New
0.12.6
This patch release:
- Ensures that after successful JWS signature verification, an application-configured Base64Url
Decoderoutput is used to construct aJwsinstance (instead of JJWT's default decoder). See https://github.com/jwtk/jjwt/issues/947. - Fixes a decompression memory leak in concurrent/multi-threaded environments introduced in 0.12.0 when decompressing JWTs with a
zipheader ofGZIP. See https://github.com/jwtk/jjwt/issues/949. - Upgrades BouncyCastle to 1.78 via https://github.com/jwtk/jjwt/pull/941
- Usees Acsiidoc as README format by @bdemers in https://github.com/jwtk/jjwt/pull/777
- Allows using GenericSecret for HmacSHA* algorithms by @mnylen in https://github.com/jwtk/jjwt/pull/935
- Enables JWE arbitrary content compression by @mnylen in https://github.com/jwtk/jjwt/pull/937
New Contributors
- @mnylen made their first contribution in https://github.com/jwtk/jjwt/pull/935
Full Changelog: https://github.com/jwtk/jjwt/compare/0.12.5...0.12.6