Skip to content

Releases: smallrye/smallrye-jwt

3.1.0

26 Mar 10:37
Compare
Choose a tag to compare
  • #441 Update GitHub workflows to use 'main'
  • #439 Bump smallrye-config from 2.1.0 to 2.2.0
  • #438 Documentation: Replace deprecated configuration keys
  • #433 Remove deprecated KeyUtils and ResourceUtils
  • #432 Remove a long time deprecated JwtClaimsBuilder.json() method
  • #431 Add smallrye.jwt.new-token.override-matching-claims property
  • #430 Bump smallrye-parent from 25 to 26
  • #428 Bump smallrye-config from 2.0.2 to 2.1.0

2.4.4

09 Mar 12:21
Compare
Choose a tag to compare
  • #434 Backport from 3.x to 2.4.x
  • #423 Bump mockito-core from 3.7.7 to 3.8.0
  • #422 Bump version.resteasy from 3.14.0.Final to 3.15.0.Final
  • #415 Use correct resource location for service loader logging of JWTCallerPrincipalFactory
  • #414 Bump smallrye-config from 1.10.1 to 1.10.2
  • #400 Add methods for secret key generation (#342)

3.0.0

12 Feb 09:45
Compare
Choose a tag to compare
  • #416 Complete the removal of smallrye.jwt.sign.key-location and smallrye.jwt.encrypt.key-location properties
  • #413 Remove deprecated JWT Build API inner-sign none signature support and key location properties
  • #392 Update MP Config version to 2.0
  • #389 Remove Optional for the config properties with the default values
  • #381 Create smallrye-jwt-http-mechanism and smallrye-jwt-cdi-extension modules
  • #379 Remove Optional for the config properties with the default values
  • #378 Add smallrye-jwt-http-mechanism and smallrye-jwt-cdi-extension modules
  • #367 Move the JAX-RS related code into smallrye-jwt-jaxrs
  • #337 Update MP Config dependency to 2.0.
  • #332 Improve jwt-auth modularization before 3.0.0 release
  • #247 Support mp.jwt.verify.publickey.algorithm.
  • #245 Fixed issues with sign and decrypt.
  • #244 Fix DecryptionKeyLocationResolverTest test
  • #243 Consider Refactor JWTAuthContextInfoProvider
  • #241 Throw NotAuthorizedException if a JWT is sent to an unauthenticated endpoint and is not valid
  • #240 Support MP JWT 1.2 new configurations

2.4.3

03 Feb 17:52
Compare
Choose a tag to compare
  • #406 Reuse Jose4j HttpsJwk class for managing HTTP based JWK sets
  • #405 Fix configuration key location inconsistency and deprecate the inner-sign none signatures
  • #404 Deprecate inner-sign option where non-secured JWT is encrypted
  • #403 Enforce types of the directly supported claims when they are set as Objects
  • #402 Bump jose4j from 0.7.5 to 0.7.6
  • #401 Bump jose4j from 0.7.4 to 0.7.5
  • #398 Bump smallrye-config from 1.10.0 to 1.10.1
  • #395 Fix configuration key location inconsistency
  • #394 Fix the default algorithm typo
  • #391 JwtClaimsBuilder fails to enforce the correct type of directly supported claims
  • #390 Fix JWT build impl to load PEM keys correctly when no default algorithm is used
  • #388 Bump mockito-core from 3.7.0 to 3.7.7
  • #387 Hardcoded algorithm prevents creating EC signatures

2.4.2

13 Jan 12:57
Compare
Choose a tag to compare
  • #377 Add PrincipalUtils
  • #376 Add a smallrye.jwt.new-token.audience property
  • #375 Report UnresolvableKeyException in the inner-sign/decrypt case, update JAX-RS filter too
  • #374 JWTHttpAuthenticationMechanism has to return HTTP 500 in case the key can not be resolved when decrypting signed tokens
  • #373 Issue#372 Status code should be 500 when public key cannot be resolved
  • #371 Corrected toString implementation
  • #370 Bump jose4j from 0.7.3 to 0.7.4
  • #368 Bump mockito-core from 3.6.28 to 3.7.0
  • #366 Bump bcprov-jdk15on from 1.67 to 1.68
  • #364 Support a new-token.audience property for re-signing JWT tokens
  • #361 Bump jose4j from 0.7.2 to 0.7.3
  • #359 Fix JaCoCo Test Coverage.

2.4.1

15 Dec 12:29
Compare
Choose a tag to compare
  • #351 Support for expireIn build method and other minor cleanup
  • #350 Add Windows runner.
  • #349 Use UUID for the 'jti' claim, and update ResourceUtils to have a separate InputStream utility
  • #348 Better support for the PS256 test
  • #346 Bump smallrye-parent from 23 to 25
  • #343 Bump version.resteasy from 3.13.2.Final to 3.14.0.Final
  • #341 Add JwtClaimsBuilder.expiresIn(Duration)
  • #340 Bump smallrye-config from 1.9.3 to 1.10.0

2.4.0

26 Nov 12:24
Compare
Choose a tag to compare
  • #334 Better handling of the wrong JWT build key locations
  • #331 Split the implementation module into common, jwt-auth, jwt-build
  • #330 Publish TCK Report
  • #329 Update the build and release workflows to setup java at v1
  • #327 JWT builder NPE against the key generated with keytool

2.3.1

14 Oct 16:49
Compare
Choose a tag to compare
  • #319 Add enum values for RSASSA-PSS and PBES2 with HMAC algorithms
  • #311 Fix the property name typo in the docs
  • #310 Bump mockito-core from 3.5.9 to 3.5.10

2.3.0

28 Aug 11:44
Compare
Choose a tag to compare
  • #307 Minor JavaDoc updates
  • #305 Support for the configured secret key location
  • #304 Bump mockito-core from 3.5.6 to 3.5.7
  • #303 Simpler token symmetric signing and encryption support
  • #301 Bump mockito-core from 3.5.5 to 3.5.6
  • #300 Bump mockito-core from 3.5.2 to 3.5.5
  • #299 Update the documentation
  • #298 Inject JWTCallerPrincipalFactory
  • #296 Support custom schemes for the custom headers
  • #290 Add JWT token sign/innerSign/encrypt methods accepting a secret key as String
  • #286 Scheme(s) should not be discared when alternate header is used
  • #281 Bump smallrye-config from 1.8.2 to 1.8.3
  • #280 Bump mockito-core from 3.3.3 to 3.4.0
  • #278 Fix JWT TTL time units message
  • #260 Support JWKs with the encoded x5c X509 certificate
  • #193 Why is JWTCallerPrincipalFactory not injected into DefaultJWTParser
  • #126 Support the symmetric signature verification

2.2.0

08 Jul 10:08
Compare
Choose a tag to compare
  • #273 Fix java docs
  • #272 Revert "Release Smallrye JWT 2.2.0"
  • #269 Update to Jose4j 0.7.2
  • #267 Allow for setting JWE headers after innerSign
  • #266 Impossible to set custom JWE headers after innerSign
  • #265 Enhance JWTParser
  • #264 Bump jakarta.servlet-api from 4.0.3 to 4.0.4
  • #263 Deprecate JwtClaimsBuilder.json, rename JwtSigningUtils to JwtBuilderUtils, create JwtProvider once
  • #262 Provide an API to verify/decrypt token directly in the service code
  • #261 Bump smallrye-config from 1.8.0 to 1.8.1
  • #258 JWT Builder shortcuts
  • #257 Support public RSA keys with 1024 bit length
  • #255 Improve the resource loading code
  • #254 Remove redundant import and correct final line.
  • #252 Bump version.resteasy from 3.12.0.Final to 3.12.1.Final
  • #251 Bump smallrye-parent from 18 to 20
  • #249 Refactor JWTEncryptionImpl to remove redundant code paths
  • #248 Bump jose4j from 0.7.0 to 0.7.1
  • #246 Minor JWT build improvements
  • #242 Removed duplicated configuration documentation in README.
  • #235 Add i18n logging and messages (#227)
  • #227 Implement i18n logging and messages