v0.8.0

API Changes

• Add method fetchJwtSvids to JwtSvidSource and WorkloadApiClient interfaces (#90)

Dependencies

• Upgrade gRPC dependencies to 1.46.0 (#91)
• Upgrade Nimbus JWT-JOSE library dependency to 9.22 (#92)

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.8.0</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.8.0</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.0'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.0'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.8.0/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.0'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.7.0

API Changes

• Method TrustDomain.of was renamed to TrustDomain.parse (#74)

New Features

• Add FetchX509Bundles method to Workload API client (#63)
• Add support to the SpiffeTrustManager for a SpiffeIdVerifier callback. (#77)
• Add method TrustDomain.fromSegments (#74)

Bug Fixes

• Remove private/public key match verification that was causing long delays in AWS machines. (#56)

Behavior Changes

• Strict SPIFFE ID parsing (#74)
• Validate JWT 'typ' header. (#62)
• Validate 'alg' header when parsing JWT-SVIDs from tokens. (#60)

Dependencies

• Upgrade gRPC dependencies to 1.40.1 (#81)
• Upgrade Nimbus JWT-JOSE library dependency to 9.13 (#82)

Documentation

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.7.0</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.7.0</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.7.0'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.7.0'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.7.0/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.7.0'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.6.3

API Changes

New Features

Bug Fixes

Behavior Changes

Dependencies

• Upgrade gRPC dependencies to 1.33.0 (#40)
• Upgrade protobuf-gradle-plugin to 0.8.13 (#40)
• Upgrade com.google.protobuf:protoc to 3.13 (#40)
• Upgrade Nimbus JWT-JOSE library dependency to 9.1.1 (#41)
• Upgrade lombok and test library dependencies (#42)

Documentation

• Minor amendments in READMEs and javadocs (#43)

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.3</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.3</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.6.3'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.6.3'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.3</version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.6.3'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.6.2

What's changed

• Improve how the SpiffeTrustManager is configured to either validate SPIFFE IDs or acceptAny.
• Validate the SslContextOptions.
• Add visibility to SPIFFE ID validation errors by logging warnings.
• Improve logging of the X509Source update.

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.2</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.2</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.6.2'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.6.2'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.2</version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.6.2'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.6.1

Bug fix and dependencies updates

What's changed

• Fix jwt-svid audience validation.
• Upgrade gprc-java dependency to 1.31.1
• Upgrade jwt nimbus library dependency to 8.20.

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.1</version>
</dependency>
<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.1</version>
</dependency>

Gradle

implementation 'io.spiffe:java-spiffe-core:0.6.1'
implementation 'io.spiffe:java-spiffe-provider:0.6.1'

MacOS Support:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.1</version>
  <scope>runtime</scope>
</dependency>

or:

runtimeOnly 'io.spiffe:grpc-netty-macos:0.6.1'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.6.0

Library Refactor: new X.509 and JWT functionality.

What's changed

Complete refactor of the interfaces and implementations for X.509 SVIDs and bundles.
Added JWT SVID functionality.
Improved robustness: validations for SPIFFE IDs and Socket Endpoint Addresses.

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.0</version>
</dependency>
<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.0</version>
</dependency>

Gradle

implementation 'io.spiffe:java-spiffe-core:0.6.0'
implementation 'io.spiffe:java-spiffe-provider:0.6.0'

MacOS Support:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.0</version>
  <scope>runtime</scope>
</dependency>

or:

runtimeOnly 'io.spiffe:grpc-netty-macos:0.6.0'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.5.1

• Avoid netty channel warning by setting unknown channel option to null: #24