3.14.0

Full Changelog

Added

• Add withPayload to JWTCreator.Builder #475 (jimmyjames)

3.13.0

Full Changelog

Added

• Add ability to verify audience contains at least one of those expected #472 (jimmyjames)
• Add toString to Claim objects [SDK-2225] #469 (jimmyjames)

3.12.1

Full Changelog

Changed

• Update jackson-databind to 2.11.0 #464 (darveshsingh)

3.12.0

Full Changelog

Changed

• Thread-safe classes should be Shared statically #462 (LeeHainie)

Security

• Update jackson-databind to 2.10.5.1 (fixes CVE-2020-25649) #463 (overheadhunter)

Breaking changes

• Target Java 8 #455 (lbalmaceda)

3.11.0

Full Changelog

Added

• Add ability to verify claim presence #442 (jimmyjames)
• Add Support for secp256k1 algorithms (AKA ES256K) #439 (jimmyjames)

Fixed

• Fix and document thread-safety #427 (lbalmaceda)
• Wrap IllegalArgumentException into JWTDecodeException #426 (lbalmaceda)

3.10.2

Full Changelog

Fixed

• JavaDoc fix #413 (jimmyjames)
• Check varargs null values in JWTVerifier #412 (jimmyjames)

3.10.1

3.10.1 (2020-03-13)

Full Changelog

Changed

• Update Jackson and Commons Codec dependencies #407 (jimmyjames)

Security

• Update jackson-databind to 2.10.2 #399 (gexclaude)

3.10.0

Full Changelog
Closed issues

• NullPointerException when the claim doesn't exist in the token #384

Added

• Add Javadoc URL and badge to the README #382 (lbalmaceda)
• Allow to customize the typ header claim #381 (lbalmaceda)
• JWTCreator for basic types #282 (skjolber)
• Support verification of Long[] datatype like in JWTCreator #278 (skjolber)

Changed

• Update to Gradle 6.1.1 #389 (jimmyjames)

Fixed

• Handle missing expected array claim #393 (lbalmaceda)
• Update tests to use valid Base64 URL-encoded tokens #386 (jimmyjames)

3.9.0

Full Changelog

Added

• Support serialization of DecodedJWT #370 (jimmyjames)

Fixed

• Fixing JwtCreator builder when setting headers as a map #320 (maxbalan)

3.8.3

Full Changelog

Security

• Fix: updated jackson-databind to 2.10.0.pr3 to block CVE #356 (danbrodsky)