C++ Implementation of the SciTokens Library
Provides
Requires
License
Apache-2.0
Changelog
* Fri Mar 13 2026 Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
- Fix scope path boundary validation to deny sibling-prefix authorization bypasses
- Reject parent-directory traversal in scope paths, including encoded traversal forms
- Add regression tests covering sibling-prefix and traversal authorization checks
* Thu Feb 19 2026 Derek Weitzel <dweitzel@unl.edu> - 1.4.0-3
- Replace cmake3 with cmake macros
* Thu Feb 19 2026 Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
- Add keycache.allow_in_memory config option with in-memory SQLite fallback
- Add persistent anchor connection for shared in-memory SQLite database
- Improve error messages when keycache file cannot be read or written
- Add integration test for keycache not-writable error message
- Improve cache directory permission tests to handle common deployment misconfigurations
- Implement keycache location retrieval and update library to 0.0.3
- Fix typo in SQLite file extension in integration and main tests
* Thu Dec 11 2025 Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
- Add scitokens-generate-jwks CLI for key generation.
- Add environment variable-based configuration on library initialization.
- Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
- Add negative cache for failed issuer lookups (preventing frequent re-queries)
- Add monitoring API for per-issuer validation statistics
- Add optional background thread for JWKS refresh
- Add keycache load, metadata, and delete APIs
- Revert "Fix memory leak in rs256_from_coords" by @djw8605
- Add CTest-based integration test with JWKS server and TLS infrastructure
* Fri Dec 05 2025 Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
- Fix segfault if the JSON parser cannot parse the JWKS
- Fix float time claims issue and improve error handling
- Fix security issue with malicious issuer handling in error messages
- Improve JWTVerificationException message to include the invalid issuer
- Update usage on verify command to make the TOKENFILE explicit
- Read token for scitokens-verify from stdin
- Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
- Adding asan value to the job name
- Turn off building unit tests by default.
- Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer. Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
- Fix memory leak in store_public_ec_key
- Fix memory leaks in the unit tests
- Fix memory leak in rs256_from_coords
- Fix memory leak in scitokens_verify
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Feb 24 2025 Derek Weitzel <dweitzel@unl.edu> - 1.1.3-2
- Fix source file
* Mon Feb 24 2025 Derek Weitzel <dweitzel@unl.edu> - 1.1.3-1
- Include cstdint import for jwt library to support newer compilers
* Sun Jan 19 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Oct 30 2024 Derek Weitzel <dweitzel@unl.edu> - 1.1.2-2
- Fix source upload, no source changes
* Wed Oct 30 2024 Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
- Turn off CMAKE unity builds
- Add a mutex around requesting public keys to stop overloading issuers
* Wed Jul 24 2024 Miroslav Suchý <msuchy@redhat.com> - 1.1.1-3
- convert license to SPDX
* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.1.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
Files
/usr/bin/scitokens-create
/usr/bin/scitokens-generate-jwks
/usr/bin/scitokens-list-access
/usr/bin/scitokens-test
/usr/bin/scitokens-test-access
/usr/bin/scitokens-verify
/usr/lib/.build-id
/usr/lib/.build-id/14
/usr/lib/.build-id/14/e0b494c012676235045e6893d80c44baa66af0
/usr/lib/.build-id/2d
/usr/lib/.build-id/2d/0df3d40cf361020a220c94e9a627bff3bcb5ae
/usr/lib/.build-id/4c
/usr/lib/.build-id/4c/3895f4984111f248eb52cfcf8d892474c25bef
/usr/lib/.build-id/8a
/usr/lib/.build-id/8a/066ba1899253cf5b2f418927b73db33ad35d0b
/usr/lib/.build-id/c3
/usr