Release Candidate 1

Upgrades to Swift 5.2.

Release candidates represent the final shift toward focusing on bug fixes and documentation. Breaking changes will only be accepted for critical issues. We expect a final release of this package shortly after Swift 5.2's release date.

Beta 3

This patch was authored and released by @gwynne.

• Update OS version requirement for compatibility with latest Vapor beta.
• Major beta version bumped due to the OS version requirement being a breaking change. No changes have been made to JWT itself.

Adds JWT validation for Apple and Google

Allows for simple validation of Sign in with Apple or google. In your routes, you can now do this:

public func registerFromSignInWithApple(req: Request) throws -> EventLoopFuture<User> {
    req.jwt.apple
        .verify(applicationIdentifier: "com.whoever.myapp")
        .map { (token: AppleIdentityToken) in
            let uniqueUserID = token.subject.value

            // Create the user in the database

            return user
    }
}

Add JWKSCache helper for storing JWKS

Provides a way that servers can download JWKS files in response to HTTP requests such that only one request will ever be performing a download at a time. If the remote server provides caching headers this ensures the downloads are cached appropriately.

final class RouteController {
    let apple: JWKSCache

    init(app: Application) {
        apple = .init(keyURL: "https://appleid.apple.com/auth/keys", client: app.client)
    }

    func signIn(_ req: Request) throws -> EventLoopFuture<Void> {
        apple.keys(on: req).flatMap { jwks in
            guard let key = jwks.find(identifier: "AIDOPK1", type: .rsa) else {
                return req.eventLoop.makeFailedFuture(Abort(.internalServerError))
            }

            // Use the key here
        }
    }
}

JWT 4.0.0 Beta 2

This package is now a Vapor + JWTKit integration.

import JWT
import Vapor

try app.jwt.signers.use(.es512(key: .generate()))

app.post("login") { req -> LoginResponse in
    let credentials = try req.content.decode(LoginCredentials.self)
    return try LoginResponse(
        token: req.jwt.sign(User(name: credentials.name))
    )
}

app.get("me") { req -> String in
    try req.jwt.verify(as: User.self).name
}

JWT 3.1.1

• Fixed warnings about public access modifier being redundant. (#108)

JWT 3.1.0

• Adds JWK signer support. (#106)

let json = """
{"kty":"RSA", ...}
"""
let signer = try JWTSigner.jwk(key: json)

4.0.0 Alpha 1.3

• Fixed an intermittent verification failure with ECDSA signed tokens. (#103, #104)

JWTKit 4.0.0 Alpha 1.2

• Fixed ECDSA signature encoding to follow spec. (#100, #102)

JWTKit 4.0.0 Alpha 1.1

Fixed:

• Added jwtkit_ namespace to OpenSSL shim methods to avoid clashes (#101)