|
12345678910111213141516171819202122232425262728293031323334353637383940414243444546 |
- # node-http-signature changelog
-
- ## 1.1.1
-
- - Version of dependency `assert-plus` updated: old version was missing
- some license information
- - Corrected examples in `http_signing.md`, added auto-tests to
- automatically validate these examples
-
- ## 1.1.0
-
- - Bump version of `sshpk` dependency, remove peerDependency on it since
- it now supports exchanging objects between multiple versions of itself
- where possible
-
- ## 1.0.2
-
- - Bump min version of `jsprim` dependency, to include fixes for using
- http-signature with `browserify`
-
- ## 1.0.1
-
- - Bump minimum version of `sshpk` dependency, to include fixes for
- whitespace tolerance in key parsing.
-
- ## 1.0.0
-
- - First semver release.
- - #36: Ensure verifySignature does not leak useful timing information
- - #42: Bring the library up to the latest version of the spec (including the
- request-target changes)
- - Support for ECDSA keys and signatures.
- - Now uses `sshpk` for key parsing, validation and conversion.
- - Fixes for #21, #47, #39 and compatibility with node 0.8
-
- ## 0.11.0
-
- - Split up HMAC and Signature verification to avoid vulnerabilities where a
- key intended for use with one can be validated against the other method
- instead.
-
- ## 0.10.2
-
- - Updated versions of most dependencies.
- - Utility functions exported for PEM => SSH-RSA conversion.
- - Improvements to tests and examples.
|