v0.8.7

Dependencies updates

• Bump grpcVersion from 1.62.2 to 1.66.0 (#248)
• Bump io.netty:netty-transport-native-kqueue from 4.1.107.Final to 4.1.113.Final (#260)
• Bump commons-cli:commons-cli from 1.6.0 to 1.9.0 (#258)
• Bump com.nimbusds:nimbus-jose-jwt from 9.37.3 to 9.41.1 (#259)
• Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 (#255)
• Bump org.projectlombok:lombok from 1.18.30 to 1.18.34 (#253)
• Bump commons-validator:commons-validator from 1.8.0 to 1.9.0 (#251)
• Bump jupiterVersion from 5.10.2 to 5.11.0 (#254)

Full Changelog: v0.8.6...v0.8.7

v0.8.6

Dependency updates

• Bump com.google.protobuf:protoc from 3.25.2 to 3.25.3 (#218)
• Bump io.grpc:grpc-protobuf, io.grpc:grpc-stub, io.grpc:grpc-netty, io.grpc:grpc-netty-shaded,
  and io.grpc:protoc-gen-grpc-java from 1.61.1 to 1.62.2 (#222)
• Bump io.netty:netty-transport-native-kqueue from 4.1.106.Final to 4.1.107.Final (#205)

CI/CD Improvements

Automated build and publish process via GitHub Actions.

v0.8.5

Added

• Docker image and CI workflow for java-spiffe-helper (#187)

Changed

• Updated Gradle to version 8.5 (#201)
• Various enhancements in java-spiffe-helper (#199)

Fixed

• Addressed a Fat Jar Assembly issue. (#198)

Dependency updates

• Bump io.grpc:grpc-protobuf and io.grpc:grpc-stub from 1.54.0 to 1.61.1 (#202)
• Bump commons-validator:commons-validator from 1.7. to 1.8.0 (#197)
• Bump commons-cli:commons-cli from 1.5.0 to 1.6.0 (#196)
• Bump com.google.protobuf:protoc from 3.21.12 to 3.25.2 (#193)
• Bump io.netty:netty-transport-native-kqueue from 4.1.91.Final to 4.1.106.Final (#192)
• Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0 (#189)
• Bump com.nimbusds:nimbus-jose-jwt from 9.31 to 9.37.3 (#184)
• Bump org.projectlombok:lombok from 1.18.26 to 1.18.30 (#170)
• Bump com.google.protobuf:protobuf-gradle-plugin from 0.9.2 to 0.9.4 (#153)

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.8.5</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.8.5</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.5'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.5'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.8.5</version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.5'

MacOS Aarch64 Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos-aarch64</artifactId>
  <version>0.8.5/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.5'

Docker images

java-spiffe-helper image available on ghcr.io/spiffe/java-spiffe-helper:0.8.5.

v0.8.4

Changelog

[0.8.4] - 2023-04-14

Dependencies updates

• Bump commons-cli:commons-cli from 1.4 to 1.5.0 (#124)
• Bump com.google.osdetector from 1.6.2 to 1.7.3 (#125)
• Bump org.apache.commons:commons-lang3 from 3.11 to 3.12.0 (#129)
• Bump org.projectlombok:lombok from 1.18.20 to 1.18.26 (#128)

Dependencies

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.8.4</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.8.4</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.4'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.4'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.8.4/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.4'

MacOS Aarch64 Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos-aarch64</artifactId>
  <version>0.8.4/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.4'

v0.8.3

Changelog

[0.8.3] - 2023-04-13

Added

• A JwtSource implementation,CachedJwtSource, that caches the JWT SVIDs based on their subjects and audiences (#116)
• Support for the hint field in the SVIDs retrieved by Workload API client (#114)

Dependencies

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.8.3</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.8.3</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.3'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.3'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.8.3/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.3'

MacOS Aarch64 Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos-aarch64</artifactId>
  <version>0.8.3/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.3'

Contributors

@guilhermocc

v0.8.2

Changes

Fixes

• Fix memory leak (#111)

Dependencies

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.8.2</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.8.2</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.2'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.2'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.8.2/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.2'

MacOS Aarch64 Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos-aarch64</artifactId>
  <version>0.8.2/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.2'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.8.1

Changes

• Add support for Macos M1 (Aarch-64 architecture) (#101).
  Thanks to @thomasrichner-oviva for this contribution.

Fixes

• Fix error that was logged when closing DefaultJwtSource and DefaultX509Source (#100)

Dependencies

• Upgrade gRPC dependencies to 1.51.1 (#101)
• Upgrade Nimbus JWT-JOSE library dependency to 9.28 (#103)

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.8.1</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.8.1</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.1'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.1'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.8.1/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.1'

MacOS Aarch64 Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos-aarch64</artifactId>
  <version>0.8.1/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.1'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.8.0

API Changes

• Add method fetchJwtSvids to JwtSvidSource and WorkloadApiClient interfaces (#90)

Dependencies

• Upgrade gRPC dependencies to 1.46.0 (#91)
• Upgrade Nimbus JWT-JOSE library dependency to 9.22 (#92)

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.8.0</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.8.0</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.0'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.0'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.8.0/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.0'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.7.0

API Changes

• Method TrustDomain.of was renamed to TrustDomain.parse (#74)

New Features

• Add FetchX509Bundles method to Workload API client (#63)
• Add support to the SpiffeTrustManager for a SpiffeIdVerifier callback. (#77)
• Add method TrustDomain.fromSegments (#74)

Bug Fixes

• Remove private/public key match verification that was causing long delays in AWS machines. (#56)

Behavior Changes

• Strict SPIFFE ID parsing (#74)
• Validate JWT 'typ' header. (#62)
• Validate 'alg' header when parsing JWT-SVIDs from tokens. (#60)

Dependencies

• Upgrade gRPC dependencies to 1.40.1 (#81)
• Upgrade Nimbus JWT-JOSE library dependency to 9.13 (#82)

Documentation

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.7.0</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.7.0</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.7.0'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.7.0'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.7.0/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.7.0'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.6.3

API Changes

New Features

Bug Fixes

Behavior Changes

Dependencies

• Upgrade gRPC dependencies to 1.33.0 (#40)
• Upgrade protobuf-gradle-plugin to 0.8.13 (#40)
• Upgrade com.google.protobuf:protoc to 3.13 (#40)
• Upgrade Nimbus JWT-JOSE library dependency to 9.1.1 (#41)
• Upgrade lombok and test library dependencies (#42)

Documentation

• Minor amendments in READMEs and javadocs (#43)

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.3</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.3</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.6.3'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.6.3'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.3</version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.6.3'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.