5.3.0

Behavioural change

This release includes a behavioural change (in #231). Before 5.3.0, the default VerifierPolicy in X5CVerifier.verifyJWS(_, as:, jsonDecoder:, policy:) was RFC5280Policy which was conflicting with the same policy being reused later. The new default policy is an EmptyPolicy which does nothing by itself.

What's Changed

• Finally remove @retroactive @unchecked Sendable from crypto types by @ptoffy in #232
• Fix for not honoring ValidationTimePayload's signedDate by @betaphi in #231
• Fix benchmarks by @ptoffy in #234
• Add MLDSA{65,87} support by @ptoffy in #229
• Fix benchmarks by @ptoffy in #236
• Add PEM representation init and property to EdDSA keys by @ptoffy in #237

New Contributors

• @betaphi made their first contribution in #231

Full Changelog: 5.2.0...5.3.0

5.2.0 - Make rawRepresentation and publicKey of EdDSA keys public

What's Changed

Make rawRepresentation and publicKey of EdDSA keys public by @tkrajacic in #230

Make rawRepresentation of EdDSA keys public
Make publicKey of EdDSA.PrivateKey public

This patch was released by @ptoffy

Full Changelog: 5.1.2...5.2.0

5.1.2 - Add `RSA-OAEP` to JWK algorithms to support decoding.

What's Changed

Add RSA-OAEP to JWK algorithms to support decoding. by @madsodgaard in #226

Fixes an issue where a JWKS failed to decode because it also contains encryption keys and therefore alg such as RSA-OAEP.

This does not add support for the cipher, but at least it will allow us to decode JWKS to use for signing where we might not be able to remove the encryption keys from the remote JWKS.

This patch was released by @0xTim

Full Changelog: 5.1.1...5.1.2

5.1.1 - Fix crash when verifying corrupted token

What's Changed

Fix crash when verifying corrupted token by @ptoffy in #217

Fix #213

This patch was released by @ptoffy

Full Changelog: 5.1.0...5.1.1

4.13.5

What's Changed

• [V4] Update v4 CI to use JWT v4 by @ptoffy in #159
• Update certs for new ones by @0xTim in #212
• [V4] Fix memory bug when loading keys by @ptoffy in #208

Full Changelog: 4.13.4...4.13.5

5.1.0 - Add FirebaseAuth identity token

What's Changed

Add FirebaseAuth identity token by @petrpavlik in #207

• Add support for Firebase Auth by introducing FirebaseAuthIdentityToken.
• Fix some unit tests not being run. Probably a regression cause by migration to the new testing framework.

Adding support for Firebase Authentication was okayed by @ptoffy, see here vapor/jwt#159.

I’ll also follow up with a PR for https://github.com/vapor/jwt once this is merged in.

This patch was released by @ptoffy

Full Changelog: 5.0.1...5.1.0

5.0.1 - Support Crypto 4.0.0

What's Changed

Support Crypto 4.0.0 by @0xTim in #199

Add support for the upcoming release of Swift Crypto 4.0.0

This patch was released by @0xTim

Full Changelog: 5.0.0...5.0.1

5.0.0

What's Changed

• V5 by @ptoffy in #107
• Update CI by @ptoffy in #146
• Add kid param to sign function by @ptoffy in #144
• make JWK.Curve Equatable again by @JaapWijnen in #145
• add curve and parameters properties to ECDSAKey protocol by @JaapWijnen in #143
• Make JWTError.Backing a struct by @ptoffy in #148
• Fix typo by @ptoffy in #149
• Add initialisers to vendor identity tokens by @ptoffy in #150
• Add benchmark CI by @ptoffy in #141
• Add back thread sanitiser to CI by @ptoffy in #151
• Update CI by @ptoffy in #153
• Update benchmarks by @ptoffy in #154
• Add SSWG badge to README by @ptoffy in #155
• Change to non-optional function String <-> Data by @zunda-pixel in #156
• Remove benchmarks by @ptoffy in #163
• Make JWTError Sendable by @ptoffy in #162
• Update verify function parameter to use some JWTAlgorithm by @ptoffy in #152
• Generic key addition by @ptoffy in #160
• Update swift version and readme for beta 3 by @ptoffy in #164
• Add new key addition API by @ptoffy in #166
• Update README with new key addition API by @ptoffy in #168
• Allow iterating keys on key collection and adopt swift-log by @ptoffy in #170
• update example code and convert to Snippets by @tayloraswift in #171
• Fix unverified method parser inference by @ptoffy in #176
• Cache JWKSigner when possible by @ptoffy in #172
• Make JWKSigner an actor by @ptoffy in #178
• Move to SwiftCrypto EdDSA key by @ptoffy in #177
• Add Swift 6 support by @0xTim in #175
• Fix a couple of Swift 6 warnings by @0xTim in #182
• Last of the Swift 6 language mode warnings by @0xTim in #185
• Add compatibility for iOS 15 and friends by @ptoffy in #181
• Conform JWKs API to the rest by @ptoffy in #187
• Fix decimal and nil header encoding by @ptoffy in #189
• Add tests for JWTError and JWTHeader+CommonFields by @fpseverino in #188
• Update README and DocC by @ptoffy in #190
• Add availability annotations to unavailable crypto properties by @ptoffy in #192
• Show warnings as errors by @ptoffy in #193
• Switch to SwiftCrypto for all RSA stuff by @ptoffy in #179
• Migrate to SwiftTesting by @0xTim in #197
• Adopt swift-format by @ptoffy in #198
• Get ready for v5 release by @ptoffy in #200
• Readme update by @ptoffy in #201

New Contributors

• @zunda-pixel made their first contribution in #156
• @tayloraswift made their first contribution in #171
• @fpseverino made their first contribution in #188

Full Changelog: 4.13.2...5.0.0

5.0.0 Release Candidate 2

What's Changed

• Fix unverified method parser inference by @ptoffy in #176
• Cache JWKSigner when possible by @ptoffy in #172
• Make JWKSigner an actor by @ptoffy in #178
• Move to SwiftCrypto EdDSA key by @ptoffy in #177
• Add Swift 6 support by @0xTim in #175
• Fix a couple of Swift 6 warnings by @0xTim in #182
• Last of the Swift 6 language mode warnings by @0xTim in #185
• Add compatibility for iOS 15 and friends by @ptoffy in #181

Full Changelog: 5.0.0-rc.1...5.0.0-rc.2

5.0.0 Release Candidate 1

What's Changed

• Allow iterating keys on key collection and adopt swift-log by @ptoffy in #170
• update example code and convert to Snippets by @tayloraswift in #171

New Contributors

• @tayloraswift made their first contribution in #171

Full Changelog: 5.0.0-beta.4...5.0.0-rc.1