search

coreos / go-oidc

A Go OpenID Connect client.
Apache License 2.0
1.99k stars 401 forks source link

update go-jose to v4 #421

Closed ericchiang closed 8 months ago

ericchiang commented 8 months ago

The biggest change between v3 and v4 is ParseSigned now requires a set of allow listed algorithms. go-oidc was already doing this ad-hoc, so the change is an improvement over the current logic.

Fixes #417 Fixes #356