Releases: telicent-oss/jwt-servlet-auth
Releases · telicent-oss/jwt-servlet-auth
0.17.5
0.17.4
Version 0.17.4
- Build improvements
- Various build and test dependencies upgraded to latest available
0.17.3
Version 0.17.3
- Build improvements:
- Jackson upgraded to 2.18.0
- Various build and test dependencies upgraded to latest available
0.17.2
Version 0.17.2
- Build improvements:
- Automated build pipeline now ensures that Release PRs are automatically generated
- Various build and test dependencies upgraded to latest available
0.17.1
Version 0.17.1
- Build improvements:
- Apache Commons IO upgraded to 2.17.0
0.17.0
Version 0.17.0
- Filter improvements:
- A cache is now used to rate limit the frequency of warnings issued when a request goes to a path that has been
excluded from authentication by configuration.
This prevents these warnings from dominating the logs when used on
things like health status endpoints that are being regularly pinged by automated monitoring tools. - Improved documentation around filter exclusions
- A cache is now used to rate limit the frequency of warnings issued when a request goes to a path that has been
- Build improvements:
- Various build and test dependencies upgraded to latest available
0.16.0
Version 0.16.0
- Security fixes:
- Fixes a theoretical vulnerability where HTTP response/request splitting could occur if a malicious user was either
able to control server configuration, or the filter was deployed in a server runtime that applied insufficient
Request URI sanitisation. - Fixes a potential information disclosure vulnerability where raw error messages were sent to users in the event of
unexpected authentication errors.
- Fixes a theoretical vulnerability where HTTP response/request splitting could occur if a malicious user was either
- Build improvements:
- Bumped Apache Commons Lang to 3.17.0
- Various build and test dependencies upgraded to latest available
0.15.3
Version 0.15.3
- Build improvements:
- Bumped Apache Commons Lang to 3.15.0
- Various build and test dependencies upgraded to latest available
0.15.2
Version 0.15.2
- Build improvements:
- Bumped Jackson to 2.17.2
- Various build and test dependencies upgraded to latest available
0.15.1
Version 0.15.1
- Build improvements:
- Bumped JJWT to 0.12.6
- Various build plugins updated to latest available