diff --git a/3.8.3.tar.gz b/3.8.3.tar.gz deleted file mode 100644 index b49f2c7..0000000 --- a/3.8.3.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:c92783f373c43c061a7b1aed77de11a1bcd9354bd8ff8aa1302fe2fd205bc1d0 -size 128628 diff --git a/4.4.0.tar.gz b/4.4.0.tar.gz new file mode 100644 index 0000000..a209a0a --- /dev/null +++ b/4.4.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:dc5d9809df1e6cc094e9ccf8e793d7ea5b5388b057eb35640e7f7c59e843b48c +size 161373 diff --git a/java-jwt-3.8.3.pom b/java-jwt-4.4.0.pom similarity index 86% rename from java-jwt-3.8.3.pom rename to java-jwt-4.4.0.pom index 0652778..c3fa1e1 100644 --- a/java-jwt-3.8.3.pom +++ b/java-jwt-4.4.0.pom @@ -3,7 +3,7 @@ 4.0.0 com.auth0 java-jwt - 3.8.3 + 4.4.0 jar java jwt Java implementation of JSON Web Token (JWT) @@ -29,13 +29,7 @@ com.fasterxml.jackson.core jackson-databind - 2.10.0.pr3 - runtime - - - commons-codec - commons-codec - 1.12 + 2.14.2 runtime diff --git a/java-jwt-build.xml b/java-jwt-build.xml new file mode 100644 index 0000000..5054486 --- /dev/null +++ b/java-jwt-build.xml @@ -0,0 +1,143 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/java-jwt.changes b/java-jwt.changes index ee69460..f787e9b 100644 --- a/java-jwt.changes +++ b/java-jwt.changes @@ -1,3 +1,43 @@ +------------------------------------------------------------------- +Thu Oct 10 14:48:25 UTC 2024 - Fridrich Strba + +- Upgrade to version 4.4.0 + * Main features of 4.x + + Predicates based claim verification + + Support for Instant API and Lambda functions + + Improved Exceptions API + + Consistent null handling + * Breaking changes: + + Make JWT constants final values + * Security: + + Bump com.fasterxml.jackson.core:jackson-databind to 2.13.4.2 + CVE-2022-42003 + * Additions: + + Add integration with our Shipping orb + + Add Ship CLI support + + Provide straightforward example for JWKS + * Changes: + + Update to gradle 6.9.2 + + Update OSS plugin to latest + + SDK-3466 Upgrade Codecov + + Update README.md + + Re-enable japicmp API diff checking + + Update .shiprc to only update lib version in build.gradle + + Optimise TokenUtils parsing + + Update Circle Ship Orb configuration + + Improve JWT parse/decode performance + + Add support for passing json values for header and payload + + Preserve insertion order for claims + + Update Jackson to 2.14.2 + * Fixed + + Check for null token before splitting + + [SDK-3816] Update docs for verification thread-safety + + Update Claim#asString documentation + + Fix for exp claim considered valid if equal to now +- Build also module-info.java useful for modular javas +- Change the build system to ant. Upstream anyway uses gradle and + ant is more flexible then maven for this case + ------------------------------------------------------------------- Thu Oct 26 04:35:00 UTC 2023 - Fridrich Strba diff --git a/java-jwt.spec b/java-jwt.spec index 8ea490d..bff7c77 100644 --- a/java-jwt.spec +++ b/java-jwt.spec @@ -1,7 +1,7 @@ # # spec file for package java-jwt # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,20 +16,27 @@ # +# The automatic requires would be java-headless >= 9, but the +# binaries are java 8 compatible +%define __requires_exclude java-headless Name: java-jwt -Version: 3.8.3 +Version: 4.4.0 Release: 0 Summary: Java JWT License: MIT Group: Development/Libraries/Java URL: https://github.com/auth0/%{name} Source0: https://github.com/auth0/%{name}/archive/%{version}.tar.gz -Source1: https://repo1.maven.org/maven2/com/auth0/%{name}/%{version}/%{name}-%{version}.pom +Source1: %{name}-build.xml +Source2: https://repo1.maven.org/maven2/com/auth0/%{name}/%{version}/%{name}-%{version}.pom +BuildRequires: ant BuildRequires: fdupes -BuildRequires: java-devel >= 1.8 -BuildRequires: maven-local -BuildRequires: mvn(com.fasterxml.jackson.core:jackson-databind) -BuildRequires: mvn(commons-codec:commons-codec) +BuildRequires: jackson-annotations +BuildRequires: jackson-core +BuildRequires: jackson-databind +BuildRequires: java-devel >= 9 +BuildRequires: javapackages-local >= 6 +Requires: java-headless >= 1.8 BuildArch: noarch %description @@ -44,30 +51,31 @@ API documentation for the Logback library %prep %setup -q -cp %{SOURCE1} lib/pom.xml - -%pom_xpath_remove pom:dependency/pom:scope lib +cp %{SOURCE1} lib/build.xml %build -pushd lib -%{mvn_build} -f -- \ -%if %{?pkg_vcmp:%pkg_vcmp java-devel >= 9}%{!?pkg_vcmp:0} - -Dmaven.compiler.release=8 \ -%endif - -Dmaven.compiler.source=8 -Dmaven.compiler.target=8 -Dsource=8 -popd +mkdir -p lib/lib +build-jar-repository -s lib/lib jackson-annotations jackson-core jackson-databind +ant -f lib/build.xml jar javadoc %install -pushd lib -%mvn_install -%fdupes -s %{buildroot}%{_javadocdir} -popd +install -dm 0755 %{buildroot}%{_javadir} +install -pm 0644 lib/target/%{name}-%{version}.jar %{buildroot}%{_javadir}/%{name}.jar -%files -f lib/.mfiles +install -dm 0755 %{buildroot}%{_mavenpomdir} +%{mvn_install_pom} %{SOURCE2} %{buildroot}%{_mavenpomdir}/%{name}.pom +%add_maven_depmap %{name}.pom %{name}.jar + +install -dm 0755 %{buildroot}%{_javadocdir} +cp -r lib/target/site/apidocs %{buildroot}%{_javadocdir}/%{name} +%fdupes -s %{buildroot}%{_javadocdir} + +%files -f .mfiles %license LICENSE %doc README.md -%files javadoc -f lib/.mfiles-javadoc +%files javadoc +%{_javadocdir}/%{name} %license LICENSE %changelog