go/echo
go/echo
1
0
Fork 0
mirror of https://github.com/labstack/echo.git synced 2024-12-22 20:06:21 +02:00
Code Issues Releases Activity
1,574 Commits 6 Branches 125 Tags 12 MiB
fix_branch_4_6_2
Commit Graph

28 Commits

Author SHA1 Message Date
Philipp Thun
499097e061 Ignore case of auth scheme in request header 
Some clients send an authorization header containing the "bearer"
keyword in lower case. This led to echo responding with "missing or
malformed jwt".

Request.BasicAuth (net/http) ignores the basic auth scheme's case since
a while: https://go-review.googlesource.com/c/go/+/111516/
 2021-08-10 20:32:01 +03:00
toimtoimtoim
647af2acec JWT middleware has been changed from github.com/dgrijalva/jwt-go to github.com/golang-jwt/jwt` due former library being unmaintained and having security 
issues.
NOTE: `golang-jwt/jwt` now only supports last 2 Go releases. So 1.15+
For detailed information please read https://github.com/labstack/echo/discussions/1940
 2021-08-01 23:20:08 +03:00
toimtoimtoim
1ac4a8f3d0 Adds JWTConfig.ParseTokenFunc to JWT middleware to allow different libraries implementing JWT parsing. 2021-06-13 20:33:08 +03:00
Kaan Karakaya
de3f87eb23
Jwt lookup from multiple sources (#1845) 
* Jwt lookup from multiple sources
 2021-05-08 22:30:06 +03:00
antonindrawan
76f186ad3b
feat(jwt): make KeyFunc public in JWT middleware (#1756) 
* feat(jwt): make KeyFunc public in JWT middleware

It allows a user-defined function to supply the key for a token
verification.
 2021-05-08 22:19:24 +03:00
rkfg
2152e4e872 Support form fields in jwt middleware 2020-12-01 09:51:20 +03:00
178inaba
269dfcc9dd
Set maxParam with SetParamNames (#1535) 
* Set maxParam with SetParamNames

Fixes #1492

* Revert go.mod
 2020-03-30 12:28:07 -07:00
Dmitry Kutakov
712b5e46c5 format code (gofmt + trim trailing space) (#1452) 2020-01-25 09:48:53 -08:00
J. David Lowe
8d7f05e533 round-trip paramValues without exploding (#1463) 2020-01-23 18:32:17 -08:00
ozburo
6b9408d1d1 Added param:<name> lookup option to JWT Middleware (#1296) 
* Added  lookup option to JWT Middleware

* Added param:<name> lookup option to JWT Middleware
 2019-06-09 09:49:52 -07:00
Das Jott
e2671fe963 Provide possibility to use key ids (#1289) 
* provide possibility to use key ids
* kid tests
 2019-05-17 07:45:49 -07:00
Alex Ungur
6d9e043284 Introduced Go module support as v4, removed obsolete CloseNotifier() mechanism 
This reintroduces support for Go modules, as v4.

CloseNotifier() is removed as it has been obsoleted, see https://golang.org/doc/go1.11#net/http

It was already NOT working (not sending signals) as of 1.11 the functionality was gone, we merely
deleted the functions that exposed it. If anyone still relies on it they should migrate to using
`c.Request().Context().Done()` instead.

Closes #1268, #1255
 2019-01-30 16:11:42 +02:00
Emir Ribić
c8fd197fa8 Replace http constants with stdlib ones, i.e.: http.MethodGet instead of echo.GET (#1205) 2018-10-14 20:46:58 +05:30
Paul Tyng
a5c75b002d Fix issue with JWT race (#968) 2017-07-14 11:55:19 -07:00
Vishal Rana
29fd5831ff Fixed test 
Signed-off-by: Vishal Rana <vr@labstack.com>
 2017-02-22 15:57:12 -08:00
Vishal Rana
f5f75122ba fixed #750 
Signed-off-by: Vishal Rana <vr@labstack.com>
 2016-12-19 11:43:24 -08:00
Vikram Sreekumar
23176c639e jwt-authscheme: support for custom jwt auth scheme 
- added "AuthScheme" in the JWTConfig and set default value to
	  "Bearer".
	- added test case for validating JWT Auth with a custom auth
	  scheme.
 2016-12-19 11:39:31 -08:00
Vishal Rana
2aec0353f5 First commit to v3, #665 
Signed-off-by: Vishal Rana <vr@labstack.com>
 2016-09-22 22:56:00 -07:00
Vishal Rana
86ae297e23 New redirect middleware 
Signed-off-by: Vishal Rana <vr@labstack.com>
 2016-08-27 13:03:40 -07:00
Vishal Rana
bc7b992d23 Dropped custom error handler for jwt, closes #589, closes ##591 
Signed-off-by: Vishal Rana <vr@labstack.com>
 2016-08-27 10:54:51 -07:00
Vishal Rana
87dbea59f7 Minor refactor and format 
Signed-off-by: Vishal Rana <vr@labstack.com>
 2016-08-20 09:35:19 -07:00
matcornic
2557d33c4b Closes #631 2016-08-20 17:59:36 +02:00
Przemek Komosa
a8b48af608 Read JWT from cookie 
Note: writing token to cookie is out of scope of this middleware
(exactly as in other reading methods).
 2016-07-02 11:26:05 +02:00
Przemek Komosa
ae09482493 Add HandleEmptyToken to JWT middleware 
Now it is possible to add custom handler for missing JWT.
 2016-07-02 00:55:11 +02:00
Przemek Komosa
bb6baa2088 Add JWT tests for _query_ method 2016-07-02 00:28:56 +02:00
Przemek Komosa
4b6811e0cf Refactor JWT tests to table based 
Now state isn't shared.
 2016-07-02 00:28:56 +02:00
Vishal Rana
fbcdf70c52 Update JWT lib to v3 
Signed-off-by: Vishal Rana <vr@labstack.com>
 2016-06-16 14:40:43 -07:00
Vishal Rana
e943ed24be JWTAuth to JWT 
Signed-off-by: Vishal Rana <vr@labstack.com>
 2016-05-07 07:45:03 -07:00