jwt

Jun 17, 2024

Changes in this version

type ParseOption

+ func WithCookie(v **http.Cookie) ParseOption

+ func WithCookieKey(v string) ParseOption

type Token

+ func ParseCookie(req *http.Request, name string, options ...ParseOption) (Token, error)

type ValidateOption

+ func WithResetValidators(v bool) ValidateOption

Feb 19, 2024 GO-2024-2632

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type GlobalOption

+ func WithCompactOnly(v bool) GlobalOption

Jan 9, 2024 GO-2024-2632

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Dec 3, 2023 GO-2024-2454 +1 more

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Nov 20, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 30, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 19, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Oct 17, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Sep 26, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 10, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 14, 2023 GO-2023-2379 +2 more

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jun 12, 2023 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Mar 21, 2023 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type SignOption

+ func WithInsecureNoSignature() SignOption

Nov 25, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func ErrInvalidJWT() error

Nov 15, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type Token

+ Options func() *TokenOptionSet

+ type TokenOption uint64

+ const FlattenAudience

+ const MaxPerTokenOption

+ func (i TokenOption) String() string

+ func (o TokenOption) Value() uint64

+ type TokenOptionSet uint64

+ func DefaultOptionSet() TokenOptionSet

+ func (o *TokenOptionSet) Clear()

+ func (o *TokenOptionSet) Disable(flag TokenOption)

+ func (o *TokenOptionSet) Enable(flag TokenOption)

+ func (o *TokenOptionSet) Set(s TokenOptionSet)

+ func (o TokenOptionSet) IsEnabled(flag TokenOption) bool

+ func (o TokenOptionSet) Value() uint64

Aug 25, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Aug 11, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Jul 19, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ func SetValidationCtxTruncation(ctx context.Context, dur time.Duration) context.Context

+ func ValidationCtxTruncation(ctx context.Context) time.Duration

type ValidateOption

+ func WithTruncation(v time.Duration) ValidateOption

Jun 13, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

May 23, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type GlobalOption

+ func WithNumericDateParsePedantic(v bool) GlobalOption

May 6, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

type GlobalOption

+ func WithNumericDateFormatPrecision(v int) GlobalOption

+ func WithNumericDateParsePrecision(v int) GlobalOption

type ValidationError

+ func ErrInvalidAudience() ValidationError

+ func ErrInvalidIssuer() ValidationError

+ func ErrRequiredClaim() ValidationError

Apr 24, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Changes in this version

+ const AudienceKey

+ const ExpirationKey

+ const IssuedAtKey

+ const IssuerKey

+ const JwtIDKey

+ const NotBeforeKey

+ const SubjectKey

+ func Equal(t1, t2 Token) bool

+ func IsValidationError(err error) bool

+ func RegisterCustomField(name string, object interface{})

+ func SetValidationCtxClock(ctx context.Context, cl Clock) context.Context

+ func SetValidationCtxSkew(ctx context.Context, dur time.Duration) context.Context

+ func Settings(options ...GlobalOption)

+ func Sign(t Token, options ...SignOption) ([]byte, error)

+ func Validate(t Token, options ...ValidateOption) error

+ func ValidationCtxSkew(ctx context.Context) time.Duration

+ type Builder struct

+ func NewBuilder() *Builder

+ func (b *Builder) Audience(v []string) *Builder

+ func (b *Builder) Build() (Token, error)

+ func (b *Builder) Claim(name string, value interface{}) *Builder

+ func (b *Builder) Expiration(v time.Time) *Builder

+ func (b *Builder) IssuedAt(v time.Time) *Builder

+ func (b *Builder) Issuer(v string) *Builder

+ func (b *Builder) JwtID(v string) *Builder

+ func (b *Builder) NotBefore(v time.Time) *Builder

+ func (b *Builder) Subject(v string) *Builder

+ type ClaimPair = mapiter.Pair

+ type Clock interface

+ Now func() time.Time

+ func ValidationCtxClock(ctx context.Context) Clock

+ type ClockFunc func() time.Time

+ func (f ClockFunc) Now() time.Time

+ type DecodeCtx = json.DecodeCtx

+ type EncryptOption interface

+ func WithEncryptOption(v jwe.EncryptOption) EncryptOption

+ type GlobalOption interface

+ func WithFlattenAudience(v bool) GlobalOption

+ type Iterator = mapiter.Iterator

+ type Option = option.Interface

+ type ParseOption interface

+ func WithFormKey(v string) ParseOption

+ func WithHeaderKey(v string) ParseOption

+ func WithKeyProvider(v jws.KeyProvider) ParseOption

+ func WithKeySet(set jwk.Set, options ...interface{}) ParseOption

+ func WithPedantic(v bool) ParseOption

+ func WithToken(v Token) ParseOption

+ func WithTypedClaim(name string, object interface{}) ParseOption

+ func WithValidate(v bool) ParseOption

+ func WithVerify(v bool) ParseOption

+ func WithVerifyAuto(f jwk.Fetcher, options ...jwk.FetchOption) ParseOption

+ type ReadFileOption interface

+ func WithFS(v fs.FS) ReadFileOption

+ type SerializeCtx interface

+ Nested func() bool

+ Step func() int

+ type SerializeStep interface

+ Serialize func(SerializeCtx, interface{}) (interface{}, error)

+ type Serializer struct

+ func NewSerializer() *Serializer

+ func (s *Serializer) Encrypt(options ...EncryptOption) *Serializer

+ func (s *Serializer) Reset() *Serializer

+ func (s *Serializer) Serialize(t Token) ([]byte, error)

+ func (s *Serializer) Sign(options ...SignOption) *Serializer

+ func (s *Serializer) Step(step SerializeStep) *Serializer

+ type SignEncryptParseOption interface

+ func WithKey(alg jwa.KeyAlgorithm, key interface{}, suboptions ...Option) SignEncryptParseOption

+ type SignOption interface

+ func WithSignOption(v jws.SignOption) SignOption

+ type Token interface

+ AsMap func(context.Context) (map[string]interface{}, error)

+ Audience func() []string

+ Clone func() (Token, error)

+ Expiration func() time.Time

+ Get func(string) (interface{}, bool)

+ IssuedAt func() time.Time

+ Issuer func() string

+ Iterate func(context.Context) Iterator

+ JwtID func() string

+ NotBefore func() time.Time

+ PrivateClaims func() map[string]interface{}

+ Remove func(string) error

+ Set func(string, interface{}) error

+ Subject func() string

+ Walk func(context.Context, Visitor) error

+ func New() Token

+ func Parse(s []byte, options ...ParseOption) (Token, error)

+ func ParseForm(values url.Values, name string, options ...ParseOption) (Token, error)

+ func ParseHeader(hdr http.Header, name string, options ...ParseOption) (Token, error)

+ func ParseInsecure(s []byte, options ...ParseOption) (Token, error)

+ func ParseReader(src io.Reader, options ...ParseOption) (Token, error)

+ func ParseRequest(req *http.Request, options ...ParseOption) (Token, error)

+ func ParseString(s string, options ...ParseOption) (Token, error)

+ func ReadFile(path string, options ...ReadFileOption) (Token, error)

+ type TokenWithDecodeCtx = json.DecodeCtxContainer

+ type ValidateOption interface

+ func WithAcceptableSkew(v time.Duration) ValidateOption

+ func WithAudience(s string) ValidateOption

+ func WithClaimValue(name string, v interface{}) ValidateOption

+ func WithClock(v Clock) ValidateOption

+ func WithContext(v context.Context) ValidateOption

+ func WithIssuer(s string) ValidateOption

+ func WithJwtID(s string) ValidateOption

+ func WithMaxDelta(dur time.Duration, c1, c2 string) ValidateOption

+ func WithMinDelta(dur time.Duration, c1, c2 string) ValidateOption

+ func WithRequiredClaim(name string) ValidateOption

+ func WithSubject(s string) ValidateOption

+ func WithValidator(v Validator) ValidateOption

+ type ValidationError interface

+ Unwrap func() error

+ func ErrInvalidIssuedAt() ValidationError

+ func ErrMissingRequiredClaim(name string) ValidationError

+ func ErrTokenExpired() ValidationError

+ func ErrTokenNotYetValid() ValidationError

+ func NewValidationError(err error) ValidationError

+ type Validator interface

+ Validate func(context.Context, Token) ValidationError

+ func ClaimContainsString(name, value string) Validator

+ func ClaimValueIs(name string, value interface{}) Validator

+ func IsExpirationValid() Validator

+ func IsIssuedAtValid() Validator

+ func IsNbfValid() Validator

+ func IsRequired(name string) Validator

+ func MaxDeltaIs(c1, c2 string, dur time.Duration) Validator

+ func MinDeltaIs(c1, c2 string, dur time.Duration) Validator

+ type ValidatorFunc func(context.Context, Token) ValidationError

+ func (vf ValidatorFunc) Validate(ctx context.Context, tok Token) ValidationError

+ type Visitor = iter.MapVisitor

+ type VisitorFunc = iter.MapVisitorFunc

Apr 16, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 9, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx

Apr 3, 2022 GO-2023-1859 +3 more

  GO-2023-1859: Padding oracle vulnerability in github.com/lestrrat-go/jwx

  GO-2023-2379: Denial of service due to malicious parameters in github.com/lestrrat-go/jwx

  GO-2024-2454: Panic due to nil pointer dereference in github.com/lestrrat-go/jwx/v2

  GO-2024-2632: JWX vulnerable to a denial of service attack using compressed JWE message in github.com/lestrrat-go/jwx