3.8.3

Full Changelog

Security

• Fix: updated jackson-databind to 2.10.0.pr3 to block CVE #356 (danbrodsky)

3.8.2

Full Changelog

Security

• Fix: updated jackson-databind to 2.9.9.3 to block CVE #347 (danbrodsky)

3.8.1

3.8.1 (2019-05-22)

Full Changelog

Security

• Bump dependencies and fix security issue #337 (lbalmaceda)

3.8.0

3.8.0 (2019-03-14)

Full Changelog

Added

• Support multiple issuers #246 #288 (itdevelopmentapps)

3.7.0

3.7.0 (2019-01-29)

Full Changelog

Added

• Performance improvements #255 (skjolber)

3.6.0

3.6.0 (2019-01-24)

Full Changelog

Added

• Allow to skip "issued at" validation #297 (complanboy2)

3.5.0

3.5.0 (2019-01-03)

Full Changelog

Added

• Verify a DecodedJWT #308 (martinoconnor)

Changed

• Add an interface for JWTVerifier. #205 (jebbench)

Fixed

• Remove unnecessary cast between long/double and floor call #296 (jhorstmann)

Security

• Bump jackson-databind to patch security issues #309 (lbalmaceda)

3.4.1

3.4.1 (2018-10-24)

Full Changelog

Security

• Update jackson-databind dependency #292 (lbalmaceda)

3.4.0

3.4.0 (2018-06-13)

Full Changelog

Changed

• Fix for issue #236 - refactored HMACAlgorithm so that it doesn't throw an UnsupportedEncodingException #242 (obecker)
• Throw JWTDecodeException when date claim format is invalid #241 (lbalmaceda)

Security

• Bump Jackson dependency #244 (skjolber)

3.3.0

3.3.0 (2017-11-06)

Full Changelog
Closed issues

• Wrong ES256 signature length #187

Fixed

• Rework ECDSA #212 (lbalmaceda)
• Instantiate exception only when required #198 (rumdidumdum)