Java Jwt Versions Save

Full Changelog

Changed

• Add support for passing json values for header and payload #643 (andrewrigas)
• Preserve insertion order for claims #656 (snago)
• Update Jackson to 2.14.2 #657 (jimmyjames)

Full Changelog

Changed

• Improve JWT parse/decode performance #620 (noetro)

Fixed

• Fix for exp claim considered valid if equal to now #652 (jimmyjames)
• Code cleanup #642 (CodeDead)

Full Changelog

This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices. Please review the README note for additional details.

Full Changelog

This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices. Please review the README note for additional details.

Full Changelog

Security

• Update com.fasterxml.jackson.core:jackson-databind to 2.13.4.2 #631 (jimmyjames)

Security

Bump com.fasterxml.jackson.core:jackson-databind to 2.13.4.2 https://github.com/auth0/java-jwt/pull/630 (evansims)

Changed

• Re-enable japicmp API diff checking #619 (jimmyjames)
• Update .shiprc to only update lib version in build.gradle #625 (jimmyjames)
• Optimise TokenUtils parsing #611 (noetro)
• Update Circle Ship Orb configuration #616 (frederikprijck)

Fixed

• Update Claim#asString documentation #615 (jimmyjames)

⚠️ BREAKING CHANGES

• Make JWT constants final values #604 (poovamraj)

Added

• Add integration with our Shipping orb #612 (frederikprijck)
• Add Ship CLI support #609 (jimmyjames)
• Provide straightforward example for JWKS #600 (poovamraj)

Changed

• Update to gradle 6.9.2 #608 (jimmyjames)
• Update OSS plugin to latest #607 (jimmyjames)
• SDK-3466 Upgrade Codecov #595 (evansims)
• Update README.md #590 (poovamraj)

Fixed

• Check for null token before splitting #606 (jimmyjames)
• [SDK-3816] Update docs for verification thread-safety #605 (jimmyjames)

4.0.0 (2022-06-24)

Full Changelog

This is a major release and contains breaking changes!

💡 Check the Migration Guide to understand the changes required to migrate your application to v4.

Main features

• Predicates based claim verification
• Support for Instant API and Lambda functions
• Improved Exceptions API
• Consistent null handling

See the changelog entries for additional details.

4.0.0-beta.0 (2022-05-06)

Full Changelog

💡 Check the Migration Guide to understand the changes required to migrate your application to v4.

Added

• JavaDoc updated #577 (poovamraj)
• Add Migration Guide #576 (jimmyjames)
• Expose claim name and header constants #574 (jimmyjames)
• Added support for multiple checks on a single claim #573 (poovamraj)
• Improved README structure #571 (poovamraj)
• Improved Exception Handling #568 (poovamraj)
• Predicate based Claim verification #562 (poovamraj)
• Add lint checks #561 (poovamraj)
• Support date/time custom claim validation #538 (jimmyjames)
• Add Instant support #537 (jimmyjames)
• Testing Java LTS versions #536 (poovamraj)

Changed

• Null claim handling #564 (poovamraj)
• Undeprecate Single Key Constructor for Algorithms #551 (poovamraj)
• Update documentation and undeprecate single content sign methods #550 (poovamraj)
• Update test deps #539 (jimmyjames)

Deprecated

• Deprecate secp256k1 curve for EC Algorithms #540 (poovamraj)

Removed

• Remove ES256K support #556 (poovamraj)
• Remove impl package export in module-info #553 (poovamraj)
• Remove internal Clock #533 (jimmyjames)

Fixed

• Improve keyprovider reliability #570 (poovamraj)
• Support date/time custom claim validation #538 (jimmyjames)
• Test only change - remove unnecessary throws clause from tests #535 (jimmyjames)

Security

• Updated documentation regarding HMAC Key length #580 (poovamraj)

Breaking changes

• Added support for multiple checks on a single claim #573 (poovamraj)
• Improve keyprovider reliability #570 (poovamraj)
• Remove ES256K support #556 (poovamraj)
• Remove impl package export in module-info #553 (poovamraj)
• Fix header claims serialization #549 (jimmyjames)
• Serialize dates in collections as seconds since epoch #534 (jimmyjames)
• Replace com.auth0.jwt.interfaces.Clock with java.time.Clock #532 (jimmyjames)