dmalix / gojwt Goto Github PK

Add secret key verification. It must be the same (or greater) bit length as the hash size of the output algorithm.
This will is to avoid weakening the security strength of the authentication code (see NIST recommendations NIST SP 800-117). For example, when using HMAC256, the secret key length must be a minimum of 256 bits.

From now on, these functions do not use return by pointer:

It was:

• Jwt.GetHeaders() *Headers
• Jwt.GetClaims() *Claims
• Jwt.GetParseOptions() *ParseOptions

It became:

• Jwt.GetHeaders() Headers
• Jwt.GetClaims() Claims
• Jwt.GetParseOptions() ParseOptions