1. Brian Campbell Avatar Brian Campbell
  2. Untitled project
  3. jose4j

Issues

Filter by:

Advanced search

Issues (1–25 of 229)

Title T P Status Votes Assignee Created Updated Actions
#225: JOSE 4j 0.9.6 has 5 Unresolved CVEs reported by NIST NVD
bug critical open
#231: Add support for HTTP/2
enhancement major open 1
#230: support for OIDC with MS Azure Multi Tenant Setup
bug major new
#229: Discuss PQC options
proposal major open
#228: java.lang.NoSuchMethodError: No static method addFirst(Ljava/util/List;Ljava/lang/Object;) -> on upgrading to android 35
bug blocker open
#224: What is the best forum to ask for clarifications on specs where your name is mentioned as a contributor?
proposal major resolved
#223: Is there method available to do base64url encoding of the left-most half of the hash of the octets of the ASCII representation of the string for given alg?
enhancement major wontfix
#222: Add a mechanism to remove token from exception message
enhancement major wontfix
#221: Consider creating a sub-project for SD-JWT
proposal major open 1
#217: Add module-info.java
enhancement major on hold 1
#220: [Vuln] ZIP bomb Attack
bug major closed
#219: json_simple uses deprecated-for-removal primitive constructors
enhancement minor resolved
#218: JwksDecryptionKeyResolver does not support resolving OKP keys for ECDH-ES (or ECDH-ES with key wrapping)
bug minor closed
#216: How to create an RSA JWK from java.security.interfaces.RSAPrivateKey ?
bug major resolved
#184: Is there a way to tell Jose4J not to generate and send an IV but use the one returned by the underlying cryptographic provider?
proposal critical on hold
#208: Integrating jose4j into OSS-Fuzz
proposal major on hold
#214: Provide more clear error response when "cty" header is provided with invalid JWT
bug minor resolved
#215: How to create an RSA JWK from java.security.interfaces.RSAPrivateKey ?
bug major duplicate
#213: Security and trust from Google play for contentEncryptionKeyAlgorithm
bug major closed
#212: Dos Attack Via specifically crafted JWE
bug critical closed
#211: Support RSA-OAEP-512 as KeyManangementAlgorithmIdentifier
enhancement major on hold
#210: setSignature in JWS should fail when invalid characters are detected prior to running base64urldecode
bug minor on hold
#206: What is the reason sender constrained verification is pushed on to Resource Server instead of introspection API doing it?
proposal major closed
#209: HttpsJwks and HttpsJwksVerificationKeyResolver with Pluggable Cache implementation
enhancement minor on hold
#110: RSA PSS with provider that doesn't support parameter spec
bug major closed
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. 7
  9. 8
  10. 9
  11. 10