angular2-jwt

Changed

• Drop support for Angular 13 and below #777 (frederikprijck)

Fixed

• Restore pre 5.1.1 behavior and fix types #759 (frederikprijck)

Fixed

• Support promise based tokenGetter in JwtHelperService #748 (frederikprijck)

Changed

• Compile using Ivy partial mode #735 (frederikprijck)

• Remove dependency on the window object for SSR support

Warning: this version has some breaking changes concerning the allowed domains and disallowed routes!

• Replace whitelistedDomains to allowedDomains #668
• Replace blacklistedRoutes to disallowedRoutes #668
• Removed the url dependency, as this is a Node module in the CommonJS format, and the Angular 10 CLI throws warnings when using dependencies in the CommonJS format. We're using the default URL interface, https://developer.mozilla.org/en-US/docs/Web/API/URL #666

• Allow the authScheme config parameter to be a getter function #659

• Support domains with a port other than the default HTTP ports (HTTP: 80, HTTPS: 443) #656

• Use blacklist domains regardless of their protocol #644
• Pass the HttpRequest to the tokenGetter #649

From #622 avatsaev:

• Angular 9 compatibility
• Angular Ivy compatibility

• Be sure to handle undefined tokens #626 @RobertRad
• docs: corrected/rephrased a sentence in README.md #625 @noopur-tiwari

Breaking change isTokenExpired now returns false if no expiry date is found inside the token. This is a change to align with the JWT spec, but may break applications that rely on the previous behavior.

#562 @atom-morgan

• Gracefully handle null/empty tokens #586

Full Changelog

• Blacklist/Whitelist check fix #538
• Refactor deep rxjs imports and use named define #608
• fix(rxjs): remove imports from rxjs/internal #542

• Merge #572
• Merge #547

• Angular v6 and RxJS v6 support

• fix: mixed import styles breaking app bundling using rollup #527
• fix: example missing comma #524
• Improve doc to include reg expressions #507
• fix: whitelist for urls without host #506

• Use url module from npm instead of native URL for checking whitelisted domains