Comments (4)
Thanks for the report @Pierre-Gilles. The same encoding change effects the secret as well, which is why your edit didn't correct the issue.
Shouldn't be hard to fix up (have it locally), just want to be able to do some performance testing and consider ecosystem impact (it may break workflows of users who have only used the library in Node 5+).
from node-jwa.
Thanks for your quick answer.
I completely understand, the goal is not to break other things !
Let me know when you have more news on that.
from node-jwa.
Hello,
I'm getting back to you on the issue, do you have the time to test the performance & the ecosystem impact of this modification?
We are still stuck on Node 4 for the moment and really need to change before Node 6 is becoming LTS.
Thank you very much for your time and your help.
from node-jwa.
Hi!
I'm really sorry to insist, do you have any changes I can do on my side so we can switch to a more recent version of Node?
Like a way of verifying signature of both Node v4/v6 tokens so we can upgrade without disconnecting all our logged users?
Thank you very much for your time, I totally understand if you don't have the time to push an update on this module, it's just that we need to upgrade to Node v6, and if there is a way to do it on our side without impacting the whole community, that would be great :)
Have a nice day,
from node-jwa.
Related Issues (20)
- Not enough JB Van references. HOT 2
- base64url versus base64-url HOT 1
- Wrong curve used in Makefile HOT 1
- Error: PEM_read_bio_PUBKEY failed HOT 1
- Using RS512 algorithm with EC512 key-pair works HOT 5
- build error while using jsonwebtokens in Angular6 HOT 4
- build error while using jsonwebtokens in Angular6 HOT 1
- Insecure dependency base64url < 3.0.0 HOT 4
- It seems that this does not work for ECDSA
- Can't resolve 'crypto' HOT 1
- module ignores b64 in the header HOT 1
- Feat Request: Ed25519 Support HOT 3
- error:0409806E:rsa routines:RSA_padding_add_PKCS1_PSS_mgf1:data too large for key size HOT 1
- Deprecating jwa and jws packages HOT 2
- move from `buffer-equal-constant-time` to `timingSafeEqual` HOT 2
- Enhancement/ tech debt: use Node's built-in toString(base64url)
- Handle RSA passphrase HOT 2
- use ECDSA with SHA256 signers and verifiers for elliptic curve algorithms HOT 8
- Strange algorithms are accepted HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from node-jwa.