Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: auth0/node-jsonwebtoken
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v7.4.0
Choose a base ref
...
head repository: auth0/node-jsonwebtoken
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v7.4.1
Choose a head ref
  • 3 commits
  • 2 files changed
  • 2 contributors

Commits on Apr 24, 2017

  1. Update changelog

    @ziluvatar
    ziluvatar committed Apr 24, 2017
    Copy the full SHA
    6755049 View commit details

Commits on May 17, 2017

  1. bump ms to v2 due a ReDoS vuln (#352) 

    ms@0.7.3 is vulnerable to a ReDoS attack: https://snyk.io/vuln/npm:ms:20170412

Looking at the code, the breaking change in ms@2.x that the accepted string is now limited to 100 chars.
    @dominykas @ziluvatar
    dominykas authored and ziluvatar committed May 17, 2017
    Copy the full SHA
    adcfd6a View commit details

  2. 7.4.1

    @ziluvatar
    ziluvatar committed May 17, 2017
    Copy the full SHA
    e9c6ddd View commit details
Showing with 7 additions and 2 deletions.
  1. +5 −0 CHANGELOG.md
  2. +2 −2 package.json
5 changes: 5 additions & 0 deletions CHANGELOG.md
View file
Original file line number Diff line number Diff line change
@@ -4,6 +4,11 @@
All notable changes to this project will be documented in this file starting from version **v4.0.0**.
This project adheres to [Semantic Versioning](http://semver.org/).

## 7.4.0 - 2017-04-24

- Add docs about numeric date fields ([659f73119900a4d837650d9b3f5af4e64a2f843b](https://github.com/auth0/node-jsonwebtoken/commit/659f73119900a4d837650d9b3f5af4e64a2f843b))
- Make Options object optional for callback-ish sign ([e202c4fd00c35a24e9ab606eab89186ade13d0cc](https://github.com/auth0/node-jsonwebtoken/commit/e202c4fd00c35a24e9ab606eab89186ade13d0cc))

## 7.3.0 - 2017-02-13

- Add more information to `maxAge` option in README ([1b0592e99cc8def293eed177e2575fa7f1cf7aa5](https://github.com/auth0/node-jsonwebtoken/commit/1b0592e99cc8def293eed177e2575fa7f1cf7aa5))
4 changes: 2 additions & 2 deletions package.json
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "jsonwebtoken",
"version": "7.4.0",
"version": "7.4.1",
"description": "JSON Web Token implementation (symmetric and asymmetric)",
"main": "index.js",
"scripts": {
@@ -22,7 +22,7 @@
"joi": "^6.10.1",
"jws": "^3.1.4",
"lodash.once": "^4.0.0",
"ms": "^0.7.1",
"ms": "^2.0.0",
"xtend": "^4.0.1"
},
"devDependencies": {