1.4.0

   🚨 Breaking Changes

• Remove deprecated modules  -  by @lepture (ce206)

   🐞 Bug Fixes

• Rename useless import as statements  -  by @lepture (160ee)
• Improments on type hints  -  by @lepture (e17dd)
• Improvements on errors  -  by @lepture (c022f)
• jwt: Rename ClaimsRegistry to BaseClaimsRegistry  -  by @lepture (21f41)

    View changes on GitHub

1.3.4

   🐞 Bug Fixes

• Use explicit type for json_b64encode and json_b64decode  -  by @lepture (61a17)
• jws: Validating content size to avoid DoS  -  by @lepture (05ccf)
• jwe: Add content size validation to avoid DoS  -  by @lepture (62d96)

    View changes on GitHub

1.3.3

   🐞 Bug Fixes

• Reject crit header in unprotected headers  -  by @lepture (10d9d)

    View changes on GitHub

1.3.2

   🐞 Bug Fixes

• Check header in crit is supported  -  by @lepture (70085)
• jwk: Return the first key when multiple keys found in key set  -  by @lepture (0c3ca)

    View changes on GitHub

1.3.1

   🐞 Bug Fixes

• Prevent unprotected header overwriting protected header  -  by @lepture (28319)

    View changes on GitHub

1.3.0

   🚨 Breaking Changes

• Remove python 3.8 support.  -  by @lepture (19666)
• Rename JWS and JWE Algorithm model class names to prevent name conflicts  -  by @lepture (a8a95)
• Move JWSAlgModel, JWEEncModel, JWEZipModel to jwa module  -  by @lepture (6fd86)

   🚀 Features

• Export algorithms in jwa module  -  by @lepture (d9c2e)
• Add class method JWSRegistry.guess_alg  -  by @lepture (8553a)

   🐞 Bug Fixes

• Using built-in types since python 3.8 is dropped.  -  by @lepture (cba41)
• Replace Dict type with built-in dict type.  -  by @lepture (27257)
• Add claim attribute on claim errors  -  by @lepture (af8e2)
• Restructure rfc7519 file names  -  by @lepture (5fab0)
• Generate now timestamp  -  by @lepture (34470)
• jws: Raise InvalidKeyCurveError instead of ValueError  -  by @lepture (df600)

    View changes on GitHub

1.2.2

   🚀 Features

• Support partial list matching in JWTClaimRegistry.validate, similar to aud claim logic  -  by @feteu in #63 (62f56)

   🐞 Bug Fixes

• Improve maintainability suggested by sonarqube  -  by @lepture (b2e37)
• Update for mypy lint errors  -  by @lepture (49c27)
• Use correct function name for Chacha20-Poly1305 registration  -  by @feteu in #67 (a9a9d)
• Remove validate_aud method  -  by @lepture (5bcbf)

    View changes on GitHub

1.2.1

   🐞 Bug Fixes

• Move RSA1_5 security warning to its instance  -  by @lepture (1e4d1)
• Improve type hints for jwk module  -  by @lepture (ab682)
• Improve jwk.import_key and jwk.generate_key type hints  -  by @lepture (8aaed)
• Guess correct key with "use" and "alg"  -  by @lepture (212ea)
• Improve type hints for import_key  -  by @lepture (82e02)

    View changes on GitHub

1.2.0

   🚨 Breaking Changes

• Make rfc folders private  -  by @lepture (b9379)
• Remove deprecated guessing key from bytes and string  -  by @lepture (fc343)

   🚀 Features

• Add RFC 9278 JWK thumbprint URI  -  by @lepture (e3ffa)

   🐞 Bug Fixes

• Export DictKey type in jwk  -  by @lepture (056b2)
• Adding all for rfc7515 and rfc7516  -  by @lepture (1c2be)
• Warning about draft-ietf-jose-deprecate-none-rsa15-02  -  by @lepture (b8297)
• Warn about weak key size for OctKey and RSAKey  -  by @lepture (115b5)

    View changes on GitHub

1.1.0

   🚨 Breaking Changes

• Use ECKey.binding.register_curve to register new supported curves.  -  by @lepture (04dd9)

   🚀 Features

• Add __eq__ for Key and KeySet  -  by @lepture (2ebe3)
• Use InvalidHeaderValueError in registry header validation  -  by @lepture in #47 (79826)
• Prevent from Base64 Malleability  -  by @FrancoisCapon in #51 (9da05)
• Export import_key and generate_key methods  -  by @lepture (48a3a)

   🐞 Bug Fixes

• Use import as for prioritize the modules for editors  -  by @lepture (20e15)
• Use UnsupportedAlgorithmError instead of ValueError in JWS/JWE registry  -  by @lepture (b603e)
• Use MissingKeyTypeError, InvalidKeyIdError errors  -  by @lepture (4bc5b)
• Allow jwt.encode passing encoder_cls and jwt.decode passing decoder_cls  -  by @lepture (ce9a4)
• Use correct types for encoder_cls and decoder_cls parameters  -  by @lepture (e403e)
• Respect RFC6749 character set in error descriptions  -  by @azmeuk (70819)
• Add KeyBase and GuestProtocol to __all__  -  by @nsmithuk (b9ec7)
• Update header validation raised errors  -  by @lepture in #45 (2be0f)
• Add "none" algorithm for JWS  -  by @lepture in #44 (cf0ad)
• Cleanup joserfc.util  -  by @lepture (28f58)
• Cleanup useless code in joserfc.util  -  by @lepture (e2af0)
• Update default value type hints for BaseKey.get method, #52  -  by @lepture in #52 (eafa0)
• Raise MissingKeyError when import empty key set. #35  -  by @lepture in #35 (3555f)
• Remove useless catching binascii.Error  -  by @lepture (a3da1)

    View changes on GitHub