jwt-simple - npm Package Compare versions

Comparing version 0.5.2 to 0.5.3

History.md

@@ -0,1 +1,5 @@
+## 0.5.3
+
+Security fix #86
+
 ## 0.5.2
@@ -2,0 +6,0 @@

lib/jwt.js

@@ -46,3 +46,3 @@ /*
  */
-jwt.version = '0.5.2';
+jwt.version = '0.5.3';
 
@@ -80,2 +80,6 @@ /**
   if (!noVerify) {
+    if (!algorithm && /BEGIN( RSA)? PUBLIC KEY/.test(key.toString())) {
+      algorithm = 'RS256';
+    }
+
     var signingMethod = algorithmMap[algorithm || header.alg];
@@ -82,0 +86,0 @@ var signingType = typeMap[algorithm || header.alg];

package.json

 {
   "name": "jwt-simple",
   "description": "JWT(JSON Web Token) encode and decode module",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "author": "Kazuhito Hokamura <[e-mail]>",
@@ -30,2 +30,2 @@ "repository": {
   "typings": "./index.d.ts"
-}
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

90497

increased by491.95%

Number of package files

23

increased by109.09%

Lines of code

726

increased by138.03%

No dependency changes