| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Cleanup __init__ module | José Padilla | 2015-01-18 | 1 | -234/+12 |
| | | | | | | - Expose public API - Move exceptions to separate module - Use relative imports | ||||
| * | Tweak comment blocks | José Padilla | 2015-01-18 | 1 | -1/+3 |
| | | |||||
| * | Added comments for algorithms module and register_algorithm. | Mark Adams | 2015-01-18 | 1 | -0/+1 |
| | | |||||
| * | Fixed a couple of anomalies after the last rebase. | Mark Adams | 2015-01-18 | 1 | -3/+2 |
| | | |||||
| * | Moved jwt.algorithms imports back to their original location | Mark Adams | 2015-01-18 | 1 | -1/+1 |
| | | |||||
| * | Fixed some style issues (reordered imports, removed unused imports, PEP8, etc.) | Mark Adams | 2015-01-18 | 1 | -6/+8 |
| | | |||||
| * | Created utils.py to hold functions like constant_time_compare and ↵ | Mark Adams | 2015-01-18 | 1 | -14/+1 |
| | | | | | base64-encoding | ||||
| * | Fixes #70. Refactored all HMAC, RSA, and EC code into seperate classes in ↵ | Mark Adams | 2015-01-18 | 1 | -175/+23 |
| | | | | | | | the algorithms module Added register_algorithm to add new algorithms. | ||||
| * | Drop usage of unicode_literals in all modules | Wouter Bolsterlee | 2015-01-12 | 1 | -1/+0 |
| | | |||||
| * | Bump up version0.4.1 | José Padilla | 2015-01-08 | 1 | -1/+1 |
| | | |||||
| * | Fix missing comma in __all__ | José Padilla | 2015-01-08 | 1 | -1/+1 |
| | | |||||
| * | Handle string and text types like six | José Padilla | 2015-01-08 | 1 | -12/+13 |
| | | |||||
| * | Add timedelta_total_seconds compat branching | José Padilla | 2015-01-07 | 1 | -2/+3 |
| | | |||||
| * | Handle compatibility branching in a compat module | José Padilla | 2015-01-07 | 1 | -45/+2 |
| | | |||||
| * | Also make sure audience claims in token contain only strings | Wouter Bolsterlee | 2015-01-07 | 1 | -0/+2 |
| | | | | | | | The spec mandates that the audience claims must be strings (or a single string). Without this check, an `audience=None` argument to decode() would succeeed when the token contained a claim like ['urn:foo', null]. | ||||
| * | Correctly implement audience claim verification | Wouter Bolsterlee | 2015-01-07 | 1 | -7/+14 |
| | | | | | | | | | | A JWT may contain one or more audience claims. If present, an application must check its own value against the claims in the JWT. In case a token does not contain an audience claim, the application must not specifify one either. See #72 for discussion. | ||||
| * | Rename exceptions that don't have Error in their name | Wouter Bolsterlee | 2015-01-06 | 1 | -9/+27 |
| | | | | | | ...but keep the old names around as deprecated aliases for backward compatibility. | ||||
| * | Rename InvalidToken exception to InvalidTokenError | Wouter Bolsterlee | 2015-01-06 | 1 | -6/+6 |
| | | | | | ...as discussed in #60. | ||||
| * | Add a base InvalidToken exception for others to extend | Wouter Bolsterlee | 2015-01-06 | 1 | -6/+10 |
| | | |||||
| * | Merge pull request #66 from wbolster/issue-65 | José Padilla | 2015-01-06 | 1 | -0/+4 |
| |\ | | | | | Verify that decoded header and payload are json objects | ||||
| | * | Verify that decoded header and payload are json objects | Wouter Bolsterlee | 2015-01-06 | 1 | -0/+4 |
| | | | | | | | | | Fixes #65. | ||||
| * | | Drop unneeded **kwargs magic | Wouter Bolsterlee | 2015-01-06 | 1 | -9/+3 |
| |/ | | | | Fixes #61. | ||||
| * | Merge pull request #64 from wbolster/issue-63 | José Padilla | 2015-01-05 | 1 | -20/+24 |
| |\ | | | | | Use constant time string comparison routine from hmac module | ||||
| | * | Use constant time string comparison routine from hmac module | Wouter Bolsterlee | 2015-01-05 | 1 | -20/+24 |
| | | | | | | | | | | | | | ...and only use the current implementation as a fallback. Fixes #63. | ||||
| * | | Add Python 2.6 compatibility for leeway as timedelta | Wouter Bolsterlee | 2015-01-05 | 1 | -1/+8 |
| | | | |||||
| * | | Allow datetime.timedelta instances for leeway argument | Wouter Bolsterlee | 2015-01-05 | 1 | -1/+5 |
| |/ | |||||
| * | Remove unused import | José Padilla | 2014-12-31 | 1 | -2/+3 |
| | | |||||
| * | Fixes #55 | José Padilla | 2014-12-31 | 1 | -2/+2 |
| | | |||||
| * | Update public API. Closes #53 | José Padilla | 2014-12-31 | 1 | -1/+4 |
| | | |||||
| * | Fixed version for release0.4.0 | José Padilla | 2014-12-23 | 1 | -1/+1 |
| | | |||||
| * | Incremented version to 0.4 | Mark Adams | 2014-12-20 | 1 | -1/+1 |
| | | |||||
| * | Added some missing ensure_bytes in a couple of the tests. | Mark Adams | 2014-12-18 | 1 | -1/+3 |
| | | | | | | Consolidated testing variables for has_rsa and has_ecdsa into has_crypto. Updated README and dependencies in tox.ini | ||||
| * | Modified ECDSA algorithms to use cryptography library instead of ecdsa. | Mark Adams | 2014-12-18 | 1 | -21/+30 |
| | | |||||
| * | Modified RSA algorithms to use cryptography library instead of PyCrypto | Mark Adams | 2014-12-18 | 1 | -14/+45 |
| | | |||||
| * | Removed some unnecessary references to PyCrypto's Crypto.Hash functions in ↵ | Mark Adams | 2014-12-17 | 1 | -3/+0 |
| | | | | | the ECDSA code since it uses hashlib functions anyways. This removes an ECDSA dependency on PyCrypto. | ||||
| * | Bump up version for release0.3.2 | José Padilla | 2014-12-13 | 1 | -7/+13 |
| | | |||||
| * | Added functionality and test. | defyrlt | 2014-12-14 | 1 | -3/+7 |
| | | |||||
| * | Bump up version for release0.3.1 | José Padilla | 2014-12-03 | 1 | -1/+1 |
| | | |||||
| * | Merge pull request #48 from skion/header | Jeff Lindsay | 2014-11-26 | 1 | -2/+4 |
| |\ | | | | | Let `header()` support unicode input, like `decode()`. | ||||
| | * | Let `header()` support unicode input, like `decode()`. | Pieter Ennes | 2014-11-26 | 1 | -2/+4 |
| | | | |||||
| * | | Bump up version for release0.3.0 | José Padilla | 2014-10-22 | 1 | -1/+1 |
| | | | |||||
| * | | Implement Audience and Issuer claims | José Padilla | 2014-10-22 | 1 | -3/+32 |
| | | | |||||
| * | | Cleanup prepare key methods and use single quotes | José Padilla | 2014-10-21 | 1 | -7/+10 |
| | | | |||||
| * | | Merge pull request #40 from sullivanmatt/master | José Padilla | 2014-10-21 | 1 | -0/+49 |
| |\ \ | | | | | | | Support for Elliptic Curve signatures (ES256 / ES384 / ES512) | ||||
| | * \ | Merging in from latest master; resolving merge conflicts | Matthew Sullivan | 2014-10-16 | 1 | -23/+44 |
| | |\ \ | | |/ | |||||
| | * | | Merge pull request #1 from progrium/master | Matthew Sullivan | 2014-09-22 | 1 | -5/+4 |
| | |\ \ | | | | | | | | | Merge in base master at a99f40 | ||||
| | * | | | Fixing signature R and S value encoding, add tests for it | Matthew Sullivan | 2014-09-22 | 1 | -6/+6 |
| | | | | | |||||
| | * | | | Adding ES256/384/512 support | Matthew Sullivan | 2014-09-20 | 1 | -0/+49 |
| | | | | | |||||
| * | | | | Remove redundant check for alg="none". | Pieter Ennes | 2014-10-21 | 1 | -3/+0 |
| | | | | | |||||
| * | | | | Verify method for alg="none" was redundant. | Pieter Ennes | 2014-10-21 | 1 | -1/+0 |
| | | | | | |||||
