212)
• (@balena) Update to JOSE 1.9 and remove Jason dependency (#216)
• (@victorolinasc) chore: deps update, docs update, removed unused application (#219)

Fixed

• (@maartenvanvliet) Plural time units are deprecated >= elixir1.8 (#213)
• (@oo6) Fixed documentation (#218)
• (@popo63301) fix typo (#220)
• (@HeroicEric) Fix some typos in configuration guide (#222)

Release v2.0.0-rc3

This is meant to be the last RC but a wise man said not mention that. Well... it's done now...

The plan is to let this go for a week at least and then tag it 2.0.0 (finally). After that the focus will be on bringing projects alongside Joken like joken-plug, joken-crypto and so on...

New

• Project moved to joken-elixir organization as we plan to add other dependencies here related to joken;

Backwards incompatible changes with previous RCs

• Hooks were 100% re-implemented. The first shot of hooks was a complete mess. This excluded something around 180 source code lines but introduced different function signatures. To make it more consistent, they all follow a before_ or after_ signature. Please, refer to the docs of the Joken.Hooks module. Also the typespecs are now accurate.

Fixed/Added

• Refactored typespecs to be consistent (should warn a lot less now and dialyzer passes 100% - initial contribution by @chulkilee);
• Made order of arguments consistent now (a problem highlighted by @ajkeys and fixed by both of us);

v2.0.0-rc2

Previously rc was pushed to hex but not tagged, so here goes rc2:

• Removed the override of base64url (does not work on releases @maartenvanvliet);
• Catch all signature errors (thanks @davidvanleeuwen);
• Skip generation with nil generators instead of crashing;