dart_jsonwebtoken

• Fix aud list verification crashing on JSON-decoded tokens (List<dynamic> to List<String> cast)
• Add defensive type guards on exp, nbf and iat claims (throw JWTInvalidException instead of runtime error)
• Adopt package:lints/recommended with strict-casts/inference
• Internal lint cleanups (super.message, string interpolation, remove deprecated library directive)

• Fix aud list verification crashing on JSON-decoded tokens (List<dynamic> to List<String> cast)
• Add defensive type guards on exp, nbf and iat claims (throw JWTInvalidException instead of runtime error)
• Adopt package:lints/recommended with strict-casts/inference
• Internal lint cleanups (super.message, string interpolation, remove deprecated library directive)

• Replace ed25519_edwards with vendored Ed25519 implementation (enable dart2wasm compilation)
• RSA PKCS1-v1_5 sign/verify (enable RSA algorithm for node.js)

• Replace ed25519_edwards with vendored Ed25519 implementation (enable dart2wasm compilation)
• RSA PKCS1-v1_5 sign/verify (enable RSA algorithm for node.js)

• Use constant-time comparison for HMAC signature verification (timing-attack resistant)
• Handle non-Map payload in JWT.decode (audience, issuer, subject, jwtId)
• Allow aud claim as generic List in _parseAud
• Fix ECPrivateKey.bytes, derive EC private key size from parameters

• Use constant-time comparison for HMAC signature verification (timing-attack resistant)
• Handle non-Map payload in JWT.decode (audience, issuer, subject, jwtId)
• Allow aud claim as generic List in _parseAud
• Fix ECPrivateKey.bytes, derive EC private key size from parameters

3.3.1

• Rollback to a dynamic JWT.payload

3.3.0

• RETRACTED
• Increase JWT.payload strictness (#67)

• Rollback to a dynamic JWT.payload

• RETRACTED
• Increase JWT.payload strictness (https://github.com/jonasroussel/dart_jsonwebtoken/issues/67)

• Update upper bound of pointycastle (#65)
• Dart SDK minimum version set to 3.0.0
• Use pointycastle for HMAC calculation instead of crypto
• Implement custom deep list equality instead of using the collection package

• Update upper bound of pointycastle (https://github.com/jonasroussel/dart_jsonwebtoken/pull/65)
• Dart SDK minimum version set to 3.0.0
• Use pointycastle for HMAC calculation instead of crypto
• Implement custom deep list equality instead of using the collection package

• Rollback collection to 1.17.1 to be compatible with older flutter versions

• Rollback collection to 1.17.1 to be compatible with older flutter versions

• Fix unconsistant JWK convertion
• Add JWTKey.fromJWK static method for parsing JWK to various key types

• Fix unconsistant JWK convertion
• Add JWTKey.fromJWK static method for parsing JWK to various key types

• Possible BREAKING CHANGE: exp, nbf and iat are now following the JWT RFC for NumericDate by only using UTC DateTime
• Add JWK (JSON Web Key) conversion methods to key classes (toJWK())
• Fix HMAC secret auto detect if base64 is url or not
• Fix base64Url instead of base64 for string payloads JWT
• Add header tests for exp, nbf and iat

• Possible BREAKING CHANGE: exp, nbf and iat are now following the JWT RFC for NumericDate by only using UTC DateTime
• Add JWK (JSON Web Key) conversion methods to key classes (toJWK())
• Fix HMAC secret auto detect if base64 is url or not
• Fix base64Url instead of base64 for string payloads JWT
• Add header tests for exp, nbf and iat

• Parse standard parameters when using JWT.decode (#64)

• Parse standard parameters when using JWT.decode (https://github.com/jonasroussel/dart_jsonwebtoken/pull/64)

• Add support of PEM parsing for EdDSA keys with EdDSAPrivateKey.fromPem and EdDSAPublicKey.fromPem

• Added support for PSS alogrithm varations (https://github.com/jonasroussel/dart_jsonwebtoken/pull/59)

• Ensure sub, iss, jti are strings (https://github.com/jonasroussel/dart_jsonwebtoken/pull/62)

• Fix iat claim verification (https://github.com/jonasroussel/dart_jsonwebtoken/pull/57)

• Add support for base64 encoded secrets (https://github.com/jonasroussel/dart_jsonwebtoken/pull/54)
• Fix exp, nbf and iat checks by casting the value to int

• Fix invalid ECDSA signature for keys that are not a multiple of 8 (e.g. secp521r1) (https://github.com/jonasroussel/dart_jsonwebtoken/issues/51)

• Add testable date times (https://github.com/jonasroussel/dart_jsonwebtoken/issues/50)

• Fixing issue with custom headers (https://github.com/jonasroussel/dart_jsonwebtoken/issues/48)

• NEW: tests have been added
• NEW: publish & test CI
• Making all JWTAlgorithm classes public (mainly to be mocked in tests)

• Removing basic_utils package that was incompatible with flutter web
• Moving utils to helpers.dart and key parsing functions into key_parser.dart
• Adding some new examples in example/example.dart

• New ECDSA algorithm (ES256K)
• New RSA algorithm with PSS padding (PS256, PS384, PS512)
• README.md improved
• example/example.dart improved

• Adding a new class factory ECPublicKey.cert

• Adding basic_utils package to handle PEM & key parsing
• A lot of new class factory to create Keys (e.g. RSAPublicKey.cert and .bytes)

• Downgraing collection to 1.7.1 to be compatible with flutter_test

• Updating dependencies
• Fixing CHANGELOG.md

• BREAKING CHANGE: Replacing all JWTError by JWTException that is more accurate (https://github.com/jonasroussel/dart_jsonwebtoken/issues/39)
• Fixing assert message (https://github.com/jonasroussel/dart_jsonwebtoken/pull/42)

• Migrating from pedantic to lints

• parsing.dart has been replaced by more accurate CryptoUtils functions https://github.com/Ephenodrom/Dart-Basic-Utils
• Fixing _ECDSAAlgorithm.sign method that did not filling the gap in the ECDSA curve signatures

• Fixing ECPrivateKey.raw initialize size

• Adding a .raw and .clone constructor to JWTKey (execpt SecretKey of course)

• Fix rethrow of JWTError exceptions for the method verify. Before this change every exception thrown by verify always returned JWTUndefinedError

• Adding a try version of decode, verify and sign, that simply returns null instead of throwing errors

• Adding a JWT.decode method to simply decode a token without checking its signature
• The JWT.verify method do not remove extra token infos (iss, aud, ...) anymore

• Fix Flutter compatibility issue: downgrade dependency collection to 1.16.0

• https://github.com/jonasroussel/dart_jsonwebtoken/commit/12348776259ccec70ccf62856ec0245f49ebe951

• Formating for 'static analysis'

• Fix : https://github.com/jonasroussel/dart_jsonwebtoken/issues/19

• BREAKING CHANGE: JWT.audience is now an instance of the Audience class, to handle multiple audience entries and can be used like list. You can always use a single entry by calling Audience.one('...') factory and the .first getter
• Upgrading pointycastle dependency to 3.3.4

• Some badges on README.md (Thanks to https://github.com/bruno-garcia/badges.bar)

• Fix the pointycastle dependency, v3.1.3 is incompatible with flutter web (dart2js) (https://github.com/jonasroussel/dart_jsonwebtoken/issues/14)

• Adding header in JWT class (you can now set your custom header)

• Fixing EdDSA incompatibility's with flutter web (https://github.com/jonasroussel/dart_jsonwebtoken/issues/11)
• Dependencies: ed25519_edwards have been removed, convert & collection have been added

• Fixing _pkcs8ECPublicKey to work with pointycastle 3.0.1

• When an undefined error occur JWTUndefinedError is thrown containing the original error in error property (https://github.com/jonasroussel/dart_jsonwebtoken/issues/9)
• BREAKING CHANGE: jwt.verify no longer support throwUndefinedErrors parameter

• Fixing JWT.sign to include iat & other attributes when payload is an empty Map

• Stable release for null safety

• New EdDSA Algorithm (EdDSA)
• EdDSAPrivateKey and EdDSAPublicKey, two new keys for EdDSA algorithm
• ed25519_edwards package has been added

• Null safety migration of this package

• Adding analysis_options.yaml to work with pedantic during development

• Formating for 'static analysis'

• New ECDSA Algorithm (ES256, ES384, ES512)
• ECPrivateKey and ECPublicKey, two new keys for ECDSA algorithm
• PrivateKey is renamed in RSAPrivateKey
• PublicKey is renamed in RSAPublicKey
• Optimization of private & public keys parsing
• rsa_pkcs & cryptography have been removed

• Debuging _TypeError issue on sign method (#4)
• Implementing toString in the JWTError class

• Formating for 'static analysis'

• Implementing throwUndefinedErrors option in the JWT.verify method

• Formating for 'static analysis'

• Adding checks in JWT.verify function for iss, sub, aud, iat, jti

• Formating for 'static analysis'

• Payload is now required
• Payload is now dynamic and not restricted to an object
• Dependencies updated

• New algorithms