Skip to content

Releases: navikt/token-support

1.3.2

09 Dec 14:50
@github-actions github-actions
1.3.2
5073dc0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
1.3.2

What's Changed

  • [Snyk] Upgrade javax.ws.rs:javax.ws.rs-api from 2.1 to 2.1.1 (#234) @snyk-bot

🚀 Features

  • Better support for meta annotations by using AnnotatedElementUtils.findMergedAnnotation (#255) @janolaveide

⬆️ Dependency upgrades

Assets 2
Loading

1.3.1

01 Oct 11:28
@github-actions github-actions
1.3.1
2952c7c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
1.3.1

What's Changed

🚀 Features

🧰 Maintenance

  • fix: remove stacktrace from info log about invalid token for an issuer (#220) @ybelMekk
  • dep: set lombok scope to provided (#219) @ybelMekk

⬆️ Dependency upgrades

Assets 2
Loading

1.3.0

05 Aug 09:33
@github-actions github-actions
1.3.0
85eefea
This commit was signed with the committer’s verified signature. The key has expired.
tommytroen Tommy Trøen
GPG key ID: 9A86AA6261E6A364
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
1.3.0

What's Changed

🚀 Features

  • token-validation-*: look for annotations more robustly, support for meta annotations (#191) @janolaveide
  • token-validation-ktor: adding support for token expirythreshold in the ktor-module. (#185) @Robert-Larsen
  • token-client-*: implement client for OAuth 2.0 Token Exchange (#180) @ybelMekk @tommytroen

⚠️ Breaking Changes

  • feature: implement client for OAuth 2.0 Token Exchange (#180)
    • refactor OnBehalfOfAssertionResolver interface to JwtBearerTokenResolver

⬆️ Dependency upgrades

Assets 2
Loading

1.2.0

26 Jun 10:25
@github-actions github-actions
1.2.0
91cedc5
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
1.2.0

What's Changed

🚀 Features

  • feature: add configurable token validator, possibility for optional claims (#173) @ybelMekk
    • allow tokens without sub and aud claims to be validated

⬆️ Dependency upgrades

Assets 2
Loading

1.1.6

04 Jun 14:56
@github-actions github-actions
1.1.6
178ee15
This commit was signed with the committer’s verified signature. The key has expired.
tommytroen Tommy Trøen
GPG key ID: 9A86AA6261E6A364
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
1.1.6

What's Changed

🚀 Features

  • Add: Ability to use oidc and / or oauth servers. (#166) @ybelMekk

⬆️ Dependency upgrades

Assets 2
Loading

1.1.5

14 May 15:39
@github-actions github-actions
1.1.5
c523e0b
This commit was signed with the committer’s verified signature. The key has expired.
tommytroen Tommy Trøen
GPG key ID: 9A86AA6261E6A364
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
1.1.5

What's Changed (since last documented release - 0.2.11)

⬆️ Dependency upgrades

Assets 2
Loading

v0.2.11

23 Oct 18:33
@tommytroen tommytroen
token-support-0.2.11
ade3d68
Compare
Choose a tag to compare
v0.2.11
  • Filter which send a response header when a tokens remaining lifetime is less than or equal to configured value (in minutes)
    • Enabled if property no.nav.security.oidc.expirythreshold is set with a value (in minutes). If the token lifetime has passed the threshold, a http response header with the name x-token-expires-soon will be returned.
  • @ProtectedWithClaims allows for claim checking with combination algorithm OR
    • i.e. any claim that you specify that also is present in the token will be allowed
  • Proxy settings per issuer
    • It is now possible to set proxy settings per issuer configuration (see README), i.e. all issuers will not inherit proxy settings but can be specified explicitly on an issuer
  • Renamed module oidc-spring-test to oidc-test-support to support test functionality regardless of Spring
  • Annotations moved into oidc-support module
    • Requires refactoring
  • Added Oidc Jersey/JAX-RS wrapper module
    • Use same annotations as oidc-spring-support

NOT BACKWARDS COMPATIBLE WITH v0.2.4 - some refactoring required

Assets 2
Loading

v0.2.4

30 May 13:01
@tommytroen tommytroen
token-support-0.2.4
3dbf0fd
Compare
Choose a tag to compare
v0.2.4

Use EnableOIDCTokenValidation annotation on any class (not just the main class):

  • i.e. configuration classes

Support for multiple ID token validators per issuer:

  • one issuer can have one validator per audience
  • in Nimbus there is a one to one relationship between issuer and clientId (accepted audience), so in order to support validation of tokens with different audience claims within the same app the OIDCTokenValidator has been modified to include a map of audience and IDTokenValidator. The validation is still within the boundaries of the OpenID Connect spec.
Assets 2
Loading

v0.2.3

09 May 12:38
@tommytroen tommytroen
token-support-0.2.3
7081cd3
Compare
Choose a tag to compare
v0.2.3

Minor bug release for oidc-spring-test

  • Fixed bug when redirecting in endpoint /local/cookie?redirect=someurl: 00269ab
Assets 2
Loading

v0.2

27 Apr 11:59
@tommytroen tommytroen
token-support-0.2.1
bbf40e1
Compare
Choose a tag to compare
v0.2

Simplifying abstractions and some configuration refactoring.

Not backwards-compatible:

  • Renamed property:
    no.nav.security.oidc.issuer.[issuer name].uri - The OIDC provider configuration endpoint (meta-data)
    no.nav.security.oidc.issuer.[issuer shortname].discoveryurl - The OIDC provider configuration endpoint (meta-data)
Assets 2
Loading