From 17d9a0008c35e2dda5bb7f9eb2aef6dc99f13728 Mon Sep 17 00:00:00 2001 From: richy Date: Tue, 6 Oct 2015 10:12:08 +0100 Subject: [PATCH] Jose 1.0.0 release. --- CHANGES | 6 ++++++ setup.py | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 1b76522..82bd801 100644 --- a/CHANGES +++ b/CHANGES @@ -1,6 +1,12 @@ CHANGES ======= +1.0.0 (2015-10-06) +------------------ +- Fixed bug in authentication tag computation (patch contributed by jaimeperez) + +Important: This is a backwards incompatible change, in that tokens produced in this version will not be decipherable by tokens < 1.0.0. The jwe hash string used was changed to use an empty string rather than "." to fall in line with https://tools.ietf.org/html/rfc7518#section-5.2.2.1 + 0.3.0 (2015-04-10) ------------------ - Fixed critical JWT vulnerability (patch contributed by yuriikonovaliuk) diff --git a/setup.py b/setup.py index 68d8773..1cf1b23 100644 --- a/setup.py +++ b/setup.py @@ -43,7 +43,7 @@ def finalize_package_data(self): pkg_name = '-'.join((pyver.replace('.', ''), pkg_name)) setup(name=pkg_name, - version='0.3.0', + version='1.0.0', author='Demian Brecht', author_email='dbrecht@demonware.net', py_modules=['jose'],