You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+3-3
Original file line number
Diff line number
Diff line change
@@ -6,19 +6,19 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
6
6
7
7
## [Unreleased]
8
8
9
-
###[8.4.0] - released 2023-02-15
9
+
## [8.4.0] - released 2023-02-15
10
10
### Added
11
11
- You can now set a leeway for time drift between servers when validating a JWT (PR #1304)
12
12
13
13
### Security
14
14
- Access token requests that contain a code_verifier but are not bound to a code_challenge will be rejected to prevent
15
15
a PKCE downgrade attack (PR #1326)
16
16
17
-
###[8.3.6] - released 2022-11-14
17
+
## [8.3.6] - released 2022-11-14
18
18
### Fixed
19
19
- Use LooseValidAt instead of StrictValidAt so that users aren't forced to use claims such as NBF in their JWT tokens (PR #1312)
20
20
21
-
###[8.3.5] - released 2022-05-12
21
+
## [8.3.5] - released 2022-05-12
22
22
### Fixed
23
23
- Use InMemory::plainText('empty', 'empty') instead of InMemory::plainText('') to avoid [new empty string exception](https://github.com/lcobucci/jwt/pull/833) thrown by lcobucci/jwt (PR #1282)
0 commit comments