Commits

Branch selector

main

User selector

All users

All time

Commit history

Commits on Jul 28, 2026

• docs: fold jwx plans into a single JWX.md

  Show description for de382d3
  

  yaronf

  and

  cursoragent

  committed
  de382d3View commit details

  Copy full SHA for de382d3

  Browse repository at this point

Commits on Jul 14, 2026

• chore: enable revive unchecked-type-assertion

  Show description for 2e46027
  

  yaronf

  and

  cursoragent

  committed
  2e46027View commit details

  Copy full SHA for 2e46027

  Browse repository at this point

• chore: bump GitHub Actions to Node 24 majors

  Show description for a37ff57
  

  yaronf

  and

  cursoragent

  committed
  a37ff57View commit details

  Copy full SHA for a37ff57

  Browse repository at this point

• chore: replace Go Report Card with golangci-lint

  Show description for 86d4cd0
  

  yaronf

  and

  cursoragent

  committed
  86d4cd0View commit details

  Copy full SHA for 86d4cd0

  Browse repository at this point

• chore: bump actions/checkout to v4 in CodeQL workflow

  Show description for 6acf29d
  

  yaronf

  and

  cursoragent

  committed
  6acf29dView commit details

  Copy full SHA for 6acf29d

  Browse repository at this point

• Merge commit from fork

  Show description for 2e9e682
  yaronf

  authored
  2e9e682View commit details

  Copy full SHA for 2e9e682

  Browse repository at this point

• Fix verify panic on malformed Signature-Input component parameters.

  Show description for 55dde1a
  

  yaronf

  and

  cursoragent

  committed
  55dde1aView commit details

  Copy full SHA for 55dde1a

  Browse repository at this point

Commits on Jul 7, 2026

• chore: bump CodeQL Action from v3 to v4

  Show description for f46f0f4
  

  yaronf

  and

  cursoragent

  committed
  f46f0f4View commit details

  Copy full SHA for f46f0f4

  Browse repository at this point

Commits on May 19, 2026

• docs: expand jwx v4 checklist from upstream MIGRATION.md

  Show description for 5b0eb50
  

  yaronf

  and

  cursoragent

  committed
  5b0eb50View commit details

  Copy full SHA for 5b0eb50

  Browse repository at this point

Commits on Apr 21, 2026

• docs: add jwx migration summary and index internal-docs

  Show description for 1c68b0a
  yaronf

  committed
  1c68b0aView commit details

  Copy full SHA for 1c68b0a

  Browse repository at this point

Commits on Apr 10, 2026

• chore: add .DS_Store to .gitignore

  Show description for 4d85e71
  

  yaronf

  and

  claude

  committed
  4d85e71View commit details

  Copy full SHA for 4d85e71

  Browse repository at this point

Commits on Mar 29, 2026

• Add custom Signature-Input parameters (RFC 9421)

  Show description for 240e2b0
  yaronf

  committed
  240e2b0View commit details

  Copy full SHA for 240e2b0

  Browse repository at this point

Commits on Mar 17, 2026

• fix: ignore non-positive delay in SetExpiresAfter

  Show description for 6dbaa5c
  

  yaronf

  and

  claude

  committed
  6dbaa5cView commit details

  Copy full SHA for 6dbaa5c

  Browse repository at this point

• Merge pull request #18 from krichprollsch/expireAfter

  Show description for 691910b
  yaronf

  authored
  691910bView commit details

  Copy full SHA for 691910b

  Browse repository at this point

• Add tests for SetExpiresAfter functionality

  Show description for 9f23d36
  krichprollsch

  committed
  9f23d36View commit details

  Copy full SHA for 9f23d36

  Browse repository at this point

• fix comment for SetExpiresAfter config

  krichprollsch

  committed
  f5bf533View commit details

  Copy full SHA for f5bf533

  Browse repository at this point

• add expiresAfter to use a relative delay for expiration

  krichprollsch

  committed
  27d9571View commit details

  Copy full SHA for 27d9571

  Browse repository at this point

Commits on Mar 13, 2026

• Merge review-wip: security review fixes

  Show description for d8c4d2c
  

  yaronf

  and

  claude

  committed
  d8c4d2cView commit details

  Copy full SHA for d8c4d2c

  Browse repository at this point

• Add CLAUDE.md, fuzz corpus, and update .gitignore

  Show description for a0dea36
  

  yaronf

  and

  claude

  committed
  a0dea36View commit details

  Copy full SHA for a0dea36

  Browse repository at this point

Commits on Mar 12, 2026

• Fix #15: safe type assertions, constant-time digest compare, nil message error

  Show description for 174f152
  

  yaronf

  and

  claude

  committed
  174f152View commit details

  Copy full SHA for 174f152

  Browse repository at this point

Commits on Mar 11, 2026

• Fix #14: add comment for RSA-PSS nil opts (backward compat)

  Show description for 51c21c6
  yaronf

  committed
  51c21c6View commit details

  Copy full SHA for 51c21c6

  Browse repository at this point

• Fix #13: validate trailer headers unconditionally

  Show description for 8ad60bc
  yaronf

  committed
  8ad60bcView commit details

  Copy full SHA for 8ad60bc

  Browse repository at this point

• Fix #12: Opaque verification errors to avoid leaking crypto internals

  Show description for cb33937
  yaronf

  committed
  cb33937View commit details

  Copy full SHA for cb33937

  Browse repository at this point

• Fix #11: parseRequest(nil) returns error instead of (nil, nil)

  Show description for b32a0b4
  yaronf

  committed
  b32a0b4View commit details

  Copy full SHA for b32a0b4

  Browse repository at this point

• Fix #10: hasHeader compares by header name only, ignoring params

  Show description for 5b2d189
  yaronf

  committed
  5b2d189View commit details

  Copy full SHA for 5b2d189

  Browse repository at this point

• Fix #8: Cap WrapHandler response body buffering via MaxBodySize

  Show description for 9f7da13
  yaronf

  committed
  9f7da13View commit details

  Copy full SHA for 9f7da13

  Browse repository at this point

• Fix #7: Document replay window as security parameter (doc only)

  Show description for 633435f
  yaronf

  committed
  633435fView commit details

  Copy full SHA for 633435f

  Browse repository at this point

• Fix #6: Add SetNonceValidator for replay prevention

  Show description for 763f75d
  yaronf

  committed
  763f75dView commit details

  Copy full SHA for 763f75d

  Browse repository at this point

• Fix #4: @scheme override for TLS-terminating reverse proxies

  Show description for 50fba69
  yaronf

  committed
  50fba69View commit details

  Copy full SHA for 50fba69

  Browse repository at this point

• Make keyid optional in RequestDetails/ResponseDetails (breaking change)

  Show description for 2534cdb
  yaronf

  committed
  2534cdbView commit details

  Copy full SHA for 2534cdb

  Browse repository at this point

• Fix unbounded body buffering (OOM/DoS)

  Show description for a4a6d7e
  yaronf

  committed
  a4a6d7eView commit details

  Copy full SHA for a4a6d7e

  Browse repository at this point

• Fix security issue: reject signatures missing keyid when SetKeyID is configured

  Show description for b2d95b2
  yaronf

  committed
  b2d95b2View commit details

  Copy full SHA for b2d95b2

  Browse repository at this point

Commits on Mar 2, 2026

• Fix RSA-PSS salt length to comply with RFC 9421

  Show description for 4f9db58
  yaronf

  committed
  4f9db58View commit details

  Copy full SHA for 4f9db58

  Browse repository at this point

Commits on Oct 31, 2025

• Update GitHub Actions to use Go 1.24

  Show description for c2013d0
  yaronf

  committed
  c2013d0View commit details

  Copy full SHA for c2013d0

  Browse repository at this point

• Fix go.mod for GitHub Actions compatibility

  Show description for 0f8454a
  yaronf

  committed
  0f8454aView commit details

  Copy full SHA for 0f8454a

  Browse repository at this point