tj node-cookie-signature issues

tj / node-cookie-signature

cookie signing

MIT License

178 stars 34 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

feat: make lib Web Crypto compliant

#50 MichaelDeBoey closed 10 months ago
4
Use `crypto.webcrypto.*` functions to be compliant with the Web Crypto spec

#49 MichaelDeBoey opened 1 year ago
6
Having 1.2.1 updates tells me 1.0.7

#48 NormandoHall closed 1 year ago
3
Add Buffer as supported secret type

#47 FadhiliNjagi closed 1 year ago
6
Add compatibility with older node versions

#46 FadhiliNjagi closed 1 year ago
2
Compatibility with older Node versions

#45 FadhiliNjagi closed 1 year ago
6
The secret can be any CipherKey, not just a String.

#44 jyasskin closed 1 year ago
4
"TypeError: crypto.timingSafeEqual is not a function" is occur in Node.js v12.19.0

#43 hiroshikm closed 1 year ago
2
Don't require "secret" key to be a string

#42 natevw closed 2 years ago
0
Avoid accepting otherwise-valid cookies when they have extra garbage appended

#41 natevw closed 2 years ago
1
Unexpected unsign passing on a random signature postfix

#40 muturgan closed 2 years ago
2
Key Rotation

#38 TLKG closed 3 years ago
3
[Bug] Unsigning fails when cookie value was stringified with JSON.stringify

#37 oelbaga closed 2 years ago
2
Maintenance of this library

#36 natevw opened 3 years ago
12
Export sign function

#35 daveisfera closed 3 years ago
2
Question - Base64 and removed chars

#34 ncou closed 3 years ago
3
Allow Buffer as `key`

#33 webmaster777 closed 2 years ago
2
Browser implementation

#32 franciscop closed 4 years ago
3
Fix #30 Removed License text from Read me and added it as a separate file.

#31 ranadewa closed 5 years ago
1
Adding License text on a separate file.

#30 ranadewa closed 5 years ago
2
Naming conventions

#29 dubhcait closed 5 years ago
1
Who is the copyright holder?

#28 bduranc closed 6 years ago
2
Snyk has (incorrectly?) marked versions <1.1.0 as vulunerable

#27 dougwilson closed 6 years ago
12
Improve some variable naming (internal enhancement)

#26 natevw closed 2 years ago
2
Use the tsscmp module for older Node.js compatibility

#25 dougwilson closed 6 years ago
7
Use crypto.timingSafeEqual for unsign

#24 jodevsa closed 6 years ago
12
Remove redundant hashing step

#23 jodevsa closed 6 years ago
1
Change `sha1` to `sha256` inside `unsign` method

#22 rcalfredson closed 6 years ago
3
Weak HMAC comparison

#21 ret2kw closed 7 years ago
4
Is comparing signatures better than using SHA1?

#20 jtlapp closed 8 years ago
4
Why "sha1(mac) == sha1(val)" ?

#19 lyenliang closed 9 years ago
3
Please tags when release new versions

#18 LeoIannacone closed 9 years ago
2
Fix #15: use sha1 hashes for double signing

#17 tenbits closed 10 years ago
4
Fix #15: use sha1 hashes for double signing

#16 tenbits closed 10 years ago
0
Useless signing?

#15 tenbits closed 10 years ago
17
Fix for timing attacks on MAC verification.

#14 natevw closed 10 years ago
23
adding repository field to package.json

#13 malixsys closed 10 years ago
5
Typo in test

#12 algesten closed 10 years ago
1
replacements

#11 gjohnson closed 10 years ago
1
Add repository field to readme

#10 ForbesLindesay closed 10 years ago
4
Added `repository` to package.json

#9 redchair123 closed 10 years ago
1
Suppress NPM warning by adding repo to package.json

#8 daltomania closed 11 years ago
1
add repository property to package.json to get rid of npm warning during install

#7 ralphtheninja closed 10 years ago
0
Added repository field in package.json

#6 sasidhar closed 10 years ago
1
Test sign with same value and different signature.

#5 kapouer closed 10 years ago
1
Travis CI Tests

#4 sebs closed 9 years ago
3
It appears backwards compat was broken

#3 JohnMcLear closed 11 years ago
1
Fixes for Timing and Brute Force Attacks.

#2 Bren2010 closed 11 years ago
19
the value type of cookie cannot be integer?

#1 bibig closed 9 years ago
3