v1.7.1

fixes issues where platforms don't have OpenSSL 3+ available

v1.7.0

1. JWT additions:
   • new algorithms: RSA-PSS (PS256, PS384, PS512), ES256K, EdDSA - crv: Ed25519
   • adds typ verification
2. Adds JWKS support

v1.6.1

bumps bindata dependency

v1.6.0

adds optional dynamic key selection

# You may dynamically decide the key by passing a block to the decode function
# the algorithm is optional, you can omit it to use algorithm defined in the header
payload, header = JWT.decode(token, JWT::Algorithm::HS256) do |header, payload|
  "the key"
end

v1.5.1

adds crystal version supported in shard.yml

v1.5.0

adds crystal 0.36.0 support

v1.4.2

use .final instead of .digest related to changes in crystal-lang/crystal#8426
thanks @bcardiff

v1.4.1

• improve base64 encoding performance #30
• prevent timing attacks on HMAC signatures #31

thanks @jamescook

v1.4.0: feat: don't cast the JSON payload unless validation is required

payload decoding now returns a JSON::Any structure for the body instead of a Hash(String,JSON::Any)
this allows for more flexible playload contents if validation is not required.

v1.3.1: fix: provide an explicit error for an invalid payload

fixes compiler warnings
improves error/exception feedback