Skip to content

Give `AudienceClaim` more powers

Pre-release
Pre-release
Compare
Choose a tag to compare
@tanner0101 tanner0101 released this 16 Mar 22:53
4.0.0-rc.1.2
3387c16
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
This patch was authored and released by @gwynne.
  • Allow AudienceClaim to represent more than one audience, per RFC 7519 § 4.1.3
  • Add verifyIntendedAudience(includes:) method for conveniently verifying that the audience is the intended one.
  • Add unit tests for new functionality.

Because the Value type of AudienceClaim is now [String] instead of String, this change is API-breaking!

This would normally require a semver-major update, but as the package is still in RC, I think it can scrape past with a semver-minor, especially since the change is to obey spec.

Assets 2
Loading