Code

Release 2.5#14

Code

Merged

Hannah-PortSwigger merged 70 commits intoPortSwigger:mainPortSwigger/jwt-editor:mainfrom DolphFlynn:mainDolphFlynn/jwt-editor:mainCopy head branch name to clipboardJan 23, 2025

+106,460-1,500

Commits

Commits on Dec 26, 2024

• Limit use of BouncyCastle for JWS signing and verification to ES256K.

  DolphFlynn

  committed
  15d03f0

  Copy full SHA for 15d03f0

• Rename AbstractDialog to OperationDialog and use generics for JWT.

  DolphFlynn

  committed
  5f9088c

  Copy full SHA for 5f9088c

• Create utility method to show dialog and update JWS.

  DolphFlynn

  committed
  3c5d220

  Copy full SHA for 3c5d220

• Move duplicated logic to OperationDialog.

  DolphFlynn

  committed
  2a765b7

  Copy full SHA for 2a765b7

Commits on Dec 30, 2024

• Variable renames.

  DolphFlynn

  committed
  ba380c0

  Copy full SHA for ba380c0

• Merge pull request #79 from DolphFlynn/dialogs

  Show description for e80066e
  DolphFlynn

  authored
  e80066e

  Copy full SHA for e80066e

• Encapsulate EditorView.setMode().

  DolphFlynn

  committed
  46b7ab2

  Copy full SHA for 46b7ab2

• Merge pull request #80 from DolphFlynn/mode

  Show description for 2d16bd7
  DolphFlynn

  authored
  2d16bd7

  Copy full SHA for 2d16bd7

• Rename SignDialog to SigningDialog.

  DolphFlynn

  committed
  70dff0c

  Copy full SHA for 70dff0c

• Remember last used key within SigningDialog.

  DolphFlynn

  committed
  8add11f

  Copy full SHA for 8add11f

• Merge pull request #81 from DolphFlynn/remember_last_key

  Show description for 27eee3a
  DolphFlynn

  authored
  27eee3a

  Copy full SHA for 27eee3a

Commits on Dec 31, 2024

• Add method to retrieve algorithm from Header.

  DolphFlynn

  committed
  7aa1ab3

  Copy full SHA for 7aa1ab3

• Add JWT secrets list from https://github.com/wallarm/jwt-secrets.

  DolphFlynn

  committed
  352cf53

  Copy full SHA for 352cf53

• Add WeakSecrets class wrapping jwt.secrets.list.txt.

  DolphFlynn

  committed
  9bdb464

  Copy full SHA for 9bdb464

• Add Weak HMAC secret attack menu item.

  DolphFlynn

  committed
  a0c7dfd

  Copy full SHA for a0c7dfd

Commits on Jan 1, 2025

• Add Weak HMAC secret attack dialog.

  DolphFlynn

  committed
  2f094e2

  Copy full SHA for 2f094e2

• Add ability to brute force HMAC signatures using JWT weak secrets list.

  DolphFlynn

  committed
  33f764e

  Copy full SHA for 33f764e

• Update README.

  DolphFlynn

  committed
  1fa506d

  Copy full SHA for 1fa506d

• Remove superfluous newline.

  DolphFlynn

  committed
  3af808b

  Copy full SHA for 3af808b

• Merge pull request #82 from DolphFlynn/brute

  Show description for 6be33cd
  DolphFlynn

  authored
  6be33cd

  Copy full SHA for 6be33cd

• Delete unused rows within KeysView.

  DolphFlynn

  committed
  60e862a

  Copy full SHA for 60e862a

• Add button and dialog to import JWK sets.

  DolphFlynn

  committed
  bde6aeb

  Copy full SHA for bde6aeb

Commits on Jan 3, 2025

• Parse JWKSet and add to keys.

  DolphFlynn

  committed
  1eb22f3

  Copy full SHA for 1eb22f3

• Merge pull request #83 from DolphFlynn/import

  Show description for 8aeb8a0
  DolphFlynn

  authored
  8aeb8a0

  Copy full SHA for 8aeb8a0

Commits on Jan 4, 2025

• Merge pull request #84 from DolphFlynn/bc

  Show description for 7b3451b
  DolphFlynn

  authored
  7b3451b

  Copy full SHA for 7b3451b

• Ensure that keys with duplicate kid are not overwritten after user cancels warning dialog.

  DolphFlynn

  committed
  f46b77a

  Copy full SHA for f46b77a

• Merge pull request #85 from DolphFlynn/cancel_bug

  Show description for dd6155c
  DolphFlynn

  authored
  dd6155c

  Copy full SHA for dd6155c

• Update setup-gradle action.

  DolphFlynn

  committed
  3a237a0

  Copy full SHA for 3a237a0

• Update workflow for setup-gradle@4.

  DolphFlynn

  committed
  a256caa

  Copy full SHA for a256caa

• Merge pull request #86 from DolphFlynn/actions

  Show description for c4fe5f6
  DolphFlynn

  authored
  c4fe5f6

  Copy full SHA for c4fe5f6

Commits on Jan 5, 2025

• Remove redundant method hasPem() from Key.

  DolphFlynn

  committed
  c25a398

  Copy full SHA for c25a398

• Ensure that keys used for HMAC key confusion are public and can be converted to PEM.

  DolphFlynn

  committed
  1609322

  Copy full SHA for 1609322

• Merge pull request #87 from DolphFlynn/keys_bug

  Show description for b277a76
  DolphFlynn

  authored
  b277a76

  Copy full SHA for b277a76

Commits on Jan 7, 2025

• Remember last used key within KeyConfusionAttackDialog.

  DolphFlynn

  committed
  5a089d1

  Copy full SHA for 5a089d1

• Merge pull request #88 from DolphFlynn/last_confusion_key

  Show description for 0998f7c
  DolphFlynn

  authored
  0998f7c

  Copy full SHA for 0998f7c

Commits on Jan 8, 2025

• Enable dependabot.

  DolphFlynn

  committed
  4ab9e70

  Copy full SHA for 4ab9e70

• Merge pull request #89 from DolphFlynn/dependabot

  Show description for cdb53e7
  DolphFlynn

  authored
  cdb53e7

  Copy full SHA for cdb53e7

• Bump org.json:json from 20240303 to 20250107

  Show description for 6adb97c
  dependabot[bot]

  authored
  6adb97c

  Copy full SHA for 6adb97c

• Bump org.junit.jupiter:junit-jupiter from 5.11.2 to 5.11.4

  Show description for ae5215c
  dependabot[bot]

  authored
  ae5215c

  Copy full SHA for ae5215c

• Merge pull request #94 from DolphFlynn/dependabot/gradle/org.junit.jupiter-junit-jupiter-5.11.4

  Show description for 884d2b6
  DolphFlynn

  authored
  884d2b6

  Copy full SHA for 884d2b6

• Merge pull request #92 from DolphFlynn/dependabot/gradle/org.json-json-20250107

  Show description for 52bc0ba
  DolphFlynn

  authored
  52bc0ba

  Copy full SHA for 52bc0ba

• Bump org.assertj:assertj-core from 3.26.3 to 3.27.2

  Show description for 699a00f
  dependabot[bot]

  authored
  699a00f

  Copy full SHA for 699a00f

• Merge pull request #91 from DolphFlynn/dependabot/gradle/org.assertj-assertj-core-3.27.2

  Show description for a07f609
  DolphFlynn

  authored
  a07f609

  Copy full SHA for a07f609

• Bump org.mockito:mockito-core from 5.14.1 to 5.15.2

  Show description for fd5b3a1
  dependabot[bot]

  authored
  fd5b3a1

  Copy full SHA for fd5b3a1

• Merge pull request #90 from DolphFlynn/dependabot/gradle/org.mockito-mockito-core-5.15.2

  Show description for d0d7836
  DolphFlynn

  authored
  d0d7836

  Copy full SHA for d0d7836

• Configure dependabot to ignore com.nimbusds:nimbus-jose-jwt.

  DolphFlynn

  committed
  b74ce4c

  Copy full SHA for b74ce4c

• Merge pull request #95 from DolphFlynn/dependabot

  Show description for af8abc1
  DolphFlynn

  authored
  af8abc1

  Copy full SHA for af8abc1

Commits on Jan 10, 2025

• Add support for high-precision decimal TimeClaims

  Nirusu

  committed
  2681c4d

  Copy full SHA for 2681c4d

• Add tests for high-precision decimal TimeClaims

  Nirusu

  committed
  6e09489

  Copy full SHA for 6e09489

Commits on Jan 11, 2025

• Add exception handling for BigDecimal parsing

  Nirusu

  committed
  9e7366b

  Copy full SHA for 9e7366b

• Convert operation dialogs to panels and use generic dialog.

  DolphFlynn

  committed
  ac2d7c9

  Copy full SHA for ac2d7c9

• Merge pull request #96 from Nirusu/decimal-timeclaim

  Show description for 8c57c37
  DolphFlynn

  authored
  8c57c37

  Copy full SHA for 8c57c37

• Merge pull request #97 from DolphFlynn/dialogs

  Show description for 19bf5a9
  DolphFlynn

  authored
  19bf5a9

  Copy full SHA for 19bf5a9

• Fix dimension in Embedded JWK dialog.

  DolphFlynn

  committed
  61f0f7a

  Copy full SHA for 61f0f7a

• Update README.

  DolphFlynn

  committed
  329912b

  Copy full SHA for 329912b

• Merge pull request #98 from DolphFlynn/readme

  Show description for 56f0d40
  DolphFlynn

  authored
  56f0d40

  Copy full SHA for 56f0d40

• Update README.md

  DolphFlynn

  authored
  4ffcc51

  Copy full SHA for 4ffcc51

• Merge pull request #99 from DolphFlynn/jwk_dialog

  Show description for 6227a4d
  DolphFlynn

  authored
  6227a4d

  Copy full SHA for 6227a4d

• Merge pull request #100 from DolphFlynn/DolphFlynn-patch-1

  Show description for 0fbbdb6
  DolphFlynn

  authored
  0fbbdb6

  Copy full SHA for 0fbbdb6

Commits on Jan 12, 2025

• Extract EditorViewAttackMenuFactory.

  DolphFlynn

  committed
  ee11f9c

  Copy full SHA for ee11f9c

• Add mnemonic to OK and Cancel dialog options.

  DolphFlynn

  committed
  337f7f9

  Copy full SHA for 337f7f9

• Merge pull request #101 from DolphFlynn/op

  Show description for a985b3d
  DolphFlynn

  authored
  a985b3d

  Copy full SHA for a985b3d

• Introduce Operation.

  DolphFlynn

  committed
  e64aca2

  Copy full SHA for e64aca2

• Merge pull request #102 from DolphFlynn/ref2

  Show description for fc12bfd
  DolphFlynn

  authored
  fc12bfd

  Copy full SHA for fc12bfd

• Rename view Operation to Attack.

  DolphFlynn

  committed
  d51df05

  Copy full SHA for d51df05

• Merge pull request #103 from DolphFlynn/rename

  Show description for 5d02e46
  DolphFlynn

  authored
  5d02e46

  Copy full SHA for 5d02e46

Commits on Jan 13, 2025

• Release 2.5.

  DolphFlynn

  committed
  3d904da

  Copy full SHA for 3d904da

• Merge pull request #104 from DolphFlynn/release

  Show description for ea86910
  DolphFlynn

  authored
  ea86910

  Copy full SHA for ea86910

Commits on Jan 20, 2025

• Bump org.assertj:assertj-core from 3.27.2 to 3.27.3

  Show description for e196798
  dependabot[bot]

  authored
  e196798

  Copy full SHA for e196798

• Merge pull request #105 from DolphFlynn/dependabot/gradle/org.assertj-assertj-core-3.27.3

  Show description for 3b1140a
  DolphFlynn

  authored
  3b1140a

  Copy full SHA for 3b1140a