d91881fbac
Create SECURITY.md
2022-04-19 14:28:02 -04:00
4b3e2c9315
Update Jackson Databind to 2.12.6.1
...
Fixes : #716
Fixes : #614
2022-04-18 13:38:09 -04:00
20b04372d2
fix: upgrade com.google.code.gson:gson from 2.8.8 to 2.8.9
...
Snyk has created this PR to upgrade com.google.code.gson:gson from 2.8.8 to 2.8.9.
See this package in Maven Repository:
https://mvnrepository.com/artifact/com.google.code.gson/gson/
See this project in Snyk:
https://app.snyk.io/org/micah.silverman/project/cb87a9f4-731e-4a75-a25d-ca3272fdd00b?utm_source=github&utm_medium=referral&page=upgrade-pr
2022-02-28 18:05:54 -05:00
82189f8418
fix: pom.xml to reduce vulnerabilities
...
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-2326698
2022-01-31 16:25:40 -05:00
f6d067950d
Cleanup ownership confusion in readme
2021-12-14 14:54:30 -05:00
9f789bb4c6
Adding legacy java 7 and older Java versions that were in travis.yml
2021-12-14 14:48:04 -05:00
aa17d5094e
enable GitHub Actions
...
https://arstechnica.com/information-technology/2021/09/travis-ci-flaw-exposed-secrets-for-thousands-of-open-source-projects/
2021-12-14 14:48:04 -05:00
2fb6d6bb9c
Bump bcprov-jdk15on from 1.60 to 1.67
...
Bumps [bcprov-jdk15on](https://github.com/bcgit/bc-java ) from 1.60 to 1.67.
- [Release notes](https://github.com/bcgit/bc-java/releases )
- [Changelog](https://github.com/bcgit/bc-java/blob/master/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk15on
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-11-24 12:36:39 -05:00
3e6c9e978c
fix: upgrade com.google.code.gson:gson from 2.8.5 to 2.8.8 ( #684 )
...
Snyk has created this PR to upgrade com.google.code.gson:gson from 2.8.5 to 2.8.8.
See this package in Maven Repository:
https://mvnrepository.com/artifact/com.google.code.gson/gson/
See this project in Snyk:
https://app.snyk.io/org/dogeared/project/76cafdc8-8c18-4705-9786-9703c2e293c9?utm_source=github&utm_medium=referral&page=upgrade-pr
2021-10-11 13:13:39 -04:00
878d836347
fix: upgrade com.fasterxml.jackson.core:jackson-databind from 2.9.10.7 to 2.12.5 ( #683 )
...
Snyk has created this PR to upgrade com.fasterxml.jackson.core:jackson-databind from 2.9.10.7 to 2.12.5.
See this package in Maven Repository:
https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/
See this project in Snyk:
https://app.snyk.io/org/dogeared/project/d56a851a-c55c-475b-bff7-40745a085073?utm_source=github&utm_medium=referral&page=upgrade-pr
2021-10-11 13:13:16 -04:00
9dc82f01f0
Fix small typo in README.md
2021-09-25 11:36:27 -04:00
6fe3759d64
Fixed Javadoc and comment typos
...
Fixes : #294
2021-07-20 10:51:56 -04:00
ddeb39c557
Update feature_request.md
...
Updated asking question section
2021-07-19 13:48:12 -07:00
30a6c929cf
Update bug_report.md
...
Updated asking questions section
2021-07-19 13:47:27 -07:00
9a215fed35
Created config.yml to disallow blank issues
2021-07-19 16:39:53 -04:00
e8174df18f
Update issue templates
...
first pass at issue templates
2021-07-19 16:26:39 -04:00
9007ae7c98
Add notes about Jackson version update in release notes: #642
2021-07-09 17:17:13 -04:00
6b2843bded
Fix name of tests in DefaultJwtParserBuilder
...
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>
2021-07-09 17:08:56 -04:00
04762e4d4e
Add and cleanup tests based on review feedback
...
* Add tests to verify the DefaultJwtParserBuilder will correctly wrap Deserializer implementations
* Cleanup string handling in JwtDeserializerTest
2021-07-09 17:08:56 -04:00
52b2ab13d1
Apply suggestions from code review
...
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>
2021-07-09 17:08:56 -04:00
6c25d67978
Update CHANGELOG with better description of JSON error handling
2021-07-09 17:08:56 -04:00
8a11a4ed18
Adds handling for common JSON parsing exceptions and wraps them in a `JwtException`
...
Move the parser error handling logic out of DefaultJwtParser into the new JwtDeserializer and wraps them with developer freiendly exceptions
Add check for common JSON parsing exceptions like stack overflow when parsing deeply nested (or malformed) JSON
2021-07-09 17:08:56 -04:00
d9da0e3e80
update installation using Gradle
2021-07-09 16:48:21 -04:00
861ec66832
Revert "update readme.md: installation in gradle 7+"
...
This reverts commit 371577df98
2021-07-09 16:48:21 -04:00
915a3753c4
update readme.md: installation in gradle 7+
2021-07-09 16:48:21 -04:00
1118726d04
Update fork of coverall-maven-plugin fork
...
NOTE: This fork supports Clover for test coverage
2021-07-09 13:23:41 -04:00
a4130dd1ec
Remove unused import of java.util.Arrays in RsaSignatureValidator
2021-03-10 10:14:13 -05:00
8ed4ab407e
Bump jackson-databind from 2.9.10.5 to 2.9.10.7
...
Bumps [jackson-databind](https://github.com/FasterXML/jackson ) from 2.9.10.5 to 2.9.10.7.
- [Release notes](https://github.com/FasterXML/jackson/releases )
- [Commits](https://github.com/FasterXML/jackson/commits )
Signed-off-by: dependabot[bot] <support@github.com>
2021-02-19 10:11:08 -05:00
894d6f298b
fixed typo ( #646 )
2021-02-17 10:39:11 -08:00
71ed1b67aa
Bump junit from 4.12 to 4.13.1
...
Bumps [junit](https://github.com/junit-team/junit4 ) from 4.12 to 4.13.1.
- [Release notes](https://github.com/junit-team/junit4/releases )
- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.12.md )
- [Commits](https://github.com/junit-team/junit4/compare/r4.12...r4.13.1 )
Signed-off-by: dependabot[bot] <support@github.com>
2020-10-13 14:48:06 -04:00
5c5f1b818a
Added "are" to correct grammar ( #605 )
2020-07-22 19:20:55 -04:00
d02cee5474
FixTypo ( #607 )
2020-07-22 19:20:12 -04:00
901048aeac
Removes eager initialization of the CompressionCodecResolver in the JwtParserBuilder
...
This removes a potential service loader issue with OSGi runtimes.
Fixes : #578
2020-07-13 12:56:05 -04:00
dc120e8c54
Correcting dependabot version bump of Jackson to 2.9.10.5
2020-07-09 16:04:45 -04:00
6f2c0c37aa
Bump jackson-databind from 2.9.10.4 to 2.10.0.pr1
...
Bumps [jackson-databind](https://github.com/FasterXML/jackson ) from 2.9.10.4 to 2.10.0.pr1.
- [Release notes](https://github.com/FasterXML/jackson/releases )
- [Commits](https://github.com/FasterXML/jackson/commits )
Signed-off-by: dependabot[bot] <support@github.com>
2020-07-09 16:04:45 -04:00
3aaa70bd18
Updates the Java 7 install location for CI
...
The previously used URL is dead, which was preventing other PRs from passing CI
2020-07-09 15:23:35 -04:00
14b2f19b29
[maven-release-plugin] prepare for next development iteration
2020-06-11 15:50:09 -04:00
274749373f
[maven-release-plugin] prepare release 0.11.2
2020-06-11 15:50:00 -04:00
0596bea16a
Updating readme dependency references to reflect the 0.11.2 release
2020-06-11 14:24:23 -04:00
5c8064bbd1
Updated changelog to link to the 0.11.2 milestone
2020-06-11 14:21:03 -04:00
26527bd43c
Updated the pom snapshot versions to prepare for the upcoming 0.11.2 release
2020-06-11 14:16:29 -04:00
2f897cbb4d
Updated the changelog for the upcoming 0.11.2 release
2020-06-11 14:14:42 -04:00
72973f9b9b
Argument validation for allowedClockSkewSeconds ( #601 )
...
* 583: ensured setting allowedClockSkewSeconds to be greater than (Long.MAX_VALUE / 1000) will throw an IllegalArgumentException.
2020-06-11 13:46:03 -04:00
2b00ed1819
Add DefaultJwtParser functionality to parse JWSs with empty body. ( #540 )
...
* Add DefaultJwtParser functionality to parse JWSs with empty body.
* Review Fix: Change allowEmptyBody(boolean) to requirePayload(boolean). Set payloadRequired true for each require*() method in JwtParser and JwtParserBuilder.
* Add missing ImmutableJwtParserTest.
* Review changes: Moving to solution without payload requirement flag.
* Review changes: Allow empty Jwt payload
* Remove unused imports
Co-authored-by: Philipp Zormeier <philipp.zormeier@thoughtworks.com>
2020-06-08 14:07:10 -04:00
82b870e283
Add support for jdk14 ( #590 )
2020-06-08 14:00:59 -04:00
d8c313cfa6
Fix GsonDeserializer to support unicode characters independently of "file.encoding" system property's value being used by JVM ( #592 )
...
Co-authored-by: Oleh Kuzych <oleh_kuzych_tp@bmc.com>
2020-06-08 14:00:17 -04:00
43de9a34e3
Add parameterized return type to Maps.and() ( #597 )
...
Fixes : #591
2020-06-08 13:59:41 -04:00
6b02041be6
Accept oid in assertValid ( #589 )
...
* Add special handling for Hmac-Keys loaded from pkcs#12 keystores
* Link to openjdk bug in javadoc
* Switch to mocked key for OID algorithm name test, eliminate KeyStore Usage in Test.
* Replace alternateNames oid field and remove from public api.
* Rename oid to pkcs12Name, make sure it's non null.
2020-06-06 16:44:07 -04:00
403e1895e3
Attach implementation bundles as fragments to the API bundle to make them visible to the API bundle. This fixes jwtk#578 (jwtk#578) ( #580 )
2020-04-27 17:40:02 -04:00
972591f87f
Bump jackson-databind from 2.9.10.3 to 2.9.10.4 ( #587 )
...
Bumps [jackson-databind](https://github.com/FasterXML/jackson ) from 2.9.10.3 to 2.9.10.4.
- [Release notes](https://github.com/FasterXML/jackson/releases )
- [Commits](https://github.com/FasterXML/jackson/commits )
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-04-24 16:06:43 -04:00
Les Hazlewood
Brian Demers
snyk-bot
Sean C. Sullivan
dependabot[bot]
Snyk bot
abit19
TK-one
Micah Silverman
minho
Tomasz Zarna
Dominik Dorn
jonfrench
Chen
Philipp Zormeier
Johannes Ballmann
Oleg Kuzych
Carsten Ziegeler