uruk-project / Jwt

JSON Web Token implementation for .Net & .Net Core
MIT License
84 stars 13 forks source link

Bump System.IdentityModel.Tokens.Jwt from 5.3.0 to 5.4.0 #213

Closed dependabot-preview[bot] closed 5 years ago

dependabot-preview[bot] commented 5 years ago

Bumps System.IdentityModel.Tokens.Jwt from 5.3.0 to 5.4.0.

Release notes *Sourced from [System.IdentityModel.Tokens.Jwt's releases](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases).* > ## 5.4.0 > # Features > ### Improvements to non-windows platforms > * RSACryptoServiceProviderProxy is only available on .Net Desktop. > * Support JsonWebKey.CreateECDsa on non-windows platforms. > * Created ECDsaAdapter to abstract differences between versions of .Net. > * Fixed IdentityModel build and test on Unix. > * Fixed signature validation on iOS that appears to have been introduced in 5.3.0. > ### Improvements to JsonWebToken and JsonWebTokenHandler > * Added TryGetValue methods in JsonWebToken. > * Public methods of JsonWebTokenHandler are now virtual. > * Added new API to JsonWebTokenHandler that takes a SecurityTokenDescriptor. > * SecurityTokenDescriptor.Claims property can be used to specify claims in JWT. > ### Continued removal of newtonsoft > ### Build and Test > * ApiCompatibility testing has been improved testing all platforms. > * Build scripts have been simplified > > * Click [here]( https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/milestone/28?closed=1) for a full list of issues that were fixed.
Commits - [`4d5d77d`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/4d5d77d95507239d3d840c0ecbe84a342013b066) updated to version 6.0.0 - [`3da57f2`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/3da57f200ec1e1de066b32466113420b27d3784a) Improved VerifyResourceUsage.pl so that it now checks log message usage acros... - [`1656649`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/165664980f81e6cf83b09d20f341cd00d3d32cc5) use XmlTextReader, special case netstandard 1.4 - [`b086705`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/b0867057c1b98ead823eed37869b5656ed2ba695) Remove Newtonsoft.Json dependency ([#1091](https://github-redirect.dependabot.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/issues/1091)) - [`4877582`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/487758203821ddfccd152bf570686fa454885c44) Renamed TokenContext to CallContext ([#1089](https://github-redirect.dependabot.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/issues/1089)) - [`45dfc28`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/45dfc2866d1d9dca1c25a25b152d48e46348a52c) Refine ApiCompat - [`760fa30`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/760fa3046cc36591c9f7835031745fcd625cf6ec) Changed the X509SecurityKey.KeyId property so that it's equal to the X5t prop... - [`7742fd3`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/7742fd30d8b81a9eca1f31e0f769f090db33fb40) Added a new API to JsonWebTokenHandler that takes in a SecurityTokenDescripto... - [`6f150eb`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/6f150eb38c871b8caa7d17394d64ed8a07b56491) JsonWebTokenHandler.ValidateToken now uses the IsValid property of TokenValid... - [`9a463c5`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/9a463c51efee2e2bc636b1713808170bba491cd2) Moved TokenContext and TokenValidationResult into M.IM.Tokens ([#1073](https://github-redirect.dependabot.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/issues/1073)) - Additional commits viewable in [compare view](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/compare/5.3.0...5.4.0)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will not automatically merge this PR because it includes a minor update to a production dependency.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.
ycrumeyrolle commented 5 years ago

@dependabot rebase