connect2id / Nimbus-JOSE-JWT / issues

Title	T	P	Status	Votes	Assignee	Milestone	Created	Updated
#494: Nimbus-jose-jwt has a dependency with jcip-annotations ver 1.0.1, this has identified vulnerabilities JWT	task	major	invalid				2022-09-28	2022-10-07
#170: Nimbus-JOSE-JWT for JDK6 JOSE Core	task	major	invalid		Vladimir Dzhuvinov		2016-03-21	2016-04-04
#157: GoJose interop issue ECDH	task	major	invalid				2015-10-14	2015-10-21
#477: Release notes for every release Documentation	proposal	major	invalid			4.0	2022-06-07	2022-08-16
#379: OpenID 'id_token_signing_alg_values_supported' should be honored JOSE Core	proposal	major	invalid			5.0	2020-09-20	2020-12-27
#254: Please, ignore	proposal	major	invalid				2018-03-03	2018-03-04
#536: Stop using version range on net.minidev:json-smart	enhancement	major	invalid				2024-02-09	2024-02-10
#374: Imlementing a custom GrantType	enhancement	major	invalid				2020-08-26	2020-09-19
#311: Support MGF1 digest SHA-256 when decrypt a JWE JOSE Core	enhancement	major	invalid				2019-06-04	2019-06-18
#275: Make ECDHEncrypter take ephemeral key as argument Crypto package	enhancement	major	invalid	1			2018-09-06	2018-09-07
#211: How to load private and public key from a file ? JWT	enhancement	major	invalid		Connect2id OSS		2017-02-13	2017-04-08
#491: Minification causes an issue when parsing an RSA from Json	bug	major	invalid				2022-09-13	2023-01-28
#488: X509CertUtils.parse gives null for DER encoded certificate JWT	bug	major	invalid				2022-08-26	2022-09-09
#476: for JWT Signed token does it exists support for longer payload body? JWT	bug	major	invalid				2022-05-02	2022-08-26
#454: Why must secret's length > 32?	bug	major	invalid				2022-01-05	2022-01-06
#455: Not able to decrypt using JWE, when a private key is located in HSM Crypto package	bug	major	invalid				2022-01-05	2022-01-06
#441: Unable to parse JWK in Java JWK	bug	major	invalid				2021-08-25	2021-09-01
#423: CWE-470 Flaw from Veracode Scan JWT	bug	major	invalid				2021-05-27	2021-05-30
#383: Working with HSM with secret key set as non extractable Crypto package	bug	major	invalid			5.0	2020-10-19	2020-12-27
#381: Verifying a JWT succeeds after the token has expired JWT	bug	major	invalid				2020-10-10	2020-12-15
#298: Invalid RSASSA-PSS salt length parameter: Unsupported content digest algorithm: SHA256	bug	major	invalid				2019-02-14	2020-12-10
#365: Thumbprints not compliant with RFC7517 JWK	bug	major	invalid				2020-07-07	2020-10-29
#371: Safenet HSM JWT	bug	major	invalid				2020-07-23	2020-07-31
#369: JWTProcessor always processes different token to churn out the same jwt id JWT	bug	major	invalid				2020-07-21	2020-07-21
#351: JwtObject ECDSAVerifier verifying the wrong signature format JWT	bug	major	invalid				2020-03-07	2020-03-11

#494: Nimbus-jose-jwt has a dependency with jcip-annotations ver 1.0.1, this has identified vulnerabilities

JWT

task

major

invalid

2022-09-28

2022-10-07

#170: Nimbus-JOSE-JWT for JDK6

JOSE Core

task

major

invalid

Vladimir Dzhuvinov

2016-03-21

2016-04-04

#157: GoJose interop issue ECDH

task

major

invalid

2015-10-14

2015-10-21

#477: Release notes for every release

Documentation

proposal

major

invalid

4.0

2022-06-07

2022-08-16

#379: OpenID 'id_token_signing_alg_values_supported' should be honored

JOSE Core

proposal

major

invalid

5.0

2020-09-20

2020-12-27

#254: Please, ignore

proposal

major

invalid

2018-03-03

2018-03-04

#536: Stop using version range on net.minidev:json-smart

enhancement

major

invalid

2024-02-09

2024-02-10

#374: Imlementing a custom GrantType

enhancement

major

invalid

2020-08-26

2020-09-19

#311: Support MGF1 digest SHA-256 when decrypt a JWE

JOSE Core

enhancement

major

invalid

2019-06-04

2019-06-18

#275: Make ECDHEncrypter take ephemeral key as argument

Crypto package

enhancement

major

invalid

1

2018-09-06

2018-09-07

#211: How to load private and public key from a file ?

JWT

enhancement

major

invalid

Connect2id OSS

2017-02-13

2017-04-08

#491: Minification causes an issue when parsing an RSA from Json

bug

major

invalid

2022-09-13

2023-01-28

#488: X509CertUtils.parse gives null for DER encoded certificate

JWT

bug

major

invalid

2022-08-26

2022-09-09

#476: for JWT Signed token does it exists support for longer payload body?

JWT

bug

major

invalid

2022-05-02

2022-08-26

#454: Why must secret's length > 32?

bug

major

invalid

2022-01-05

2022-01-06

#455: Not able to decrypt using JWE, when a private key is located in HSM

Crypto package

bug

major

invalid

2022-01-05

2022-01-06

#441: Unable to parse JWK in Java

JWK

bug

major

invalid

2021-08-25

2021-09-01

#423: CWE-470 Flaw from Veracode Scan

JWT

bug

major

invalid

2021-05-27

2021-05-30

#383: Working with HSM with secret key set as non extractable

Crypto package

bug

major

invalid

5.0

2020-10-19

2020-12-27

#381: Verifying a JWT succeeds after the token has expired

JWT

bug

major

invalid

2020-10-10

2020-12-15

#298: Invalid RSASSA-PSS salt length parameter: Unsupported content digest algorithm: SHA256

bug

major

invalid

2019-02-14

2020-12-10

#365: Thumbprints not compliant with RFC7517

JWK

bug

major

invalid

2020-07-07

2020-10-29

#371: Safenet HSM

JWT

bug

major

invalid

2020-07-23

2020-07-31

#369: JWTProcessor always processes different token to churn out the same jwt id

JWT

bug

major

invalid

2020-07-21

#351: JwtObject ECDSAVerifier verifying the wrong signature format

JWT

bug

major

invalid

2020-03-07

2020-03-11

Issues

Issues (1–25 of 48)