v0.6.2

What's changed

• Improve how the SpiffeTrustManager is configured to either validate SPIFFE IDs or acceptAny.
• Validate the SslContextOptions.
• Add visibility to SPIFFE ID validation errors by logging warnings.
• Improve logging of the X509Source update.

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.2</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.2</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.6.2'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.6.2'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.2</version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.6.2'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.6.1

Bug fix and dependencies updates

What's changed

• Fix jwt-svid audience validation.
• Upgrade gprc-java dependency to 1.31.1
• Upgrade jwt nimbus library dependency to 8.20.

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.1</version>
</dependency>
<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.1</version>
</dependency>

Gradle

implementation 'io.spiffe:java-spiffe-core:0.6.1'
implementation 'io.spiffe:java-spiffe-provider:0.6.1'

MacOS Support:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.1</version>
  <scope>runtime</scope>
</dependency>

or:

runtimeOnly 'io.spiffe:grpc-netty-macos:0.6.1'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.6.0

Library Refactor: new X.509 and JWT functionality.

What's changed

Complete refactor of the interfaces and implementations for X.509 SVIDs and bundles.
Added JWT SVID functionality.
Improved robustness: validations for SPIFFE IDs and Socket Endpoint Addresses.

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.0</version>
</dependency>
<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.0</version>
</dependency>

Gradle

implementation 'io.spiffe:java-spiffe-core:0.6.0'
implementation 'io.spiffe:java-spiffe-provider:0.6.0'

MacOS Support:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.0</version>
  <scope>runtime</scope>
</dependency>

or:

runtimeOnly 'io.spiffe:grpc-netty-macos:0.6.0'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.

v0.5.1

• Avoid netty channel warning by setting unknown channel option to null: #24