Skip to content

v4.0.1

Latest

Choose a tag to compare

@julienwoll julienwoll released this 04 Dec 09:00
34c45b2

Changed

  • Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now require
    that a non empty secret is provided (via opts.secret, opts.privateKey or opts.key)
    when using HMAC algorithms.
  • Upgrading JWA version to 2.0.1, addressing a compatibility issue for Node >= 25.