Releases: cduvray/jwt-authorizer
Releases · cduvray/jwt-authorizer
0.14.0
- update to axum 0.7
- tower-http 0.5, header 0.4, http 1.0
- jsonwebtoken 9.2
- tonic support removed temporarily (waiting for tonic migration to axum 0.7)
0.13.0
- added support for custom http client in jwks discovery (fixes #41)
algs
added to configurable validation options
- missing alg in JWK no longer defaults to RS256 but to all algs of the same alg familly
- jsonwebtoken updated (8.3.0 -> 9.1.0)
- make RegisteredClaims serializable (fixes #38)
0.11.0
- support for multiple authorizers
- JwtAuthorizer::layer() deprecated in favor of JwtAuthorizer::build() and IntoLayer::into_layer()
- better optional claims extraction (commit: 940acb1)
- error 401 rather than INTERNAL_SERVER_ERROR, when no claims exist (no authorizer layer)
- do not log error