Skip to content

Releases: telicent-oss/jwt-servlet-auth

0.17.5

10 Dec 14:59
74f87a3
Compare
Choose a tag to compare

Version 0.17.5

  • Build improvements:
    • Apache Commons IO upgraded to 2.18.0
    • Jackson upgraded to 2.18.2
    • Various build and test dependencies upgraded to latest available

0.17.4

15 Oct 14:16
052f990
Compare
Choose a tag to compare

Version 0.17.4

  • Build improvements
    • Various build and test dependencies upgraded to latest available

0.17.3

02 Oct 13:50
b90d8d1
Compare
Choose a tag to compare

Version 0.17.3

  • Build improvements:
    • Jackson upgraded to 2.18.0
    • Various build and test dependencies upgraded to latest available

0.17.2

25 Sep 13:10
1dbe236
Compare
Choose a tag to compare

Version 0.17.2

  • Build improvements:
    • Automated build pipeline now ensures that Release PRs are automatically generated
    • Various build and test dependencies upgraded to latest available

0.17.1

25 Sep 12:57
e6683cc
Compare
Choose a tag to compare

Version 0.17.1

  • Build improvements:
    • Apache Commons IO upgraded to 2.17.0

0.17.0

20 Sep 09:33
b323d15
Compare
Choose a tag to compare

Version 0.17.0

  • Filter improvements:
    • A cache is now used to rate limit the frequency of warnings issued when a request goes to a path that has been
      excluded from authentication by configuration.
      This prevents these warnings from dominating the logs when used on
      things like health status endpoints that are being regularly pinged by automated monitoring tools.
    • Improved documentation around filter exclusions
  • Build improvements:
    • Various build and test dependencies upgraded to latest available

0.16.0

02 Sep 10:29
59981f7
Compare
Choose a tag to compare

Version 0.16.0

  • Security fixes:
    • Fixes a theoretical vulnerability where HTTP response/request splitting could occur if a malicious user was either
      able to control server configuration, or the filter was deployed in a server runtime that applied insufficient
      Request URI sanitisation.
    • Fixes a potential information disclosure vulnerability where raw error messages were sent to users in the event of
      unexpected authentication errors.
  • Build improvements:
    • Bumped Apache Commons Lang to 3.17.0
    • Various build and test dependencies upgraded to latest available

0.15.3

29 Jul 09:00
8580d75
Compare
Choose a tag to compare

Version 0.15.3

  • Build improvements:
    • Bumped Apache Commons Lang to 3.15.0
    • Various build and test dependencies upgraded to latest available

0.15.2

12 Jul 09:17
ea3c040
Compare
Choose a tag to compare

Version 0.15.2

  • Build improvements:
    • Bumped Jackson to 2.17.2
    • Various build and test dependencies upgraded to latest available

0.15.1

03 Jul 10:02
772a50f
Compare
Choose a tag to compare

Version 0.15.1

  • Build improvements:
    • Bumped JJWT to 0.12.6
    • Various build plugins updated to latest available