@@ -7,35 +7,60 @@ This project adheres to [Semantic Versioning](http://semver.org/).
77[ Unreleased] [ unreleased ]
88-------------------------------------------------------------------------
99### Changed
10- - Added flexible and complete verification options during decode #131
11- - Deprecated usage of the .decode(..., verify=False) parameter
12- - Added support for PS256, PS384, and PS512 algorithms. #132
13- - Added this CHANGELOG.md file
10+ - Placeholder
1411
1512
1613### Fixed
1714- Placeholder
1815
16+ [ v1.1.0] [ 1.1.0 ]
17+ -------------------------------------------------------------------------
18+ ### Added
19+ - Added support for PS256, PS384, and PS512 algorithms. [ #132 ] [ 132 ]
20+ - Added flexible and complete verification options during decode. [ #131 ] [ 131 ]
21+ - Added this CHANGELOG.md file.
22+
23+
24+ ### Deprecated
25+ - Deprecated usage of the .decode(..., verify=False) parameter.
26+
27+
28+ ### Fixed
29+ - Fixed command line encoding. [ #128 ] [ 128 ]
30+
1931[ v1.0.1] [ 1.0.1 ]
2032-------------------------------------------------------------------------
2133### Fixed
22- - Include jwt/contrib' andjwt /contrib/algorithms` in setup.py so that they will
23- actually be included when installing. Ref 882524d
24- - Fix bin/jwt after removing jwt.header() Ref bd57b02
34+ - Include jwt/contrib' and jwt /contrib/algorithms` in setup.py so that they will
35+ actually be included when installing. [ 882524d] [ 882524d ]
36+ - Fix bin/jwt after removing jwt.header(). [ bd57b02] [ bd57b02 ]
2537
2638[ v1.0.0] [ 1.0.0 ]
2739-------------------------------------------------------------------------
2840### Changed
29- - Moved ` jwt.api.header ` out of the public API #85
30- - Added README details how to extract public / private keys from an x509 certificate. #100
31- - Refactor api.py functions into an object (` PyJWT ` ). #101
32- - Added support for PyCrypto and ecdsa when cryptography isn't available. # 103
41+ - Moved ` jwt.api.header ` out of the public API. [ #85 ] [ 85 ]
42+ - Added README details how to extract public / private keys from an x509 certificate. [ #100 ] [ 100 ]
43+ - Refactor api.py functions into an object (` PyJWT ` ). [ #101 ] [ 101 ]
44+ - Added support for PyCrypto and ecdsa when cryptography isn't available. [ # 101 ] [ 103 ]
3345
3446### Fixed
35- - Fixed a security vulnerability where ` alg=None ` header could bypass signature verification #109
36- - Fixed a security vulnerability by adding support for a whitelist of allowed ` alg ` values ` jwt.decode(algorithms=[]) ` #110
47+ - Fixed a security vulnerability where ` alg=None ` header could bypass signature verification. [ #109 ] [ 109 ]
48+ - Fixed a security vulnerability by adding support for a whitelist of allowed ` alg ` values ` jwt.decode(algorithms=[]) ` . [ #110 ] [ 110 ]
3749
3850
39- [ unreleased ] : https://github.com/jpadilla/pyjwt/compare/1.0.1 ...HEAD
51+ [ unreleased ] : https://github.com/jpadilla/pyjwt/compare/1.1.0 ...HEAD
4052[ 1.0.1 ] : https://github.com/jpadilla/pyjwt/compare/1.0.0...1.0.1
41- [ 1.0.0 ] : https://github.com/jpadilla/pyjwt/compare/0.4.3...1.0.0
53+ [ 1.0.1 ] : https://github.com/jpadilla/pyjwt/compare/1.0.0...1.0.1
54+ [ 1.1.0 ] : https://github.com/jpadilla/pyjwt/compare/1.0.1...1.1.0
55+
56+ [ 109 ] : https://github.com/jpadilla/pyjwt/pull/109
57+ [ 110 ] : https://github.com/jpadilla/pyjwt/pull/110
58+ [ 100 ] : https://github.com/jpadilla/pyjwt/pull/100
59+ [ 101 ] : https://github.com/jpadilla/pyjwt/pull/101
60+ [ 103 ] : https://github.com/jpadilla/pyjwt/pull/103
61+ [ 85 ] : https://github.com/jpadilla/pyjwt/pull/85
62+ [ 882524d ] : https://github.com/jpadilla/pyjwt/commit/882524d
63+ [ bd57b02 ] : https://github.com/jpadilla/pyjwt/commit/bd57b02
64+ [ 131 ] : https://github.com/jpadilla/pyjwt/pull/131
65+ [ 132 ] : https://github.com/jpadilla/pyjwt/pull/132
66+ [ 128 ] : https://github.com/jpadilla/pyjwt/pull/128
0 commit comments