0.10.0

Full Changelog

Changed

• Set default cache expiration time to 10 minutes #82 (jimmyjames)

0.9.0

Full Changelog

Changed

• Improve ObjectMapper use #68 (skjolber)
• Concatenate JWKS path with existing path on domain if present #67 (ltj)

Security

• Update jackson-databind to address CVE #72 (jimmyjames)

0.8.3

Full Changelog

Security

• Update dependencies #65 (jimmyjames)

0.8.2

0.8.2 (2019-05-22)

Full Changelog

Security

• Fix security issue with jackson-databind #63 (lbalmaceda)

0.8.1

0.8.1 (2019-05-02)

Full Changelog

Fixed

• Add content-type header to the jwks request #59 (lbalmaceda)

0.8.0

0.8.0 (2019-03-28)

Full Changelog

Added

• Expose getAll() publicly on UrlJwkProvider #38 (kampka)
• change visibility to public on fromValues method in Jwk #36 (underscorenico)

Changed

• Update guava to version 27.0.1-jre #54 (golszewski86)

0.7.0

0.7.0 (2019-01-03)

Full Changelog

Changed

• Throw correct exception when key is not of type RSA #48 (lbalmaceda)

Security

• Bump jackson-databind to patch security issues #49 (lbalmaceda)

0.6.1

Full Changelog

Security

• Use latest jackson-databind dependency #43 (lbalmaceda)

0.6.0

Full Changelog

Changed

• Optional kid on single item JWK sets #32 (lbalmaceda)

0.5.0

Full Changelog
Closed issues

• Improve release procedure #29

Added

• Optional support for connection / read timeout #27 (skjolber)

Fixed

• Improve release procedure #30 (lbalmaceda)

Security

• [Snyk] Fix for 6 vulnerable dependencies #28 (crew-security)
• bump commons-io due to security vulnerabilities in that library #26 (ryber)