Paseto

Paseto copied to clipboard

Improve `parse_token/2` and `generate_token/5`

3

It seems that `generate_token/5` expects a keypair, at least when the scope is `public`. However I believe it should only need the secret key, in fact the public key is...

sgessa

V3, V4 support

3

Not an issue but a question. A PHP app communicating with our Elixir app wants to upgrade to paseto V3. Due to some dependency updates they need to update their...

andrejj

Bumps [ex_doc](https://github.com/elixir-lang/ex_doc) from 0.28.3 to 0.29.4. Changelog Sourced from ex_doc's changelog. v0.29.4 (2023-03-29) Bug fixes Fix sidebar element with no children taking additional padding Fix elements being rendered too thick...

dependabot[bot]

Bumps [credo](https://github.com/rrrene/credo) from 1.6.4 to 1.7.0. Changelog Sourced from credo's changelog. 1.7.0 Credo.Check.Readability.ModuleDoc works for Phoenix 1.7+ views Credo.Check.Readability.FunctionNames now ignores custom operators Credo.Check.Refactor.Apply now works in pipes Credo.Check.Consistency.ExceptionNames does...

dependabot[bot]

https://github.com/Ianleeclark/Paseto/blob/78eb0b9183f0bf5daf7a344d94376e9dbb333166/lib/paseto/v2.ex#L69 https://github.com/Ianleeclark/Paseto/blob/78eb0b9183f0bf5daf7a344d94376e9dbb333166/lib/paseto/v2.ex#L102 See https://github.com/paseto-standard/paseto-spec/blob/master/docs/02-Implementation-Guide/03-Algorithm-Lucidity.md Right now, byte arrays are accepted by this API. There's no mechanism to prevent a user from using a v2 public key as a v2 local...

paragonie-security

Remove libsodium

2

This PR removes `libsalty` library because outdated and no longer maintained. `libsalty` was used for `XChaCha20Poly1305` and `Ed25519` crypto functions that are now implemented using Erlang native crypto functions. I...

sgessa

Hi @Ianleeclark, Thanks for writing the Paseto library! So, I found myself struggling a bit to install and use this Paseto library until I figured out how to compile libsalty...

joeljuca

Hello there! I am currently using this library in a project and was looking to validate standard claims (eg. `exp`, `nbf`, `iss`, etc.) while handling tokens. Other libraries provide validators...

kathrindc