# Change Log All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Support devise 5.0
- Fix properly support for
token_header&issuerconfig options
- Add support for
token_headerconfig - Add support for
issuerconfig
- Add support for rotation_secret
- Enable support for asymmetric algorithms
- FIX: "No verification key available" on token decode
- Fix compatibility with dry-configurable 0.13
- Fix behaviour on code reload
- Support ruby 3.0 and deprecate ruby 2.5
- Fix compatibility with last version of dry-configurable
- Replace whitelist/blacklist terminology with allowlist/denylist
- Update warden-jwt_auth dependency to v0.4.0 so that now it is possible to configure algorithm.
- Update dependencies.
- Fix test helper to persist whitelisted tokens.
- Use
primary_keyinstead ofidto fetch resource.
- Work with more than one
sign_out_viaconfigured
- Update
warden-jwt_authdependency to reenable JWT scopes being stored to the session and inform the user.
- Update
warden-jwt_authdependency to allow a JWT scope to be fetched from session in a standard AJAX request
- Do not crash for consecutive revocations of same token in blacklist & whitelist strategies
- Update
warden-jwt_authdependency to allow a JWT scope to be fetched from session in a html request
- Added a test helper to authenticate request headers
- Update
warden-jwt_authdependency to ensure JWT scopes are not fetched from session
- Added whitelist strategy
- Update
warden-jwt_authdependency
- Configure classes as strings to avoid problems with Rails STI
- Return
niland not raise when user is not found in model
- Update
warden-jwt_authdependency
- Do not generate double slash paths when one segment is blank
- Store
expin the blacklist strategy to easy cleaning tasks
- Allow configuring request formats to take into account through
request_formatsconfiguration option
- Ignore expired token revocation
- Dispatch token on sign up
- Speed up initialization
- Do not depend on assumed helpers to build default paths
- Use
sign_out_viadevise option to set revocation request methods - Take routes with scopes into account
- Request method configuration for Rails < 5