Proguard exclusions

[bpappin]

What are the ProGuard exclusions for JJWT?

For instance, we can't build due to this error.

Warning:io.jsonwebtoken.impl.Base64Codec: can't find referenced class javax.xml.bind.DatatypeConverter
Warning:io.jsonwebtoken.impl.crypto.EllipticCurveProvider: can't find referenced class org.bouncycastle.jce.ECNamedCurveTable
Warning:there were 5 unresolved references to classes or interfaces.

[bpappin]

Related issues :

• Throw a PrematureJwtException when parsing a Claims JWT with NotBefore after the current parsing time #7
• Problem with java.xml.bind.DatatypeConverter #18
• Jjwt accepts signature that is also base64 encoded #192
• Consider using a different Base64 decoder #143

Those are all related to the base64 encoder.

[bpappin]

one of the warning can be handled with ProGuard rules.

-keep class org.bouncycastle.** { *; }
-keepnames class org.bouncycastle.** { *; }
-dontwarn org.bouncycastle.**

Note: likely don't need the -keepnames entry.

[sbanouar]

Hi Brill Pappin,

The proguard exclusions for JJWT & Jackson are:

-keepnames class com.fasterxml.jackson.databind.** { ; }
-dontwarn com.fasterxml.jackson.databind.*
-keepattributes InnerClasses

-keep class org.bouncycastle.** { ; }
-keepnames class org.bouncycastle.* { ; }
-dontwarn org.bouncycastle.*

-keep class io.jsonwebtoken.** { ; }
-keepnames class io.jsonwebtoken.* { ; }
-keepnames interface io.jsonwebtoken.* { *; }

-dontwarn javax.xml.bind.DatatypeConverter
-dontwarn io.jsonwebtoken.impl.Base64Codec

-keepnames class com.fasterxml.jackson.** { * ; }
-keepnames interface com.fasterxml.jackson.** { *; }

I hope this help you.

[lhazlewood]

I've added this to a new wiki page:

https://github.com/jwtk/jjwt/wiki/ProGaurd-exclusions

Please free to re-open this issue if you think other actionable work needs to be done.

[ederpadilla]

Error:Execution failed for task ':app:transformClassesAndResourcesWithProguardForRelease'. > Job failed, see logs for details
-keepnames class com.fasterxml.jackson.databind.** { ; }

and steel send me this warning
Warning:com.fasterxml.jackson.databind.ext.DOMSerializer: can't find referenced class org.w3c.dom.bootstrap.DOMImplementationRegistry
Warning:io.jsonwebtoken.impl.crypto.EllipticCurveProvider: can't find referenced class org.bouncycastle.jce.ECNamedCurveTable

[asdfiop]

不好

[asdfiop]

不好

[c0state]

There were some syntax errors and/or incorrect rules in the snippet above I believe. Wiki entry has been updated with corrections.

[pedroromao-acceptto]

Wiki link
https://github.com/jwtk/jjwt/wiki/ProGuard-exclusions