jws

Feb 19, 2024 GO-2024-2632

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ type SignVerifyParseOption interface

Jan 9, 2024 GO-2024-2632

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func IsVerificationError(err error) bool

Dec 3, 2023 GO-2024-2454 +1 more

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 20, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 30, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type SignVerifyOption

+ func WithValidateKey(v bool) SignVerifyOption

Oct 19, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 17, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Sep 26, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 10, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 14, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 12, 2023 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func UnregisterSigner(alg jwa.SignatureAlgorithm)

+ func UnregisterVerifier(alg jwa.SignatureAlgorithm)

Mar 21, 2023 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type SignOption

+ func WithInsecureNoSignature(options ...WithKeySuboption) SignOption

Nov 25, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 15, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 25, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 11, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 19, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type WithKeySetSuboption

+ func WithMultipleKeysPerKeyID(v bool) WithKeySetSuboption

Jun 13, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 23, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 6, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 24, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ const AlgorithmKey

+ const ContentTypeKey

+ const CriticalKey

+ const JWKKey

+ const JWKSetURLKey

+ const KeyIDKey

+ const TypeKey

+ const X509CertChainKey

+ const X509CertThumbprintKey

+ const X509CertThumbprintS256Key

+ const X509URLKey

+ func AlgorithmsForKey(key interface{}) ([]jwa.SignatureAlgorithm, error)

+ func Compact(msg *Message, options ...CompactOption) ([]byte, error)

+ func RegisterCustomField(name string, object interface{})

+ func RegisterSigner(alg jwa.SignatureAlgorithm, f SignerFactory)

+ func RegisterVerifier(alg jwa.SignatureAlgorithm, f VerifierFactory)

+ func Sign(payload []byte, options ...SignOption) ([]byte, error)

+ func SplitCompact(src []byte) ([]byte, []byte, []byte, error)

+ func SplitCompactReader(rdr io.Reader) ([]byte, []byte, []byte, error)

+ func SplitCompactString(src string) ([]byte, []byte, []byte, error)

+ func Verify(buf []byte, options ...VerifyOption) ([]byte, error)

+ type CompactOption interface

+ func WithDetached(v bool) CompactOption

+ type DecodeCtx interface

+ CollectRaw func() bool

+ type HMACSigner struct

+ func (s HMACSigner) Algorithm() jwa.SignatureAlgorithm

+ func (s HMACSigner) Sign(payload []byte, key interface{}) ([]byte, error)

+ type HMACVerifier struct

+ func (v HMACVerifier) Verify(payload, signature []byte, key interface{}) (err error)

+ type HeaderPair = mapiter.Pair

+ type Headers interface

+ Algorithm func() jwa.SignatureAlgorithm

+ AsMap func(context.Context) (map[string]interface{}, error)

+ ContentType func() string

+ Copy func(context.Context, Headers) error

+ Critical func() []string

+ Get func(string) (interface{}, bool)

+ Iterate func(ctx context.Context) Iterator

+ JWK func() jwk.Key

+ JWKSetURL func() string

+ KeyID func() string

+ Merge func(context.Context, Headers) (Headers, error)

+ PrivateParams func() map[string]interface{}

+ Remove func(string) error

+ Set func(string, interface{}) error

+ Type func() string

+ Walk func(context.Context, Visitor) error

+ X509CertChain func() *cert.Chain

+ X509CertThumbprint func() string

+ X509CertThumbprintS256 func() string

+ X509URL func() string

+ func NewHeaders() Headers

+ type Iterator = mapiter.Iterator

+ type KeyProvider interface

+ FetchKeys func(context.Context, KeySink, *Signature, *Message) error

+ type KeyProviderFunc func(context.Context, KeySink, *Signature, *Message) error

+ func (kp KeyProviderFunc) FetchKeys(ctx context.Context, sink KeySink, sig *Signature, msg *Message) error

+ type KeySink interface

+ Key func(jwa.SignatureAlgorithm, interface{})

+ type Message struct

+ func NewMessage() *Message

+ func Parse(src []byte, _ ...ParseOption) (*Message, error)

+ func ParseReader(src io.Reader) (*Message, error)

+ func ParseString(src string) (*Message, error)

+ func ReadFile(path string, options ...ReadFileOption) (*Message, error)

+ func (m *Message) AppendSignature(v *Signature) *Message

+ func (m *Message) ClearSignatures() *Message

+ func (m *Message) DecodeCtx() DecodeCtx

+ func (m *Message) SetDecodeCtx(dc DecodeCtx)

+ func (m *Message) SetPayload(v []byte) *Message

+ func (m *Message) UnmarshalJSON(buf []byte) error

+ func (m Message) LookupSignature(kid string) []*Signature

+ func (m Message) MarshalJSON() ([]byte, error)

+ func (m Message) Payload() []byte

+ func (m Message) Signatures() []*Signature

+ type Option = option.Interface

+ type ParseOption interface

+ type ReadFileOption interface

+ func WithFS(v fs.FS) ReadFileOption

+ type SignOption interface

+ func WithCompact() SignOption

+ func WithHeaders(h Headers) SignOption

+ func WithJSON(options ...WithJSONSuboption) SignOption

+ type SignVerifyOption interface

+ func WithDetachedPayload(v []byte) SignVerifyOption

+ func WithKey(alg jwa.KeyAlgorithm, key interface{}, options ...WithKeySuboption) SignVerifyOption

+ type Signature struct

+ func NewSignature() *Signature

+ func (s *Signature) DecodeCtx() DecodeCtx

+ func (s *Signature) SetDecodeCtx(dc DecodeCtx)

+ func (s *Signature) SetProtectedHeaders(v Headers) *Signature

+ func (s *Signature) SetPublicHeaders(v Headers) *Signature

+ func (s *Signature) SetSignature(v []byte) *Signature

+ func (s *Signature) Sign(payload []byte, signer Signer, key interface{}) ([]byte, []byte, error)

+ func (s *Signature) UnmarshalJSON(data []byte) error

+ func (s Signature) ProtectedHeaders() Headers

+ func (s Signature) PublicHeaders() Headers

+ func (s Signature) Signature() []byte

+ type Signer interface

+ Algorithm func() jwa.SignatureAlgorithm

+ Sign func([]byte, interface{}) ([]byte, error)

+ func NewSigner(alg jwa.SignatureAlgorithm) (Signer, error)

+ type SignerFactory interface

+ Create func() (Signer, error)

+ type SignerFactoryFn func() (Signer, error)

+ func (fn SignerFactoryFn) Create() (Signer, error)

+ type Verifier interface

+ Verify func(payload []byte, signature []byte, key interface{}) error

+ func NewVerifier(alg jwa.SignatureAlgorithm) (Verifier, error)

+ type VerifierFactory interface

+ Create func() (Verifier, error)

+ type VerifierFactoryFn func() (Verifier, error)

+ func (fn VerifierFactoryFn) Create() (Verifier, error)

+ type VerifyOption interface

+ func WithContext(v context.Context) VerifyOption

+ func WithKeyProvider(v KeyProvider) VerifyOption

+ func WithKeySet(set jwk.Set, options ...WithKeySetSuboption) VerifyOption

+ func WithKeyUsed(v interface{}) VerifyOption

+ func WithMessage(v *Message) VerifyOption

+ func WithVerifyAuto(f jwk.Fetcher, options ...jwk.FetchOption) VerifyOption

+ type Visitor = iter.MapVisitor

+ type VisitorFunc = iter.MapVisitorFunc

+ type WithJSONSuboption interface

+ func WithPretty(v bool) WithJSONSuboption

+ type WithKeySetSuboption interface

+ func WithInferAlgorithmFromKey(v bool) WithKeySetSuboption

+ func WithRequireKid(v bool) WithKeySetSuboption

+ func WithUseDefault(v bool) WithKeySetSuboption

+ type WithKeySuboption interface

+ func WithProtectedHeaders(v Headers) WithKeySuboption

+ func WithPublicHeaders(v Headers) WithKeySuboption

Apr 16, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 9, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 3, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx