The London Perl and Raku Workshop takes place on 26th Oct 2024. If your company depends on Perl, please consider sponsoring and/or attending.
 / 
Crypt-JWT-0.023
River stage two • 25 direct dependents • 29 total dependents

Changes for version 0.023 - 2018-09-01

  • SECURITY FIX: related to JWS signature validation issue reported by Jeremy Choi (CVE later)
  • (JWS) using a key from 'jwk' header requires to explicitly set 'key_from_jwk_header => 1' and works only for RSA/ECDSA public keys
  • (JWS+JWE) when 'kid_keys' specified it croaks if header does not contain 'kid' value or if 'kid' was not found in 'kid_keys'

Modules

Crypt::JWT
JSON Web Token (JWT, JWS, JWE) as defined by RFC7519, RFC7515, RFC7516
Crypt::KeyWrap
Key management/wrapping algorithms defined in RFC7518 (JWA)

Other files