From ea4fd7f65e84088dace4cc2d7a57894567d8dac1450e6c1dceb28b4c0314a10a Mon Sep 17 00:00:00 2001 From: Fridrich Strba Date: Tue, 8 Oct 2024 20:31:56 +0000 Subject: [PATCH 1/3] OBS-URL: https://build.opensuse.org/package/show/Java:packages/java-jwt?expand=0&rev=5 --- .gitattributes | 23 +++++++++++++++ .gitignore | 1 + 3.8.3.tar.gz | 3 ++ 4.4.0.tar.gz | 3 ++ java-jwt-3.8.3.pom | 54 +++++++++++++++++++++++++++++++++++ java-jwt-4.4.0.pom | 48 +++++++++++++++++++++++++++++++ java-jwt.changes | 9 ++++++ java-jwt.spec | 70 ++++++++++++++++++++++++++++++++++++++++++++++ 8 files changed, 211 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 3.8.3.tar.gz create mode 100644 4.4.0.tar.gz create mode 100644 java-jwt-3.8.3.pom create mode 100644 java-jwt-4.4.0.pom create mode 100644 java-jwt.changes create mode 100644 java-jwt.spec diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/3.8.3.tar.gz b/3.8.3.tar.gz new file mode 100644 index 0000000..b49f2c7 --- /dev/null +++ b/3.8.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c92783f373c43c061a7b1aed77de11a1bcd9354bd8ff8aa1302fe2fd205bc1d0 +size 128628 diff --git a/4.4.0.tar.gz b/4.4.0.tar.gz new file mode 100644 index 0000000..a209a0a --- /dev/null +++ b/4.4.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:dc5d9809df1e6cc094e9ccf8e793d7ea5b5388b057eb35640e7f7c59e843b48c +size 161373 diff --git a/java-jwt-3.8.3.pom b/java-jwt-3.8.3.pom new file mode 100644 index 0000000..0652778 --- /dev/null +++ b/java-jwt-3.8.3.pom @@ -0,0 +1,54 @@ + + + 4.0.0 + com.auth0 + java-jwt + 3.8.3 + jar + java jwt + Java implementation of JSON Web Token (JWT) + https://github.com/auth0/java-jwt + + + auth0 + Auth0 + oss@auth0.com + + + hzalaz + Hernan Zalazar + hernan@auth0.com + + + lbalmaceda + Luciano Balmaceda + luciano.balmaceda@auth0.com + + + + + com.fasterxml.jackson.core + jackson-databind + 2.10.0.pr3 + runtime + + + commons-codec + commons-codec + 1.12 + runtime + + + + + The MIT License (MIT) + https://raw.githubusercontent.com/auth0/java-jwt/master/LICENSE + repo + + + + scm:git@github.com:auth0/java-jwt.git + scm:git@github.com:auth0/java-jwt.git + https://github.com/auth0/java-jwt + + diff --git a/java-jwt-4.4.0.pom b/java-jwt-4.4.0.pom new file mode 100644 index 0000000..c3fa1e1 --- /dev/null +++ b/java-jwt-4.4.0.pom @@ -0,0 +1,48 @@ + + + 4.0.0 + com.auth0 + java-jwt + 4.4.0 + jar + java jwt + Java implementation of JSON Web Token (JWT) + https://github.com/auth0/java-jwt + + + auth0 + Auth0 + oss@auth0.com + + + hzalaz + Hernan Zalazar + hernan@auth0.com + + + lbalmaceda + Luciano Balmaceda + luciano.balmaceda@auth0.com + + + + + com.fasterxml.jackson.core + jackson-databind + 2.14.2 + runtime + + + + + The MIT License (MIT) + https://raw.githubusercontent.com/auth0/java-jwt/master/LICENSE + repo + + + + scm:git@github.com:auth0/java-jwt.git + scm:git@github.com:auth0/java-jwt.git + https://github.com/auth0/java-jwt + + diff --git a/java-jwt.changes b/java-jwt.changes new file mode 100644 index 0000000..ee69460 --- /dev/null +++ b/java-jwt.changes @@ -0,0 +1,9 @@ +------------------------------------------------------------------- +Thu Oct 26 04:35:00 UTC 2023 - Fridrich Strba + +- Build with source and target levels 8 + +------------------------------------------------------------------- +Thu Feb 27 08:53:09 UTC 2020 - Fridrich Strba + +- Initial packaging of java-jwt 3.8.3 diff --git a/java-jwt.spec b/java-jwt.spec new file mode 100644 index 0000000..d21103f --- /dev/null +++ b/java-jwt.spec @@ -0,0 +1,70 @@ +# +# spec file for package java-jwt +# +# Copyright (c) 2024 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +Name: java-jwt +Version: 4.4.0 +Release: 0 +Summary: Java JWT +License: MIT +Group: Development/Libraries/Java +URL: https://github.com/auth0/%{name} +Source0: https://github.com/auth0/%{name}/archive/%{version}.tar.gz +Source1: https://repo1.maven.org/maven2/com/auth0/%{name}/%{version}/%{name}-%{version}.pom +BuildRequires: fdupes +BuildRequires: java-devel >= 1.8 +BuildRequires: maven-local +BuildRequires: mvn(com.fasterxml.jackson.core:jackson-databind) +BuildRequires: mvn(commons-codec:commons-codec) +BuildArch: noarch + +%description +Java implementation of JSON Web Token (JWT) + +%package javadoc +Summary: Javadoc for %{name} +Group: Documentation/HTML + +%description javadoc +API documentation for the Logback library + +%prep +%setup -q +cp %{SOURCE1} lib/pom.xml + +%pom_xpath_remove pom:dependency/pom:scope lib +find lib -name module-info.java -print -delete + +%build +pushd lib +%{mvn_build} -f +popd + +%install +pushd lib +%mvn_install +%fdupes -s %{buildroot}%{_javadocdir} +popd + +%files -f lib/.mfiles +%license LICENSE +%doc README.md + +%files javadoc -f lib/.mfiles-javadoc +%license LICENSE + +%changelog From 175665310098cd249968448798f2a343774af5de915b55c9d32602650eea728e Mon Sep 17 00:00:00 2001 From: Fridrich Strba Date: Thu, 10 Oct 2024 14:46:26 +0000 Subject: [PATCH 2/3] OBS-URL: https://build.opensuse.org/package/show/Java:packages/java-jwt?expand=0&rev=6 --- java-jwt-build.xml | 143 +++++++++++++++++++++++++++++++++++++++++++++ java-jwt.spec | 47 +++++++++------ 2 files changed, 172 insertions(+), 18 deletions(-) create mode 100644 java-jwt-build.xml diff --git a/java-jwt-build.xml b/java-jwt-build.xml new file mode 100644 index 0000000..5054486 --- /dev/null +++ b/java-jwt-build.xml @@ -0,0 +1,143 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/java-jwt.spec b/java-jwt.spec index d21103f..bff7c77 100644 --- a/java-jwt.spec +++ b/java-jwt.spec @@ -16,6 +16,9 @@ # +# The automatic requires would be java-headless >= 9, but the +# binaries are java 8 compatible +%define __requires_exclude java-headless Name: java-jwt Version: 4.4.0 Release: 0 @@ -24,12 +27,16 @@ License: MIT Group: Development/Libraries/Java URL: https://github.com/auth0/%{name} Source0: https://github.com/auth0/%{name}/archive/%{version}.tar.gz -Source1: https://repo1.maven.org/maven2/com/auth0/%{name}/%{version}/%{name}-%{version}.pom +Source1: %{name}-build.xml +Source2: https://repo1.maven.org/maven2/com/auth0/%{name}/%{version}/%{name}-%{version}.pom +BuildRequires: ant BuildRequires: fdupes -BuildRequires: java-devel >= 1.8 -BuildRequires: maven-local -BuildRequires: mvn(com.fasterxml.jackson.core:jackson-databind) -BuildRequires: mvn(commons-codec:commons-codec) +BuildRequires: jackson-annotations +BuildRequires: jackson-core +BuildRequires: jackson-databind +BuildRequires: java-devel >= 9 +BuildRequires: javapackages-local >= 6 +Requires: java-headless >= 1.8 BuildArch: noarch %description @@ -44,27 +51,31 @@ API documentation for the Logback library %prep %setup -q -cp %{SOURCE1} lib/pom.xml - -%pom_xpath_remove pom:dependency/pom:scope lib -find lib -name module-info.java -print -delete +cp %{SOURCE1} lib/build.xml %build -pushd lib -%{mvn_build} -f -popd +mkdir -p lib/lib +build-jar-repository -s lib/lib jackson-annotations jackson-core jackson-databind +ant -f lib/build.xml jar javadoc %install -pushd lib -%mvn_install -%fdupes -s %{buildroot}%{_javadocdir} -popd +install -dm 0755 %{buildroot}%{_javadir} +install -pm 0644 lib/target/%{name}-%{version}.jar %{buildroot}%{_javadir}/%{name}.jar -%files -f lib/.mfiles +install -dm 0755 %{buildroot}%{_mavenpomdir} +%{mvn_install_pom} %{SOURCE2} %{buildroot}%{_mavenpomdir}/%{name}.pom +%add_maven_depmap %{name}.pom %{name}.jar + +install -dm 0755 %{buildroot}%{_javadocdir} +cp -r lib/target/site/apidocs %{buildroot}%{_javadocdir}/%{name} +%fdupes -s %{buildroot}%{_javadocdir} + +%files -f .mfiles %license LICENSE %doc README.md -%files javadoc -f lib/.mfiles-javadoc +%files javadoc +%{_javadocdir}/%{name} %license LICENSE %changelog From 47672b8d70d51b441b68039a445fb4932dd726d0755f7cc6d9f8fca57dabbf78 Mon Sep 17 00:00:00 2001 From: Fridrich Strba Date: Thu, 10 Oct 2024 15:02:12 +0000 Subject: [PATCH 3/3] OBS-URL: https://build.opensuse.org/package/show/Java:packages/java-jwt?expand=0&rev=7 --- java-jwt.changes | 40 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) diff --git a/java-jwt.changes b/java-jwt.changes index ee69460..f787e9b 100644 --- a/java-jwt.changes +++ b/java-jwt.changes @@ -1,3 +1,43 @@ +------------------------------------------------------------------- +Thu Oct 10 14:48:25 UTC 2024 - Fridrich Strba + +- Upgrade to version 4.4.0 + * Main features of 4.x + + Predicates based claim verification + + Support for Instant API and Lambda functions + + Improved Exceptions API + + Consistent null handling + * Breaking changes: + + Make JWT constants final values + * Security: + + Bump com.fasterxml.jackson.core:jackson-databind to 2.13.4.2 + CVE-2022-42003 + * Additions: + + Add integration with our Shipping orb + + Add Ship CLI support + + Provide straightforward example for JWKS + * Changes: + + Update to gradle 6.9.2 + + Update OSS plugin to latest + + SDK-3466 Upgrade Codecov + + Update README.md + + Re-enable japicmp API diff checking + + Update .shiprc to only update lib version in build.gradle + + Optimise TokenUtils parsing + + Update Circle Ship Orb configuration + + Improve JWT parse/decode performance + + Add support for passing json values for header and payload + + Preserve insertion order for claims + + Update Jackson to 2.14.2 + * Fixed + + Check for null token before splitting + + [SDK-3816] Update docs for verification thread-safety + + Update Claim#asString documentation + + Fix for exp claim considered valid if equal to now +- Build also module-info.java useful for modular javas +- Change the build system to ant. Upstream anyway uses gradle and + ant is more flexible then maven for this case + ------------------------------------------------------------------- Thu Oct 26 04:35:00 UTC 2023 - Fridrich Strba