go-jose icon indicating copy to clipboard operation
go-jose copied to clipboard

Fix Allow multiple audiences

Open shnmorimoto opened this issue 3 years ago • 6 comments

Related Issue

fixed #286

Description

  • allow any match for multiple audiences
  • currently go-jose requires all match for multiple audiences

shnmorimoto avatar Mar 26 '22 12:03 shnmorimoto

@csstaub Could you please review this PR? If the mention is wrong, I'm sorry.

I know that v3 repository already exists. However, I think this is a bug fix, so I raised the PR to this repository.

shnmorimoto avatar May 03 '22 12:05 shnmorimoto

I can review this, but I don't have permissions on this repository anymore @shnmorimoto so it's not possible for me to do a release with this.

csstaub avatar May 03 '22 16:05 csstaub

If you raise this on the v3 repo I can merge it there and release it as a minor version

csstaub avatar May 03 '22 16:05 csstaub

@csstaub Thanks for replying! I understood the current situation.

I raised PR to v3 repository. https://github.com/go-jose/go-jose/pull/10

shnmorimoto avatar May 03 '22 17:05 shnmorimoto

@mbyczkowski If the mention is wrong, I apologize.

This fix already had been merged on v3 repository. But, it seems v2 version is still being used by many users and libraries. So, if possible, could you merge this fix and release it on this repository?

shnmorimoto avatar May 24 '22 06:05 shnmorimoto

@mbyczkowski Sorry for bothering you. Could you confirm this PR?

shnmorimoto avatar Jun 28 '22 04:06 shnmorimoto

Bump - I can confirm that we're also running into this issue on our team using v2. Would love to see this merged, especially since v2 is still considered the stable version

RJNY avatar Oct 03 '22 14:10 RJNY

Ditto, it is stopping the use of this package.

Jthomas54 avatar Nov 17 '22 18:11 Jthomas54

Is this still an issue with v3: https://github.com/go-jose/go-jose ?

csstaub avatar Nov 17 '22 18:11 csstaub

The square/go-jose repo is the v2 version, v3 development moved over to go-jose/go-jose

csstaub avatar Nov 17 '22 18:11 csstaub

Looks like v3 will solve it but noticed that it is a dependency of github.com/auth0/go-jwt-middleware/v2/jwks so doubtful they will move to the "unstable" v3.

Jthomas54 avatar Nov 17 '22 18:11 Jthomas54

There's a stable release for v3 now so I'd recommend to switch and submit new changes there. I don't have access to this repo anymore since I left Square. I'll see if we can update the README here.

csstaub avatar Nov 17 '22 19:11 csstaub