search

coreos / go-oidc

A Go OpenID Connect client.
Apache License 2.0
1.92k stars 393 forks source link

update go-jose to v4 #421

Closed ericchiang closed 5 months ago

ericchiang commented 5 months ago

The biggest change between v3 and v4 is ParseSigned now requires a set of allow listed algorithms. go-oidc was already doing this ad-hoc, so the change is an improvement over the current logic.

Fixes #417 Fixes #356