dniel / traefik-forward-auth0

A backend for performing forward authentication with Auth0 using the Traefik reverse proxy.
GNU General Public License v3.0
85 stars 15 forks source link

Update dependency com.auth0:java-jwt to v3.19.4 #279

Open renovate[bot] opened 3 years ago

renovate[bot] commented 3 years ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.auth0:java-jwt 3.10.3 -> 3.19.4 age adoption passing confidence

Release Notes

auth0/java-jwt (com.auth0:java-jwt) ### [`v3.19.4`](https://togithub.com/auth0/java-jwt/releases/tag/3.19.4) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.19.3...3.19.4) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.19.3...3.19.4) This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices. Please review [the README note for additional details.](https://togithub.com/auth0/java-jwt/blob/v3/README.md) ### [`v3.19.3`](https://togithub.com/auth0/java-jwt/releases/tag/3.19.3) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.19.2...3.19.3) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.19.2...3.19.3) **Security** - Update com.fasterxml.jackson.core:jackson-databind to 2.13.4.2 [#​631](https://togithub.com/auth0/java-jwt/pull/631) ([jimmyjames](https://togithub.com/jimmyjames)) ### [`v3.19.2`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3192-2022-05-05) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.19.1...3.19.2) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.19.1...3.19.2) **Security** - \[SDK-3311] Added protection against CVE-2022-21449 [#​579](https://togithub.com/auth0/java-jwt/pull/579) ([poovamraj](https://togithub.com/poovamraj)) ### [`v3.19.1`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3191-2022-03-30) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.19.0...3.19.1) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.19.0...3.19.1) **Security** - Security: Bump `jackson-databind` to 2.13.2.2 [#​566](https://togithub.com/auth0/java-jwt/pull/566) ([evansims](https://togithub.com/evansims)) ### [`v3.19.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3190-2022-03-14) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.18.3...3.19.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.18.3...3.19.0) **Deprecated** - Deprecate ES256K Algorithm [#​543](https://togithub.com/auth0/java-jwt/pull/543) ([poovamraj](https://togithub.com/poovamraj)) **Fixed** - fix typos in JWTVerifier#verify docstring [#​526](https://togithub.com/auth0/java-jwt/pull/526) ([OdunlamiZO](https://togithub.com/OdunlamiZO)) **Security** - Bump `jackson-databind` dependency to 2.13.2 [#​542](https://togithub.com/auth0/java-jwt/pull/542) ([evansims](https://togithub.com/evansims)) ### [`v3.18.3`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3183-2022-01-13) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.18.2...3.18.3) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.18.2...3.18.3) **Security** - Update jackson dependency [#​523](https://togithub.com/auth0/java-jwt/pull/523) ([poovamraj](https://togithub.com/poovamraj)) ### [`v3.18.2`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3182-2021-09-16) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.18.1...3.18.2) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.18.1...3.18.2) **Fixed** - \[SDK-2758] Restore withIssuer [#​513](https://togithub.com/auth0/java-jwt/pull/513) ([jimmyjames](https://togithub.com/jimmyjames)) - \[SDK-2751] Serialize audience claim when a List [#​512](https://togithub.com/auth0/java-jwt/pull/512) ([jimmyjames](https://togithub.com/jimmyjames)) ### [`v3.18.1`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3181-2021-07-06) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.18.0...3.18.1) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.18.0...3.18.1) **Fixed** - Fix min JDK version regression [#​504](https://togithub.com/auth0/java-jwt/pull/504) ([lbalmaceda](https://togithub.com/lbalmaceda)) ### [`v3.18.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3180-2021-07-05) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.17.0...3.18.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.17.0...3.18.0) **Changed** - Update OSS release plugin version [#​501](https://togithub.com/auth0/java-jwt/pull/501) ([lbalmaceda](https://togithub.com/lbalmaceda)) ### [`v3.17.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3170-2021-06-25) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.16.0...3.17.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.16.0...3.17.0) **Added** - Add module system support [#​484](https://togithub.com/auth0/java-jwt/pull/484) ([XakepSDK](https://togithub.com/XakepSDK)) ### [`v3.16.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3160-2021-05-10) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.15.0...3.16.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.15.0...3.16.0) **Changed** - Improve Javadoc generation [#​496](https://togithub.com/auth0/java-jwt/pull/496) ([Marcono1234](https://togithub.com/Marcono1234)) - Add package-info.java for internal `impl` package [#​495](https://togithub.com/auth0/java-jwt/pull/495) ([Marcono1234](https://togithub.com/Marcono1234)) ### [`v3.15.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3150-2021-04-05) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.14.0...3.15.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.14.0...3.15.0) **Changed** - Remove jcenter [#​482](https://togithub.com/auth0/java-jwt/pull/482) ([jimmyjames](https://togithub.com/jimmyjames)) - Move form commons-codec Base64 to j.u.Base64 [#​478](https://togithub.com/auth0/java-jwt/pull/478) ([XakepSDK](https://togithub.com/XakepSDK)) ### [`v3.14.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3140-2021-02-26) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.13.0...3.14.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.13.0...3.14.0) **Added** - Add withPayload to JWTCreator.Builder [#​475](https://togithub.com/auth0/java-jwt/pull/475) ([jimmyjames](https://togithub.com/jimmyjames)) ### [`v3.13.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3130-2021-02-05) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.12.1...3.13.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.12.1...3.13.0) **Added** - Add ability to verify audience contains at least one of those expected [#​472](https://togithub.com/auth0/java-jwt/pull/472) ([jimmyjames](https://togithub.com/jimmyjames)) - Add toString to Claim objects \[SDK-2225] [#​469](https://togithub.com/auth0/java-jwt/pull/469) ([jimmyjames](https://togithub.com/jimmyjames)) ### [`v3.12.1`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3121-2021-01-20) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.12.0...3.12.1) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.12.0...3.12.1) **Changed** - Update jackson-databind to 2.11.0 [#​464](https://togithub.com/auth0/java-jwt/pull/464) ([darveshsingh](https://togithub.com/darveshsingh)) ### [`v3.12.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3120-2020-12-18) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.11.0...3.12.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.11.0...3.12.0) **Changed** - Thread-safe classes should be Shared statically [#​462](https://togithub.com/auth0/java-jwt/pull/462) ([LeeHainie](https://togithub.com/LeeHainie)) **Security** - Update jackson-databind to 2.10.5.1 (fixes CVE-2020-25649) [#​463](https://togithub.com/auth0/java-jwt/pull/463) ([overheadhunter](https://togithub.com/overheadhunter)) **Breaking changes** - Target Java 8 [#​455](https://togithub.com/auth0/java-jwt/pull/455) ([lbalmaceda](https://togithub.com/lbalmaceda)) ### [`v3.11.0`](https://togithub.com/auth0/java-jwt/blob/HEAD/CHANGELOG.md#3110-2020-09-25) [Compare Source](https://togithub.com/auth0/java-jwt/compare/3.10.3...3.11.0) [Full Changelog](https://togithub.com/auth0/java-jwt/compare/3.10.3...3.11.0) **Added** - Add ability to verify claim presence [#​442](https://togithub.com/auth0/java-jwt/pull/442) ([jimmyjames](https://togithub.com/jimmyjames)) - Add Support for secp256k1 algorithms (AKA ES256K) [#​439](https://togithub.com/auth0/java-jwt/pull/439) ([jimmyjames](https://togithub.com/jimmyjames)) **Fixed** - Fix and document thread-safety [#​427](https://togithub.com/auth0/java-jwt/pull/427) ([lbalmaceda](https://togithub.com/lbalmaceda)) - Wrap IllegalArgumentException into JWTDecodeException [#​426](https://togithub.com/auth0/java-jwt/pull/426) ([lbalmaceda](https://togithub.com/lbalmaceda))

Configuration

šŸ“… Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

šŸš¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.

ā™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

šŸ”• Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

sonarcloud[bot] commented 3 years ago

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities (and Security Hotspot 0 Security Hotspots to review)
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

sonarcloud[bot] commented 3 years ago

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

sonarcloud[bot] commented 3 years ago

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

sonarcloud[bot] commented 3 years ago

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication