4.1.0

⚠️ BREAKING CHANGES

• Make JWT constants final values #604 (poovamraj)

Added

• Add integration with our Shipping orb #612 (frederikprijck)
• Add Ship CLI support #609 (jimmyjames)
• Provide straightforward example for JWKS #600 (poovamraj)

Changed

• Update to gradle 6.9.2 #608 (jimmyjames)
• Update OSS plugin to latest #607 (jimmyjames)
• SDK-3466 Upgrade Codecov #595 (evansims)
• Update README.md #590 (poovamraj)

Fixed

• Check for null token before splitting #606 (jimmyjames)
• [SDK-3816] Update docs for verification thread-safety #605 (jimmyjames)

4.0.0

4.0.0 (2022-06-24)

Full Changelog

This is a major release and contains breaking changes!

💡 Check the Migration Guide to understand the changes required to migrate your application to v4.

Main features

• Predicates based claim verification
• Support for Instant API and Lambda functions
• Improved Exceptions API
• Consistent null handling

See the changelog entries for additional details.

4.0.0-beta.0

4.0.0-beta.0 (2022-05-06)

Full Changelog

💡 Check the Migration Guide to understand the changes required to migrate your application to v4.

Added

• JavaDoc updated #577 (poovamraj)
• Add Migration Guide #576 (jimmyjames)
• Expose claim name and header constants #574 (jimmyjames)
• Added support for multiple checks on a single claim #573 (poovamraj)
• Improved README structure #571 (poovamraj)
• Improved Exception Handling #568 (poovamraj)
• Predicate based Claim verification #562 (poovamraj)
• Add lint checks #561 (poovamraj)
• Support date/time custom claim validation #538 (jimmyjames)
• Add Instant support #537 (jimmyjames)
• Testing Java LTS versions #536 (poovamraj)

Changed

• Null claim handling #564 (poovamraj)
• Undeprecate Single Key Constructor for Algorithms #551 (poovamraj)
• Update documentation and undeprecate single content sign methods #550 (poovamraj)
• Update test deps #539 (jimmyjames)

Deprecated

• Deprecate secp256k1 curve for EC Algorithms #540 (poovamraj)

Removed

• Remove ES256K support #556 (poovamraj)
• Remove impl package export in module-info #553 (poovamraj)
• Remove internal Clock #533 (jimmyjames)

Fixed

• Improve keyprovider reliability #570 (poovamraj)
• Support date/time custom claim validation #538 (jimmyjames)
• Test only change - remove unnecessary throws clause from tests #535 (jimmyjames)

Security

• Updated documentation regarding HMAC Key length #580 (poovamraj)

Breaking changes

• Added support for multiple checks on a single claim #573 (poovamraj)
• Improve keyprovider reliability #570 (poovamraj)
• Remove ES256K support #556 (poovamraj)
• Remove impl package export in module-info #553 (poovamraj)
• Fix header claims serialization #549 (jimmyjames)
• Serialize dates in collections as seconds since epoch #534 (jimmyjames)
• Replace com.auth0.jwt.interfaces.Clock with java.time.Clock #532 (jimmyjames)

3.19.2

3.19.2 (2022-05-05)

Full Changelog

Security

• [SDK-3311] Added protection against CVE-2022-21449 #579 (poovamraj)

3.19.1

3.19.1 (2022-03-30)

Full Changelog

Security

• Security: Bump jackson-databind to 2.13.2.2 #566 (evansims)

3.19.0

Full Changelog

Deprecated

• Deprecate ES256K Algorithm #543 (poovamraj)

Fixed

• fix typos in JWTVerifier#verify docstring #526 (OdunlamiZO)

Security

• Bump jackson-databind dependency to 2.13.2 #542 (evansims)

3.18.3

Full Changelog

Security

• Update jackson dependency #523 (poovamraj)

3.18.2

Full Changelog

Fixed

• [SDK-2758] Restore withIssuer #513 (jimmyjames)
• [SDK-2751] Serialize audience claim when a List #512 (jimmyjames)

3.18.1

Full Changelog

Fixed

• Fix min JDK version regression #504 (lbalmaceda)

3.18.0

This release contains an unintended breaking change that got fixed in 3.18.1**

Full Changelog

Changed

• Update OSS release plugin version #501 (lbalmaceda)