1.8.0

   🐞 Bug Fixes

• Use python>=3.11, improve type hints  -  by @lepture (7c6de)
• Replace typing as t syntax  -  by @lepture (7422a)
• Treat claims option "value" as the expected claim value  -  by @choksi2212 (232d6)
• jwe: Refresh ECDH ephemeral keys per encryption  -  by @lepture (cc6ec)
• jwe: Reject explicitly empty AAD  -  by @lepture (96ef5)
• jwk: Reject certificates and prefixed public keys as oct  -  by @lepture (bf664)
• jws: Protect critical JSON headers and b64 mode  -  by @lepture (04cb5)
• jwt: Reject tokens whose exp equals the current time  -  by @carlok and Claude Sonnet 5.5 (e2e3a)
• jwt: Reject NaN and Infinity in exp, nbf and iat  -  by @carlok and Claude Sonnet 5.5 (b8a23)
• jwt: Reject True/False in exp/nbf/iat  -  by @lepture (953e5)
• mypy: Use NotRequired in TypedDict  -  by @lepture (351c1)

    View changes on GitHub

1.7.7

   🐞 Bug Fixes

• Improve typing use  -  by 0bd4c41 [( as u)](https://github.com/authlib/joserfc/commit/ as union)
• jwk: Reject asymmetric public keys in oct imports  -  by @lepture (4fb46)

    View changes on GitHub

1.7.6

   🐞 Bug Fixes

• Validate compact value size before split  -  by @lepture (397e0)
• ci: Restrict default workflow token permissions  -  by @lepture (d060c)
• jwe: Limit additional authenticated data size  -  by @lepture (25e95)
• jwk: Handle KeySet equality with unrelated types  -  by @janmrow in #106 (27d7c)
• jwt: Report correct claim name for invalid iss  -  by @janmrow (eec6d)
• jwt: Require string values for jti claims  -  by @lepture (e93fd)

    View changes on GitHub

1.7.5

   🚀 Features

• Add max_recipients on JWERegistry  -  by @lepture (d6dc8)

   🐞 Bug Fixes

• Ignore unknown kty in KeySet.import_key_set (RFC 7517 §5)  -  by @RalphBragg in #103 (4dcd3)

    View changes on GitHub

1.7.4

   🐞 Bug Fixes

• Prevent verify_general_json bypass empty signatures  -  by @lepture (f409f)
• jwe: Raise DecodeError when encrypted_key is None  -  by @lepture (74be9)

    View changes on GitHub

1.7.3

   🐞 Bug Fixes

• jws: Validate payload size for rfc7797  -  by @lepture (683ca)
• jwt: Add default claims validation for iss, sub and aud  -  by @lepture (76ee6)

    View changes on GitHub

1.7.2

   🐞 Bug Fixes

• Avoid trailing padding for JWTs  -  by @lepture (dc415)

    View changes on GitHub

1.7.1

   🐞 Bug Fixes

• jwe: When decrypt, use the original aad base64 value  -  by @lepture (d6a3d)

    View changes on GitHub

1.6.9

• JWE: use the original base64 aad when decrypt.

Full Changelog: 1.6.8...1.6.9

1.7.0

   🐞 Bug Fixes

• jwk: As_dict, as_pem, as_der export public key by default  -  by @lepture (382b3)
• typing: Update type hints for dropping python 3.9  -  by @lepture (1ddca)
• typing: Use Iterator for _filter_keys_by_parameters return value  -  by @lepture (c1330)

    View changes on GitHub