initial v0.8 pre-release

tools/security/jwt.go

@@ -9,6 +9,8 @@ import (
 
 // ParseUnverifiedJWT parses JWT token and returns its claims
 // but DOES NOT verify the signature.
+//
+// It verifies only the exp, iat and nbf claims.
 func ParseUnverifiedJWT(token string) (jwt.MapClaims, error) {
 	claims := jwt.MapClaims{}
 

tools/security/random_test.go

@@ -44,7 +44,7 @@ func TestRandomStringWithAlphabet(t *testing.T) {
 	}
 
 	for i, s := range scenarios {
-		generated := make([]string, 100)
+		generated := make([]string, 0, 100)
 		length := 10
 
 		for j := 0; j < 100; j++ {