search

fernet / spec

Spec and acceptance tests for the Fernet format.
435 stars 43 forks source link

Feedback on Java 8 Implementation #21

Open l0s opened 7 years ago

l0s commented 7 years ago

I would appreciate some feedback on this Java 8 implementation. Although #19 also defines a Java implementation, I sought to create one that leverages new language features in Java 8 to avoid introducing any dependencies (avoid dependency hell) and to provide better type safety (through the new time objects) when integrating with other Java code.

This implementation also makes it easy to plug in custom payload validation as well as TTL and clock skew rules.

This implementation has been tested against all of the scenarios in the spec and the effectiveness of the tests are measured with mutation testing. I also provide examples of how to use this library to secure a REST API built using JAX-RS.

I would appreciate some feedback prior to releasing version 1.0.

l0s commented 7 years ago

I'm not sure if anyone is following this, but I just wanted to mention that I plan to release version 1.0 soon. I will, of course, still be open to feedback afterward.