Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

JSON Web Token: support nbf and exp claims #4526

Merged
merged 7 commits into from
Jun 7, 2023
Merged

JSON Web Token: support nbf and exp claims #4526

merged 7 commits into from
Jun 7, 2023

Commits on Jun 7, 2023

  1. http_jwt: allow size >= 2 for jwt payload

    @bamthomas @rsto
    bamthomas authored and rsto committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    a3745aa View commit details
    Browse the repository at this point in the history

  2. http_jwt: add exp/nbf claims validation for JWT

    @bamthomas @rsto
    bamthomas authored and rsto committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    d714f05 View commit details
    Browse the repository at this point in the history

  3. http_jwt: avoid breaking change and follow JWT specs

    @bamthomas @rsto
    bamthomas authored and rsto committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    b6001fc View commit details
    Browse the repository at this point in the history

  4. http_jwt: ignore unsupported claims 

    See RFC 7519, Section 4:

   Specific applications of JWTs will require implementations
   to understand and process some claims in particular ways.
   However, in the absence of such requirements, all claims
   that are not understood by implementations MUST be ignored.

Signed-off-by: Robert Stepanek <rsto@fastmailteam.com>
    @rsto
    rsto committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    89ee4c7 View commit details
    Browse the repository at this point in the history

  5. http_jwt: validate all known claims, even if ignored 

    Signed-off-by: Robert Stepanek <rsto@fastmailteam.com>
    @rsto
    rsto committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    ae5e1bb View commit details
    Browse the repository at this point in the history

  6. http_jwt: make unit testing time-based claims nicer 

    Signed-off-by: Robert Stepanek <rsto@fastmailteam.com>
    @rsto
    rsto committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    c745a73 View commit details
    Browse the repository at this point in the history

  7. http_jwt: update documentation 

    Signed-off-by: Robert Stepanek <rsto@fastmailteam.com>
    @rsto
    rsto committed Jun 7, 2023
    Configuration menu
    Copy the full SHA
    2538b82 View commit details
    Browse the repository at this point in the history