1. Brian Campbell Avatar Brian Campbell
  2. Untitled project
  3. jose4j

Issues

Filter by:

Advanced search

Issues (1–25 of 224)

Title T P Status Votes Assignee Created Updated Actions
#224: What is the best forum to ask for clarifications on specs where your name is mentioned as a contributor?
proposal major open
#223: Is there method available to do base64url encoding of the left-most half of the hash of the octets of the ASCII representation of the string for given alg?
enhancement major wontfix
#222: Add a mechanism to remove token from exception message
enhancement major wontfix
#221: Consider creating a sub-project for SD-JWT
proposal major open
#220: [Vuln] ZIP bomb Attack
bug major closed
#219: json_simple uses deprecated-for-removal primitive constructors
enhancement minor resolved
#218: JwksDecryptionKeyResolver does not support resolving OKP keys for ECDH-ES (or ECDH-ES with key wrapping)
bug minor closed
#217: Add module-info.java
enhancement major on hold 1
#216: How to create an RSA JWK from java.security.interfaces.RSAPrivateKey ?
bug major resolved
#215: How to create an RSA JWK from java.security.interfaces.RSAPrivateKey ?
bug major duplicate
#214: Provide more clear error response when "cty" header is provided with invalid JWT
bug minor resolved
#213: Security and trust from Google play for contentEncryptionKeyAlgorithm
bug major closed
#212: Dos Attack Via specifically crafted JWE
bug critical closed
#211: Support RSA-OAEP-512 as KeyManangementAlgorithmIdentifier
enhancement major on hold
#210: setSignature in JWS should fail when invalid characters are detected prior to running base64urldecode
bug minor on hold
#209: HttpsJwks and HttpsJwksVerificationKeyResolver with Pluggable Cache implementation
enhancement minor on hold
#208: Integrating jose4j into OSS-Fuzz
proposal major on hold
#207: Using EdDSA triggers NoSuchAlgorithmException
bug trivial invalid
#206: What is the reason sender constrained verification is pushed on to Resource Server instead of introspection API doing it?
proposal major closed
#205: How to construct jkt claim? Any plans to add it to library?
bug critical closed
#204: GHSA-jgvc-jfgh-rjvv version upgrade 0.7.x or 0.6.x to 0.9.3
proposal blocker resolved
#203: Insecure support of setting PBE less then 1000 iteration count
enhancement minor closed
#202: JWE - PartyUInfo Header ("apu") to contain Ephemeral Public Key
proposal major closed
#201: Handle X509 certificates in base64 without prefix/suffix
enhancement major resolved
#200: Google Play Store identifies unsafe encryption in the class SimpleAeadCipher
bug major closed
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. 7
  9. 8
  10. 9