{"push_id":1272947701,"size":44,"distinct_size":44,"ref":"refs/heads/master","head":"3fb794ee9131b9e6d6f0c24e408b05e53025aa79","before":"6fe1a3215143ca357481f9f7695a04947cb73f08","commits":[{"sha":"de817222bc926c29177cb06ca220baa72f67c690","author":{"name":"brentstormpath","email":"ae15fcb3c52622ffa09c7a637efd402081ab21e2@stormpath.com"},"message":"Licensing, links, and Author info added to readme","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/de817222bc926c29177cb06ca220baa72f67c690"},{"sha":"83054a755d6533d2ac143ad066a9309a7d781bf7","author":{"name":"Mitchell Morris","email":"e68d650ff9dde2b647ed14085466590b93f6414a@blackbaud.com"},"message":"allow the injection of a time source","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/83054a755d6533d2ac143ad066a9309a7d781bf7"},{"sha":"1d525e94c687734f78fc4e835bd753995b606927","author":{"name":"brentstormpath","email":"ae15fcb3c52622ffa09c7a637efd402081ab21e2@stormpath.com"},"message":"Merge remote-tracking branch 'upstream/master'","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/1d525e94c687734f78fc4e835bd753995b606927"},{"sha":"a20c92c0954c2e294eca61cc9be77bdcdde3477d","author":{"name":"Mitchell Morris","email":"e68d650ff9dde2b647ed14085466590b93f6414a@blackbaud.com"},"message":"create a new Interface \"Clock\" plus implementations of Clock to exhibit desired behavior","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/a20c92c0954c2e294eca61cc9be77bdcdde3477d"},{"sha":"5613d222ce3758d647290c84c6aeec0d0ff240f0","author":{"name":"brentstormpath","email":"ae15fcb3c52622ffa09c7a637efd402081ab21e2@stormpath.com"},"message":"Updating the JJWT readme to break out the changelog into a dedicated file and add useful links","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/5613d222ce3758d647290c84c6aeec0d0ff240f0"},{"sha":"f1fe04d70cc023d306613da6362c7da598173b16","author":{"name":"brentstormpath","email":"ae15fcb3c52622ffa09c7a637efd402081ab21e2@stormpath.com"},"message":"Fixing a broken link in the readme","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/f1fe04d70cc023d306613da6362c7da598173b16"},{"sha":"312763a00bd87a7683aaed8c866b03390a4b5892","author":{"name":"Dave LeBlanc","email":"9a14b491a33b0ad85fd958d3ace1e2d988bbad4b@gmail.com"},"message":"Made the android dep optional in OSGi\n\nChanged the packaging type to bundle - required\nby the bundle plugin.\n\nUpgraded to the latest version of the maven\nbundle plugin.","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/312763a00bd87a7683aaed8c866b03390a4b5892"},{"sha":"cbf9ff4e64efd463cfa18b14f25f458fae63eb62","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"97: removed openjdk7 from travis build.  Oracle JDK 7 works fine and JDK 7 is end-of-life anyway","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/cbf9ff4e64efd463cfa18b14f25f458fae63eb62"},{"sha":"a5fe1b961bcfa655ead1757047d16d53cccccb5d","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"Merge pull request #98 from jwtk/97-openjdk7\n\nRemoved openjdk7 from travis build.","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/a5fe1b961bcfa655ead1757047d16d53cccccb5d"},{"sha":"76b1263b055c2d8c7b743edc74dfaba236f7099d","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"Merge branch 'master' into 95-osgi","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/76b1263b055c2d8c7b743edc74dfaba236f7099d"},{"sha":"d747f096626e9bf98aa83f0aa6782556e17134a8","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"Merge pull request #99 from jwtk/95-osgi\n\nEnabled OSGi bundle","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/d747f096626e9bf98aa83f0aa6782556e17134a8"},{"sha":"1cb8568664704817e1134627f0325a2f5b39f013","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"upgraded Jackson to 2.7.0","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/1cb8568664704817e1134627f0325a2f5b39f013"},{"sha":"7686d433667aef7bfad8a99622ffe6fa92182ead","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"Merge pull request #102 from jwtk/101-update-jackson\n\nUpgraded Jackson to 2.7.0","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/7686d433667aef7bfad8a99622ffe6fa92182ead"},{"sha":"7201704e94249ded5d34295709e756d862c20c29","author":{"name":"brentstormpath","email":"ae15fcb3c52622ffa09c7a637efd402081ab21e2@stormpath.com"},"message":"Fixing a link and moving the author section down","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/7201704e94249ded5d34295709e756d862c20c29"},{"sha":"42f89d283cea0aff15996de196029f3d47f8cc4c","author":{"name":"brentstormpath","email":"ae15fcb3c52622ffa09c7a637efd402081ab21e2@stormpath.com"},"message":"Moving change log notes back into readme","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/42f89d283cea0aff15996de196029f3d47f8cc4c"},{"sha":"0534120f9ca98d08f9f18b0cdbba524f81bba019","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"Merge pull request #104 from brentstormpath/master\n\nUpdate Readme","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/0534120f9ca98d08f9f18b0cdbba524f81bba019"},{"sha":"5385e0d7d3671b4736c0246475a03c648b1da68a","author":{"name":"Aaron Davidson","email":"0ea57831a6aee87faae8cf48eb3fed040f8dc3de@databricks.com"},"message":"Avoid potentially critical vulnerability in ECDSA signature validation\n\nQuite possible we're missing something here, so please forgive if so. After seeing [this article](https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/) (see \"RSA or HMAC?\" section), we did a quick scan through the JJWT implementation to see if it was vulnerable. While it seems like the RSA check should work, no such check seemed to exist for ECDSA signatures.\r\n\r\nAs a result, it may be possible for users of this library to use `setSigningKey(byte[] key)` while intending to use ECDSA, but have the client alter the algorithm and signature to use HMAC with the public key as the \"secret key\", allowing the client to inject arbitrary payloads.\r\n\r\ncc @thomaso-mirodin","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/5385e0d7d3671b4736c0246475a03c648b1da68a"},{"sha":"707f7bc046b363ac6262f43bdc0885ff04f35f1c","author":{"name":"Aaron Davidson","email":"0ea57831a6aee87faae8cf48eb3fed040f8dc3de@databricks.com"},"message":"Change assert to require hmac","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/707f7bc046b363ac6262f43bdc0885ff04f35f1c"},{"sha":"13d2e8370abacd87989f667767b2d239ccd6a5f7","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"Merge branch 'master' of https://github.com/Blackbaud-MitchellMorris/jjwt into Blackbaud-MitchellMorris-master","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/13d2e8370abacd87989f667767b2d239ccd6a5f7"},{"sha":"72e0e3b23c4f363fd367220945e5549c8f3564d3","author":{"name":"Les Hazlewood","email":"8f764e0a439ee389208057bb244ea18876f2844f@hazlewood.com"},"message":"109: enabled injection of a time source - a 'Clock'","distinct":true,"url":"https://api.github.com/repos/MichaelSims/jjwt/commits/72e0e3b23c4f363fd367220945e5549c8f3564d3"}]}
{"actor":{"display_login":"MichaelSims"}}