Merge pull request #26 from privacybydesign/bump-vuln-deps

Chore: bump vulnerable dependencies

build.gradle

@@ -30,21 +30,22 @@ repositories {
 }
 
 dependencies {
-    implementation 'org.glassfish.jersey.core:jersey-server:3.0.0'
-    implementation 'org.glassfish.jersey.containers:jersey-container-servlet:3.0.0'
-    implementation 'org.glassfish.jersey.inject:jersey-hk2:3.0.0'
+    implementation 'org.glassfish.jersey.core:jersey-server:3.0.12'
+    implementation 'org.glassfish.jersey.containers:jersey-container-servlet:3.0.12'
+    implementation 'org.glassfish.jersey.inject:jersey-hk2:3.0.12'
     implementation 'org.slf4j:slf4j-simple:1.7.25'
-    implementation 'com.jcraft:jsch:0.1.53'
+    implementation 'com.jcraft:jsch:0.1.55'
     implementation 'jakarta.ws.rs:jakarta.ws.rs-api:3.1.0'
     implementation 'com.googlecode.libphonenumber:libphonenumber:8.9.10'
 
-    implementation 'io.jsonwebtoken:jjwt:0.9.1'
-    implementation 'com.google.code.gson:gson:2.8.9'
-    implementation 'org.apache.commons:commons-lang3:3.7'
-    implementation 'org.bouncycastle:bcpkix-jdk15on:1.70'
-    implementation 'org.bouncycastle:bcprov-jdk15on:1.67'
+    implementation 'io.jsonwebtoken:jjwt:0.12.5'
+    implementation 'com.google.code.gson:gson:2.10.1'
+    implementation 'org.apache.commons:commons-lang3:3.14.0'
+    implementation 'org.bouncycastle:bcpkix-jdk18on:1.77'
+    implementation 'org.bouncycastle:bcprov-jdk18on:1.77'
 
-    implementation 'org.irmacard.api:irma_api_common:2.0.0'
+    // Source dependencies. Check settings.gradle for the source repositories.
+    implementation 'org.irmacard.api:irma_api_common:v2.0.1'
 
     testImplementation group: 'junit', name: 'junit', version: '4.12'
 }

settings.gradle

@@ -1,2 +1,7 @@
 rootProject.name = 'irma_sms_issuer'
 
+sourceControl {
+    gitRepository("https://github.com/privacybydesign/irma_api_common.git") {
+        producesModule("org.irmacard.api:irma_api_common")
+    }
+}

src/main/resources/config.sample.json

@@ -15,7 +15,7 @@
     "nl": "Yivi verificatecode: %s\nOf direct via een link:\nhttps://privacybydesign.foundation/uitgifte/telefoonnummer#!verify:%s",
     "en": "Yivi verification code: %s\nOr directly via a URL:\nhttps://privacybydesign.foundation/issuance/phonenumber#!verify:%s"
   },
-  "private_key_path": "sk.pem",
+  "private_key_path": "sk.der",
   "server_name": "irma_sms_issuer",
   "human_readable_name": "Yivi",
   "scheme_manager": "irma-demo",