jose

Fixes

• deno: add a Deno package entrypoint (9f3c459)

Features

• add support for RFC 9278 - JWK Thumbprint URI (d06ce65)

Refactor

• consume some base64url decode errors (#436) (caaf2c3)
• unify JOSENotSupported throw on key export (fe5d093)

This release contains only code refactoring and documentation updates.

Fixes

• typescript: add types export for nodenext module resolution (#406) (5a6d8f0)

Features

• add "worker" export in package.json (#400) (c58c80a)
• optional headers options for createRemoteJWKSet (#397) (b4612f5)

Features

• add createRemoteJWKSet cacheMaxAge option (5017d95), closes #394

Fixes

• dont check JWT iat is in the past unless maxTokenAge is used (96d85c7)

This release contains only code refactoring and documentation updates.

Features

• mark APIs and parameters that can lead to footguns as deprecated (0ddbcc6)
• types: include JSDoc in the types (74187a9)

Fixes

• web api runtime: rely on default fetch init values (df6d966)

Fixes

• decrypting empty ciphertext compact JWEs (#374) (95fe597)

Fixes

• typescript: allow synchronous get key functions (7c99153)

Features

• add jose.decodeJwt utility (3d2a2b8)

Fixes

• concurrent fetch await in cloudflare (e44cd18), closes #355

Features

• add createLocalJWKSet, resolver to verify using a local JWKSet (bd7bf37)

Fixes

• only add y to the epk header parameter when EC keys are used (dd6775e), closes #348

This release contains only code refactoring and documentation updates.

Fixes

• typescript: b64: true is fine to use in JWT, its useless, but allowed (#324) (ee401c9)

Fixes

• electron: rsa-pss keys are never supported (188c1f7)

Fixes

• typescript: b64 header regression (#324) (9da0a7f)

Fixes

• Compact JWS verification handles a zero-length payload string (7c70e7b)