Alexander Dümont
0526ec5d3a
Fix CRLF newline removal in DER format logic ( #284 )
...
Signed-off-by: Alexander Dümont <alexander_duemont@web.de>
2024-11-18 08:48:49 -06:00
Max Lambrecht
7f53871ce0
Bump com.google.protobuf:protoc to 3.25.5 ( #271 )
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-10-08 12:58:04 -05:00
Max Lambrecht
026f3c51e7
Add testParseJWKSWithEmptyKeysArray ( #233 )
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-10-08 09:58:20 -05:00
dependabot[bot]
987944188d
Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 ( #255 )
...
Bumps org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-18 22:06:51 -07:00
dependabot[bot]
8c9a6d1333
Bump com.google.protobuf:protoc from 3.25.2 to 3.25.3 ( #218 )
...
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf ) from 3.25.2 to 3.25.3.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases )
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl )
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.25.2...v3.25.3 )
---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-16 16:32:19 -06:00
Max Lambrecht
4d374bf798
DefineC grpc-inprocess dependency as testImplementation ( #206 )
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-02-15 13:20:55 -06:00
dependabot[bot]
c59c5d2c77
Bump com.google.protobuf:protoc from 3.23.4 to 3.25.2 ( #193 )
...
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf ) from 3.23.4 to 3.25.2.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases )
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl )
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.23.4...v3.25.2 )
---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-01-24 09:31:04 -06:00
dependabot[bot]
9762799dcf
Bump grpcVersion from 1.58.0 to 1.61.0 ( #190 )
...
* Bump grpcVersion from 1.58.0 to 1.61.0
Bumps `grpcVersion` from 1.58.0 to 1.61.0.
Updates `io.grpc:protoc-gen-grpc-java` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases )
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0 )
Updates `io.grpc:grpc-protobuf` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases )
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0 )
Updates `io.grpc:grpc-stub` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases )
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0 )
Updates `io.grpc:grpc-testing` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases )
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0 )
Updates `io.grpc:grpc-netty-shaded` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases )
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0 )
Updates `io.grpc:grpc-netty` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases )
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0 )
---
updated-dependencies:
- dependency-name: io.grpc:protoc-gen-grpc-java
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-protobuf
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-stub
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-testing
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-netty-shaded
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-netty
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* Add missing dependency for grpc 1.61.0
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-01-24 09:25:38 -06:00
dependabot[bot]
69628d2eb6
Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 ( #189 )
...
Bumps org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-24 07:24:28 -06:00
dependabot[bot]
659145cc3e
Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0 ( #158 )
...
Bumps org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-31 11:53:38 -07:00
dependabot[bot]
ad06ea59af
Bump com.google.protobuf:protobuf-gradle-plugin from 0.9.3 to 0.9.4 ( #153 )
...
Bumps [com.google.protobuf:protobuf-gradle-plugin](https://github.com/google/protobuf-gradle-plugin ) from 0.9.3 to 0.9.4.
- [Release notes](https://github.com/google/protobuf-gradle-plugin/releases )
- [Commits](https://github.com/google/protobuf-gradle-plugin/commits )
---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-gradle-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-31 11:48:10 -07:00
dependabot[bot]
e4e7f8dace
Bump com.google.protobuf:protoc from 3.23.1 to 3.23.4 ( #152 )
...
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf ) from 3.23.1 to 3.23.4.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases )
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl )
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.23.1...v3.23.4 )
---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <maxlambrecht@gmail.com>
2023-07-11 15:21:46 -05:00
dependabot[bot]
d18fa737d0
Bump com.google.protobuf:protoc from 3.23.0 to 3.23.1 ( #144 )
...
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf ) from 3.23.0 to 3.23.1.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases )
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/generate_changelog.py )
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.23.0...v3.23.1 )
---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-17 18:10:22 -05:00
dependabot[bot]
b925e5ecf1
Bump com.google.protobuf:protoc from 3.21.12 to 3.23.0 ( #142 )
...
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf ) from 3.21.12 to 3.23.0.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases )
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/generate_changelog.py )
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.21.12...v3.23.0 )
---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-10 10:37:48 -05:00
dependabot[bot]
3e1a50e5f8
Bump com.google.protobuf:protobuf-gradle-plugin from 0.9.2 to 0.9.3 ( #141 )
...
Bumps [com.google.protobuf:protobuf-gradle-plugin](https://github.com/google/protobuf-gradle-plugin ) from 0.9.2 to 0.9.3.
- [Release notes](https://github.com/google/protobuf-gradle-plugin/releases )
- [Commits](https://github.com/google/protobuf-gradle-plugin/compare/0.9.2...v0.9.3 )
---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-gradle-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-28 11:54:28 -05:00
dependabot[bot]
7fc2406087
Bump org.bouncycastle:bcpkix-jdk15on from 1.66 to 1.70 ( #131 )
...
Bumps [org.bouncycastle:bcpkix-jdk15on](https://github.com/bcgit/bc-java ) from 1.66 to 1.70.
- [Release notes](https://github.com/bcgit/bc-java/releases )
- [Changelog](https://github.com/bcgit/bc-java/blob/master/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk15on
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-13 17:12:53 -05:00
dependabot[bot]
72f352fc30
Bump org.apache.commons:commons-lang3 from 3.11 to 3.12.0 ( #129 )
...
Bumps org.apache.commons:commons-lang3 from 3.11 to 3.12.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-13 16:42:10 -05:00
Max Lambrecht
e5600c3f4d
Update gradle version to 8.0.2 ( #104 )
...
Update gradle version to 8.0.2
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-12 13:16:22 -05:00
Guilherme Carvalho
0d0aae967f
Add SVID hints on workload api client ( #114 )
...
Add SVID hints on workload api client
Signed-off-by: Guilherme Carvalho <guilhermocc@proton.me>
2023-04-12 13:10:44 -05:00
Max Lambrecht
c3dc4950e5
Fix CachedJwtSource tests ( #120 )
...
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-10 15:02:27 -05:00
Max Lambrecht
3ca77c1de2
Add `CachedJwtSource` ( #116 )
...
Add CachedJwtSource
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-04 13:49:32 -05:00
Max Lambrecht
f9dc354ae4
Solve memory leak. ( #112 )
...
Reverting changes that introduced a memory leak. Addressing error when context was cancelled
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-03-07 13:30:51 -06:00
Max Lambrecht
942bcc9eb4
Add default constructor to SpiffeSslSocketFactory ( #109 )
...
Add default constructor to SpiffeSslSocketFactory
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-02-16 16:13:21 -03:00
Max Lambrecht
48991a0105
Fix close method in WorkloadApiClient ( #102 )
...
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-01-11 15:00:07 -03:00
Thomas Richner
0085ce08f9
Aarch64 support ( #101 )
...
Add aarch64 module for OSX
Signed-off-by: Thomas Richner <thomas.richner@oviva.com>
Co-authored-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-01-11 14:37:29 -03:00
Max Lambrecht
a878d7d7f4
Update grpc-java dependency to 1.49.0 ( #97 )
...
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2022-08-24 13:38:55 -07:00
M1a0
6cdc17eb9c
Add FetchJWTSVIDs function for workloadapi and jwtSource ( #90 )
...
Signed-off-by: Yuhan Li <liyuhan.loveyana@bytedance.com>
2022-04-27 18:21:24 -03:00
Max Lambrecht
77148473c4
Strict SPIFFE ID parsing ( #74 )
...
Strict SPIFFE ID parsing.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-09-08 14:03:24 -03:00
Max Lambrecht
7657acfafd
Add Integration tests for Workload API client. ( #75 )
...
* Add integration tests and setup script.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
Co-authored-by: Ryan Turner <rturner3@users.noreply.github.com>
2021-07-27 10:08:32 -07:00
Max Lambrecht
377225ac7b
Update workload.proto with the lastest version from the SPIFFE repo.
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-05-27 15:55:07 -03:00
Max Lambrecht
467b1873cd
Update netty-transport-native-kqueue dependecy to 4.1.63
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-04-12 15:48:00 -03:00
Max Lambrecht
ede1878fd5
Addressing PR comments
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-03-15 09:59:15 -03:00
Max Lambrecht
baa447b058
Add FetchX509Bundles method to Workload API client
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-03-08 18:44:21 -03:00
Max Lambrecht
0ee9ae28fa
Validate JWT 'typ' header. ( #62 )
...
* Validate JWT 'typ' header.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-08 16:05:36 -03:00
Max Lambrecht
de82ebf916
Minor exception messages improvements.
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-05 10:37:44 -03:00
Max Lambrecht
f8970af7f4
Validate 'alg' header when parsing JWT-SVIDs from tokens.
...
Some minor refactors and improvements.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-04 16:30:41 -03:00
Max Lambrecht
3049810a35
Remove private/public key match verification.
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-02 21:06:55 -03:00
Max Lambrecht
bd6ca04270
Addressing PR comments.
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-01-06 10:02:46 -03:00
Max Lambrecht
9757e62ad3
Add missing SPIFFE ID and Trust Domain maximum length validations.
...
Fix parse SPIFFE ID to preserve path case.
Refactoring tests.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-01-05 12:46:41 -03:00
Max Lambrecht
aff23a7d79
Use google osdetector plugin instead of internal gradle class.
...
Upgrade gradle wrapper to 6.7.1
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-11-24 10:57:37 -03:00
Max Lambrecht
20d0efead2
Merge pull request #47 from srwaggon/patch-2
...
Update README.md
2020-11-14 10:16:21 -03:00
Samuel Waggoner
1ff550ac43
Update README.md
...
Update example to match current code contract
2020-11-13 16:05:39 -08:00
Samuel Waggoner
c3d118da45
Update README.md
...
Amend parent class in example
2020-11-13 16:01:53 -08:00
Max Lambrecht
2f295c86ab
Merge pull request #43 from maxlambrecht/docs-improvements
...
Minor improvements in READMEs and javadocs.
2020-10-27 18:23:07 -03:00
Max Lambrecht
dbd44a4db4
Minor improvements in READMEs and javadocs.
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-10-27 10:52:22 -03:00
Max Lambrecht
3cfa6a8ccd
Updating gRPC and protobuf dependencies.
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-10-27 09:34:08 -03:00
Max Lambrecht
5a8d9d9056
Bump version to 0.6.2
...
Improve how the SpiffeTrustManager is configured to either validate SPIFFE IDs or acceptAny.
Validate the SslContextOptions.
Add visibility to some validation errors by logging warnings.
Improve log of the X509Source update.
Improve Spiffe Provider README.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-25 13:08:52 -03:00
Max Lambrecht
d64db92d1f
Bump version to 0.6.1
...
Upgrade gprc-java dependency to 1.31.1
Upgrade other dependencies.
Fix jwt-svid audience validation.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-20 13:40:47 -03:00
Max Lambrecht
09149487a0
Tasks for signing and publishing artifacts to maven repository.
...
Add to README instruction to add the maven and gradle dependencies.
Minor additions to gradle build configs.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-04 14:39:35 -03:00
Max Lambrecht
2fcaf752d7
Introduce JwtSource interface and refactor JWT Source implementation.
...
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-16 16:28:54 -03:00