lhazlewood 8cb59d760b

Support crit header enforcement (#829) ...

* Ensured Jwts.header() and Jwts.builder().header() builders sanitized crit header values per https://www.rfc-editor.org/rfc/rfc7515.html#section-4.1.11 and https://datatracker.ietf.org/doc/html/rfc7516#section-4.1.13 before creating the final Header instance
* Modified DefaultJweHeader#isCandidate and DefaultProtectedHeader#isCandidate method implementations to only look for required fields (it's a candidate for respective type creation if and only if those values are set).
* Ensured Jwts.parser() enforced the same rules in https://www.rfc-editor.org/rfc/rfc7515.html#section-4.1.11
* Added RFC7515AppendixETest to reflect the test case(s) for conforming implementations (i.e. JJWT) in https://www.rfc-editor.org/rfc/rfc7515.html#appendix-E

2023-09-14 17:58:50 -07:00

..

src

Support crit header enforcement (#829)

2023-09-14 17:58:50 -07:00

bnd.bnd

Attach implementation bundles as fragments to the API bundle to make them visible to the API bundle. This fixes jwtk#578 (jwtk#578) (#580)

2020-04-27 17:40:02 -04:00

pom.xml

Upgrade BC to 1.76 (#810)

2023-09-05 14:29:17 -07:00