Skip to content

v3.2.3

Choose a tag to compare

@julienwoll julienwoll released this 04 Dec 09:03
4f6e73f

Changed

  • Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now require
    that a non empty secret is provided (via opts.secret, opts.privateKey or opts.key)
    when using HMAC algorithms.
  • Upgrading JWA version to 1.4.2, addressing a compatibility issue for Node >= 25.