This is a major release with new features and breaking changes:
New features
Along with HMAC signed tokens, now you can:
- verify RSA signed tokens, validated against a keystore containing a valid public key.
- verify OpenID Connect ID Tokens, validated against public keys downloaded from a valid JWKS uri.
Breaking changes
- upgrade Java version to 8
JwtTokenVerifier
: changed package and removed some methods in favour ofJwtAdapter
JwtTokenBuilder
: removed some methodsJwtTokenValve
: now is abstract. You can choose between two implementations:HmacJwtTokenValve
(compatible with previous version) andRsaJwtTokenValve
, depending on your signing method