{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":11081405,"defaultBranch":"master","name":"node-jsonwebtoken","ownerLogin":"auth0","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2013-07-01T01:28:43.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/2824157?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1693398390.0","currentOid":""},"activityList":{"items":[{"before":"96b89060cfc19272a7d853f53cb28c42580a6a67","after":"bc28861f1fa981ed9c009e29c044a19760a0b128","ref":"refs/heads/master","pushedAt":"2023-08-30T12:25:33.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"jakelacey2012","name":"Jake Lacey","path":"/jakelacey2012","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5159616?s=80&v=4"},"commit":{"message":"Release 9.0.2  (#935)","shortMessageHtmlLink":"Release 9.0.2 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1873545581\" data-permission-text=\"Title is private\" data-url=\"https://github.com/auth0/node-jsonwebtoken/issues/935\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/auth0/node-jsonwebtoken/pull/935/hovercard\" href=\"https://github.com/auth0/node-jsonwebtoken/pull/935\">#935</a>)"}},{"before":"ed35062239c0195d4341025d4699cc39608b435e","after":"96b89060cfc19272a7d853f53cb28c42580a6a67","ref":"refs/heads/master","pushedAt":"2023-08-30T12:06:25.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"jakelacey2012","name":"Jake Lacey","path":"/jakelacey2012","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5159616?s=80&v=4"},"commit":{"message":"refactor: use specific lodash packages (#933)\n\nThis is to reduce the size of the bundle users have to install.","shortMessageHtmlLink":"refactor: use specific lodash packages (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1867247192\" data-permission-text=\"Title is private\" data-url=\"https://github.com/auth0/node-jsonwebtoken/issues/933\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/auth0/node-jsonwebtoken/pull/933/hovercard\" href=\"https://github.com/auth0/node-jsonwebtoken/pull/933\">#933</a>)"}},{"before":"84539b29e17fd40ed25c53fc28db8ae41a34aff8","after":"ed35062239c0195d4341025d4699cc39608b435e","ref":"refs/heads/master","pushedAt":"2023-08-30T12:02:58.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"jakelacey2012","name":"Jake Lacey","path":"/jakelacey2012","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5159616?s=80&v=4"},"commit":{"message":"security: Updating semver to 7.5.4 to resolve CVE-2022-25883 (#932)","shortMessageHtmlLink":"security: Updating semver to 7.5.4 to resolve <a title=\"CVE-2022-25883\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-c2qf-rxjj-qqgw/hovercard\" href=\"https://github.com/advisories/GHSA-c2qf-rxjj-qqgw\">CVE-2022-25883</a> (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1867219928\" data-permission-text=\"Title is private\" data-url=\"https://github.com/auth0/node-jsonwebtoken/issues/932\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/auth0/node-jsonwebtoken/pull/932/hovercard\" href=\"https://github.com/auth0/node-jsonwebtoken/pull/932\">#932</a>)"}},{"before":"84539b29e17fd40ed25c53fc28db8ae41a34aff8","after":null,"ref":"refs/tags/9.0.1","pushedAt":"2023-07-06T10:03:02.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"CharlesRea","name":"Charles Rea","path":"/CharlesRea","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8432642?s=80&v=4"}},{"before":"a99fd4b473e257c2f50ff69c716db1c520bf9a78","after":"84539b29e17fd40ed25c53fc28db8ae41a34aff8","ref":"refs/heads/master","pushedAt":"2023-07-05T17:05:29.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"CharlesRea","name":"Charles Rea","path":"/CharlesRea","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8432642?s=80&v=4"},"commit":{"message":"Updating package version to 9.0.1 (#920)","shortMessageHtmlLink":"Updating package version to 9.0.1 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1789927113\" data-permission-text=\"Title is private\" data-url=\"https://github.com/auth0/node-jsonwebtoken/issues/920\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/auth0/node-jsonwebtoken/pull/920/hovercard\" href=\"https://github.com/auth0/node-jsonwebtoken/pull/920\">#920</a>)"}},{"before":"e1fa9dcc12054a8681db4e6373da1b30cf7016e3","after":"a99fd4b473e257c2f50ff69c716db1c520bf9a78","ref":"refs/heads/master","pushedAt":"2023-04-03T08:27:07.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"jakelacey2012","name":"Jake Lacey","path":"/jakelacey2012","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5159616?s=80&v=4"},"commit":{"message":"fix(stubs): allow decode method to be stubbed (#876)\n\n* refactor: revert 15a1bc4 to to solve #875, #870, and possibly also #876","shortMessageHtmlLink":"fix(stubs): allow decode method to be stubbed (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1527458250\" data-permission-text=\"Title is private\" data-url=\"https://github.com/auth0/node-jsonwebtoken/issues/876\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/auth0/node-jsonwebtoken/pull/876/hovercard\" href=\"https://github.com/auth0/node-jsonwebtoken/pull/876\">#876</a>)"}},{"before":"1ad9a4159a290b4bc5a23ccd5cb7f7e067c93680","after":"9313c33259ffb40feeed968e2b61d632bb5bb9ac","ref":"refs/heads/update-ms-mocha-nyc","pushedAt":"2023-04-02T18:47:29.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"ArturKlajnerok","name":"Artur Klajnerok","path":"/ArturKlajnerok","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1889095?s=80&v=4"},"commit":{"message":"revert use of: nyc mocha --use_strict","shortMessageHtmlLink":"revert use of: nyc mocha --use_strict"}},{"before":"e1fa9dcc12054a8681db4e6373da1b30cf7016e3","after":"1ad9a4159a290b4bc5a23ccd5cb7f7e067c93680","ref":"refs/heads/update-ms-mocha-nyc","pushedAt":"2023-04-02T18:46:21.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"ArturKlajnerok","name":"Artur Klajnerok","path":"/ArturKlajnerok","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1889095?s=80&v=4"},"commit":{"message":"chore: update ms, mocha, nyc","shortMessageHtmlLink":"chore: update ms, mocha, nyc"}},{"before":null,"after":"e1fa9dcc12054a8681db4e6373da1b30cf7016e3","ref":"refs/heads/update-ms-mocha-nyc","pushedAt":"2023-04-02T18:45:37.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"ArturKlajnerok","name":"Artur Klajnerok","path":"/ArturKlajnerok","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1889095?s=80&v=4"},"commit":{"message":"Merge pull request from GHSA-8cf7-32gw-wr33\n\n* Check if node version supports asymmetricKeyDetails\n\n* Validate algorithms for ec key type\n\n* Rename variable\n\n* Rename function\n\n* Add early return for symmetric keys\n\n* Validate algorithm for RSA key type\n\n* Validate algorithm for RSA-PSS key type\n\n* Check key types for EdDSA algorithm\n\n* Rename function\n\n* Move validateKey function to module\n\n* Convert arrow to function notation\n\n* Validate key in verify function\n\n* Simplify if\n\n* Convert if to switch..case\n\n* Guard against empty key in validation\n\n* Remove empty line\n\n* Add lib to check modulus length\n\n* Add modulus length checks\n\n* Validate mgf1HashAlgorithm and saltLength\n\n* Check node version before using key details API\n\n* Use built-in modulus length getter\n\n* Fix Node version validations\n\n* Remove duplicate validateKey\n\n* Add periods to error messages\n\n* Fix validation in verify function\n\n* Make asymmetric key validation the latest validation step\n\n* Change key curve validation\n\n* Remove support for ES256K\n\n* Fix old test that was using wrong key types to sign tokens\n\n* Enable RSA-PSS for old Node versions\n\n* Add specific RSA-PSS validations on Node 16 LTS+\n\n* Improve error message\n\n* Simplify key validation code\n\n* Fix typo\n\n* Improve error message\n\n* Change var to const in test\n\n* Change const to let to avoid reassigning problem\n\n* Improve error message\n\n* Test incorrect private key type\n\n* Rename invalid to unsupported\n\n* Test verifying of jwt token with unsupported key\n\n* Test invalid private key type\n\n* Change order of object parameters\n\n* Move validation test to separate file\n\n* Move all validation tests to separate file\n\n* Add prime256v1 ec key\n\n* Remove modulus length check\n\n* WIP: Add EC key validation tests\n\n* Fix node version checks\n\n* Fix error message check on test\n\n* Add successful tests for EC curve check\n\n* Remove only from describe\n\n* Remove `only`\n\n* Remove duplicate block of code\n\n* Move variable to a different scope and make it const\n\n* Convert allowed curves to object for faster lookup\n\n* Rename variable\n\n* Change variable assignment order\n\n* Remove unused object properties\n\n* Test RSA-PSS happy path and wrong length\n\n* Add missing tests\n\n* Pass validation if no algorithm has been provided\n\n* Test validation of invalid salt length\n\n* Test error when signing token with invalid key\n\n* Change var to const/let in verify tests\n\n* Test verifying token with invalid key\n\n* Improve test error messages\n\n* Add parameter to skip private key validation\n\n* Replace DSA key with a 4096 bit long key\n\n* Test allowInvalidPrivateKeys in key signing\n\n* Improve test message\n\n* Rename variable\n\n* Add key validation flag tests\n\n* Fix variable name in Readme\n\n* Change private to public dsa key in verify\n\n* Rename flag\n\n* Run EC validation tests conditionally\n\n* Fix tests in old node versions\n\n* Ignore block of code from test coverage\n\n* Separate EC validations tests into two different ones\n\n* Add comment\n\n* Wrap switch in if instead of having an early return\n\n* Remove unsupported algorithms from asymmetric key validation\n\n* Rename option to allowInvalidAsymmetricKeyTypes and improve Readme\n\n* 9.0.0\n\n* adding migration notes to readme\n\n* adding changelog for version 9.0.0\n\nCo-authored-by: julienwoll <julien.wollscheid@auth0.com>","shortMessageHtmlLink":"Merge pull request from <a title=\"GHSA-8cf7-32gw-wr33\" data-hovercard-type=\"advisory\" data-hovercard-url=\"/advisories/GHSA-8cf7-32gw-wr33/hovercard\" href=\"https://github.com/advisories/GHSA-8cf7-32gw-wr33\">GHSA-8cf7-32gw-wr33</a>"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAADdbnCMwA","startCursor":null,"endCursor":null}},"title":"Activity · auth0/node-jsonwebtoken"}