head	1.13;
access;
symbols
	pkgsrc-2026Q3:1.13.0.2
	pkgsrc-2026Q3-base:1.13
	pkgsrc-2026Q2:1.11.0.2
	pkgsrc-2026Q2-base:1.11
	pkgsrc-2026Q1:1.9.0.2
	pkgsrc-2026Q1-base:1.9
	pkgsrc-2025Q4:1.8.0.2
	pkgsrc-2025Q4-base:1.8
	pkgsrc-2025Q3:1.7.0.2
	pkgsrc-2025Q3-base:1.7
	pkgsrc-2025Q2:1.5.0.2
	pkgsrc-2025Q2-base:1.5
	pkgsrc-2025Q1:1.4.0.2
	pkgsrc-2025Q1-base:1.4
	pkgsrc-2024Q4:1.1.0.4
	pkgsrc-2024Q4-base:1.1
	pkgsrc-2024Q3:1.1.0.2
	pkgsrc-2024Q3-base:1.1;
locks; strict;
comment	@# @;


1.13
date	2026.08.23.07.01.45;	author wiz;	state Exp;
branches;
next	1.12;
commitid	7LUAAF9159XulJSG;

1.12
date	2026.07.03.11.31.45;	author adam;	state Exp;
branches;
next	1.11;
commitid	mU69ycAd94aFtcMG;

1.11
date	2026.05.17.06.52.11;	author wiz;	state Exp;
branches;
next	1.10;
commitid	7Io5LKeQXnUyr8GG;

1.10
date	2026.05.05.04.28.44;	author adam;	state Exp;
branches;
next	1.9;
commitid	T926URHAlowf2AEG;

1.9
date	2026.03.11.11.03.01;	author adam;	state Exp;
branches;
next	1.8;
commitid	ph4hiFpsALz7ZxxG;

1.8
date	2025.11.12.07.32.12;	author adam;	state Exp;
branches;
next	1.7;
commitid	r2skV9rOFgRVDeiG;

1.7
date	2025.09.05.07.47.10;	author wiz;	state Exp;
branches;
next	1.6;
commitid	4oR7s8ezJGsDUu9G;

1.6
date	2025.09.01.11.29.06;	author adam;	state Exp;
branches;
next	1.5;
commitid	WXlqIGpAx0wHg09G;

1.5
date	2025.04.01.08.28.54;	author adam;	state Exp;
branches;
next	1.4;
commitid	DWTA9e6DeBSMbkPF;

1.4
date	2025.03.04.08.59.07;	author wiz;	state Exp;
branches;
next	1.3;
commitid	evbUW5LUeZc1gJLF;

1.3
date	2025.02.21.16.20.50;	author adam;	state Exp;
branches;
next	1.2;
commitid	37xbiWzQVNyk3mKF;

1.2
date	2025.01.29.18.17.24;	author adam;	state Exp;
branches;
next	1.1;
commitid	JjYJAGz4UOZdrpHF;

1.1
date	2024.09.13.19.35.15;	author adam;	state Exp;
branches;
next	;
commitid	KIcGOjAvEXOXiGpF;


desc
@@


1.13
log
@libjwt: fix PLIST for doxygen 1.18 and depend on it

Bump PKGREVISION.
@
text
@# $NetBSD: Makefile,v 1.12 2026/07/03 11:31:45 adam Exp $

DISTNAME=	libjwt-3.6.1
PKGREVISION=	1
CATEGORIES=	security
MASTER_SITES=	${MASTER_SITE_GITHUB:=benmcollins/}
GITHUB_TAG=	v${PKGVERSION_NOREV}

MAINTAINER=	pkgsrc-users@@NetBSD.org
HOMEPAGE=	https://github.com/benmcollins/libjwt
COMMENT=	JWT C library
LICENSE=	mpl-2.0

TOOL_DEPENDS+=	doxygen>=1.18:../../devel/doxygen

USE_LANGUAGES=		c c++
USE_TOOLS+=		bash pkg-config
CMAKE_CONFIGURE_ARGS+=	-DBUILD_SHARED_LIBS=ON
CMAKE_CONFIGURE_ARGS+=	-DWITH_GNUTLS=OFF

TEST_ENV+=	LD_LIBRARY_PATH=${WRKSRC}/${CMAKE_BUILD_DIR}
# For Darwin
TEST_ENV+=	DYLD_LIBRARY_PATH=${WRKSRC}/${CMAKE_BUILD_DIR}
TEST_TARGET=	test

SUBST_CLASSES+=		bashpath
SUBST_STAGE.bashpath=	pre-configure
SUBST_MESSAGE.bashpath=	Fixing path to bash.
SUBST_FILES.bashpath=	CMakeLists.txt
SUBST_SED.bashpath=	-e 's,/bin/bash,${BASH},g'

# for tests
.include "../../devel/check/buildlink3.mk"
.include "../../devel/cmake/build.mk"
BUILDLINK_API_DEPENDS.openssl+=	openssl>=3
.include "../../security/openssl/buildlink3.mk"
.include "../../textproc/jansson/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"
@


1.12
log
@libjwt: updated to 3.6.1

LibJWT 3.6.1 is a small test-portability patch release.

The in-process HTTP server used by the cached-JWKS test cast write() to (void) to ignore its result. glibc marks write() warn_unused_result, and the (void) cast does not suppress that warning on newer glibc, so the -Werror test build failed. The result is now asserted with ck_assert_int_gt(write(...), 0).

This is ABI-compatible with 3.6.0: no library source changed, so the exported symbol set is identical and per the libtool rules only the SONAME revision advances (18:0:4 → 18:1:4). The SONAME stays libjwt.so.14 and existing binaries keep working.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2026/05/17 06:52:11 wiz Exp $
d4 1
d14 1
a14 1
TOOL_DEPENDS+=	doxygen>=1.17:../../devel/doxygen
@


1.11
log
@libjwt: fix PLIST for doxygen 1.17
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2026/05/05 04:28:44 adam Exp $
d3 1
a3 2
DISTNAME=	libjwt-3.3.3
PKGREVISION=	1
@


1.10
log
@libjwt: updated to 3.3.3

3.3.3
Bug fixes
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2026/03/11 11:03:01 adam Exp $
d4 1
d14 1
a14 1
TOOL_DEPENDS+=	doxygen>0:../../devel/doxygen
@


1.9
log
@libjwt: updated to 3.3.2

3.3.2

Patch release to fix symbol visibility for the JSON abstraction layer.

Build fix: Mark all JSON abstraction functions with JWT_NO_EXPORT to prevent them from being exported in the shared library's public symbol table. These are internal implementation details of the JSON backend abstraction (Jansson/json-c) and should not be visible to library consumers.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2025/11/12 07:32:12 adam Exp $
d3 1
a3 1
DISTNAME=	libjwt-3.3.2
@


1.8
log
@libjwt: updated to 3.2.3

3.2.3

Fix case-sensitive check for Content-Length
jwt-cli.bats: Better comparison for all.json
doxygen: Updates for cleaner gen of docs
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2025/09/05 07:47:10 wiz Exp $
d3 1
a3 1
DISTNAME=	libjwt-3.2.3
d6 1
a6 2
GITHUB_RELEASE=	v${PKGVERSION_NOREV}
EXTRACT_SUFX=	.tar.xz
@


1.7
log
@libjwt: bash also needed for building
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2025/09/01 11:29:06 adam Exp $
d3 1
a3 1
DISTNAME=	libjwt-3.2.2
d14 2
@


1.6
log
@libjwt: updated to 3.2.2

3.2.2
Various small fixes
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2025/04/01 08:28:54 adam Exp $
d15 1
a15 1
USE_TOOLS+=		bash:test pkg-config
@


1.5
log
@libjwt: updated to 3.2.1

3.2.1
Memory leak fixes
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2025/03/04 08:59:07 wiz Exp $
d3 1
a3 1
DISTNAME=	libjwt-3.2.1
@


1.4
log
@libjwt: requires openssl 3
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2025/02/21 16:20:50 adam Exp $
d3 1
a3 1
DISTNAME=	libjwt-3.2.0
a13 2
#EXTRACT_USING=	gtar # Cannot restore extended attributes

@


1.3
log
@libjwt: updated to 3.2.0

3.2.0
libcurl for jwks and other things

3.1.0
Windows Build and a few fixes + coverage

3.0.0
A new way
This is a major overhaul of LibJWT. The previous version was clumsy in that a jwt_t object could be used for creating a new token, or be the result of verifying. The ambiguity led to a lot of possible errors.

The key handling was not very well done and was confusing.

The new methods has a factory paradigm in that you create either a builder or checker object, configure it for your purposes, and then either generate tokens (builder) or verify tokens (checker) based on the rules you've established. This means you don't have to create an instance for every time you want to perform one of these actions.

One of the other new features is a complete JWK and JWKS backend for keys. It is now the only method with which you can load and use keys in LibJWT. There are command line tools for converting PEM type keys into JWK(S) JSON files (and back again).

There are also two convenient command line tools for generating and verifying JWT tokens.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2025/01/29 18:17:24 adam Exp $
d35 1
@


1.2
log
@libjwt: updated to 2.1.1

2.1.1

jwt_decode_2(): Security vulnerability

This function had faulty logic based on some assumptions that it could trust the JWT in that if it was alg:none, it would not run the callback.

The assumption would allow an attacker to modify the JWT header and body and trick the function into returning without having retrieved a key from the cb, meaning no verification of the signature was done, and it retuned as if everything was successful.

The caller of jwt_decode_2 has no real way to know that their cb was never run.

As an aside, it was found that some of the test cases were assuming that you could call jwt_decode_2 with key_provider == NULL. This doesn't make much sense, considering there's no way to pass a key without a key_provider.

In this instance, if passed a JWT with alg:none, this was fine. If called with any other alg type, the code would attempt to run the NULL ``key_provider` and produce a SEGV.

RESOLUTION

jwt_decode_2 will always run the key_provider if passed, assuming there was not a previous error.
Always check key_provider for NULL before using it
If no key_provider, but JWT had alg != none, processing fails
NOTES:

jwt_decode() and jwt_decode_2() are being deprecated in favor more robust functionality.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2024/09/13 19:35:15 adam Exp $
d3 1
a3 1
DISTNAME=	libjwt-2.1.1
d7 1
a7 1
EXTRACT_SUFX=	.tar.bz2
d14 1
a14 1
EXTRACT_USING=	gtar # Cannot restore extended attributes
d17 18
a34 10
USE_LIBTOOL=		yes
USE_TOOLS+=		gmake pkg-config
GNU_CONFIGURE=		yes
CONFIGURE_ARGS+=	--disable-doxygen-doc
CONFIGURE_ARGS+=	--without-gnutls

# cmake does not produce .pc file.
#CMAKE_CONFIGURE_ARGS+=	-DBUILD_SHARED_LIBS=ON
#.include "../../devel/cmake/build.mk"

@


1.1
log
@libjwt: added version 1.17.2

JWT C Library.
@
text
@d1 1
a1 1
# $NetBSD$
d3 1
a3 1
DISTNAME=	libjwt-1.17.2
d21 1
@