Commit Graph

149 Commits

Author SHA1 Message Date
Alexander Dümont 0526ec5d3a
Fix CRLF newline removal in DER format logic (#284)
Signed-off-by: Alexander Dümont <alexander_duemont@web.de>
2024-11-18 08:48:49 -06:00
Max Lambrecht 7f53871ce0
Bump com.google.protobuf:protoc to 3.25.5 (#271)
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-10-08 12:58:04 -05:00
Max Lambrecht 026f3c51e7
Add testParseJWKSWithEmptyKeysArray (#233)
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-10-08 09:58:20 -05:00
dependabot[bot] 987944188d
Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0 (#255)
Bumps org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-18 22:06:51 -07:00
dependabot[bot] 8c9a6d1333
Bump com.google.protobuf:protoc from 3.25.2 to 3.25.3 (#218)
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf) from 3.25.2 to 3.25.3.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.25.2...v3.25.3)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-16 16:32:19 -06:00
Max Lambrecht 4d374bf798
DefineC grpc-inprocess dependency as testImplementation (#206)
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-02-15 13:20:55 -06:00
dependabot[bot] c59c5d2c77
Bump com.google.protobuf:protoc from 3.23.4 to 3.25.2 (#193)
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf) from 3.23.4 to 3.25.2.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.23.4...v3.25.2)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-01-24 09:31:04 -06:00
dependabot[bot] 9762799dcf
Bump grpcVersion from 1.58.0 to 1.61.0 (#190)
* Bump grpcVersion from 1.58.0 to 1.61.0

Bumps `grpcVersion` from 1.58.0 to 1.61.0.

Updates `io.grpc:protoc-gen-grpc-java` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0)

Updates `io.grpc:grpc-protobuf` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0)

Updates `io.grpc:grpc-stub` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0)

Updates `io.grpc:grpc-testing` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0)

Updates `io.grpc:grpc-netty-shaded` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0)

Updates `io.grpc:grpc-netty` from 1.58.0 to 1.61.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.58.0...v1.61.0)

---
updated-dependencies:
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-stub
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-testing
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-netty
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Add missing dependency for grpc 1.61.0

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <maxlambrecht@gmail.com>
2024-01-24 09:25:38 -06:00
dependabot[bot] 69628d2eb6
Bump org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0 (#189)
Bumps org.apache.commons:commons-lang3 from 3.13.0 to 3.14.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-24 07:24:28 -06:00
dependabot[bot] 659145cc3e
Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0 (#158)
Bumps org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-31 11:53:38 -07:00
dependabot[bot] ad06ea59af
Bump com.google.protobuf:protobuf-gradle-plugin from 0.9.3 to 0.9.4 (#153)
Bumps [com.google.protobuf:protobuf-gradle-plugin](https://github.com/google/protobuf-gradle-plugin) from 0.9.3 to 0.9.4.
- [Release notes](https://github.com/google/protobuf-gradle-plugin/releases)
- [Commits](https://github.com/google/protobuf-gradle-plugin/commits)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-gradle-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-31 11:48:10 -07:00
dependabot[bot] e4e7f8dace
Bump com.google.protobuf:protoc from 3.23.1 to 3.23.4 (#152)
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf) from 3.23.1 to 3.23.4.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.23.1...v3.23.4)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <maxlambrecht@gmail.com>
2023-07-11 15:21:46 -05:00
dependabot[bot] d18fa737d0
Bump com.google.protobuf:protoc from 3.23.0 to 3.23.1 (#144)
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf) from 3.23.0 to 3.23.1.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/generate_changelog.py)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.23.0...v3.23.1)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-17 18:10:22 -05:00
dependabot[bot] b925e5ecf1
Bump com.google.protobuf:protoc from 3.21.12 to 3.23.0 (#142)
Bumps [com.google.protobuf:protoc](https://github.com/protocolbuffers/protobuf) from 3.21.12 to 3.23.0.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/generate_changelog.py)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.21.12...v3.23.0)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protoc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-10 10:37:48 -05:00
dependabot[bot] 3e1a50e5f8
Bump com.google.protobuf:protobuf-gradle-plugin from 0.9.2 to 0.9.3 (#141)
Bumps [com.google.protobuf:protobuf-gradle-plugin](https://github.com/google/protobuf-gradle-plugin) from 0.9.2 to 0.9.3.
- [Release notes](https://github.com/google/protobuf-gradle-plugin/releases)
- [Commits](https://github.com/google/protobuf-gradle-plugin/compare/0.9.2...v0.9.3)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-gradle-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-28 11:54:28 -05:00
dependabot[bot] 7fc2406087
Bump org.bouncycastle:bcpkix-jdk15on from 1.66 to 1.70 (#131)
Bumps [org.bouncycastle:bcpkix-jdk15on](https://github.com/bcgit/bc-java) from 1.66 to 1.70.
- [Release notes](https://github.com/bcgit/bc-java/releases)
- [Changelog](https://github.com/bcgit/bc-java/blob/master/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk15on
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-13 17:12:53 -05:00
dependabot[bot] 72f352fc30
Bump org.apache.commons:commons-lang3 from 3.11 to 3.12.0 (#129)
Bumps org.apache.commons:commons-lang3 from 3.11 to 3.12.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-13 16:42:10 -05:00
Max Lambrecht e5600c3f4d
Update gradle version to 8.0.2 (#104)
Update gradle version to 8.0.2

Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-12 13:16:22 -05:00
Guilherme Carvalho 0d0aae967f
Add SVID hints on workload api client (#114)
Add SVID hints on workload api client

Signed-off-by: Guilherme Carvalho <guilhermocc@proton.me>
2023-04-12 13:10:44 -05:00
Max Lambrecht c3dc4950e5
Fix CachedJwtSource tests (#120)
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-10 15:02:27 -05:00
Max Lambrecht 3ca77c1de2
Add `CachedJwtSource` (#116)
Add CachedJwtSource

Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-04-04 13:49:32 -05:00
Max Lambrecht f9dc354ae4
Solve memory leak. (#112)
Reverting changes that introduced a memory leak. Addressing error when context was cancelled

Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-03-07 13:30:51 -06:00
Max Lambrecht 942bcc9eb4
Add default constructor to SpiffeSslSocketFactory (#109)
Add default constructor to SpiffeSslSocketFactory

Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-02-16 16:13:21 -03:00
Max Lambrecht 48991a0105
Fix close method in WorkloadApiClient (#102)
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-01-11 15:00:07 -03:00
Thomas Richner 0085ce08f9
Aarch64 support (#101)
Add aarch64 module for OSX

Signed-off-by: Thomas Richner <thomas.richner@oviva.com>
Co-authored-by: Max Lambrecht <max.lambrecht@hpe.com>
2023-01-11 14:37:29 -03:00
Max Lambrecht a878d7d7f4
Update grpc-java dependency to 1.49.0 (#97)
Signed-off-by: Max Lambrecht <max.lambrecht@hpe.com>
2022-08-24 13:38:55 -07:00
M1a0 6cdc17eb9c
Add FetchJWTSVIDs function for workloadapi and jwtSource (#90)
Signed-off-by: Yuhan Li <liyuhan.loveyana@bytedance.com>
2022-04-27 18:21:24 -03:00
Max Lambrecht 77148473c4
Strict SPIFFE ID parsing (#74)
Strict SPIFFE ID parsing.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-09-08 14:03:24 -03:00
Max Lambrecht 7657acfafd
Add Integration tests for Workload API client. (#75)
* Add integration tests and setup script.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
Co-authored-by: Ryan Turner <rturner3@users.noreply.github.com>
2021-07-27 10:08:32 -07:00
Max Lambrecht 377225ac7b Update workload.proto with the lastest version from the SPIFFE repo.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-05-27 15:55:07 -03:00
Max Lambrecht 467b1873cd Update netty-transport-native-kqueue dependecy to 4.1.63
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-04-12 15:48:00 -03:00
Max Lambrecht ede1878fd5 Addressing PR comments
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-03-15 09:59:15 -03:00
Max Lambrecht baa447b058 Add FetchX509Bundles method to Workload API client
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-03-08 18:44:21 -03:00
Max Lambrecht 0ee9ae28fa
Validate JWT 'typ' header. (#62)
* Validate JWT 'typ' header.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-08 16:05:36 -03:00
Max Lambrecht de82ebf916 Minor exception messages improvements.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-05 10:37:44 -03:00
Max Lambrecht f8970af7f4 Validate 'alg' header when parsing JWT-SVIDs from tokens.
Some minor refactors and improvements.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-04 16:30:41 -03:00
Max Lambrecht 3049810a35 Remove private/public key match verification.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-02-02 21:06:55 -03:00
Max Lambrecht bd6ca04270 Addressing PR comments.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-01-06 10:02:46 -03:00
Max Lambrecht 9757e62ad3 Add missing SPIFFE ID and Trust Domain maximum length validations.
Fix parse SPIFFE ID to preserve path case.
Refactoring tests.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2021-01-05 12:46:41 -03:00
Max Lambrecht aff23a7d79 Use google osdetector plugin instead of internal gradle class.
Upgrade gradle wrapper to 6.7.1

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-11-24 10:57:37 -03:00
Max Lambrecht 20d0efead2
Merge pull request #47 from srwaggon/patch-2
Update README.md
2020-11-14 10:16:21 -03:00
Samuel Waggoner 1ff550ac43
Update README.md
Update example to match current code contract
2020-11-13 16:05:39 -08:00
Samuel Waggoner c3d118da45
Update README.md
Amend parent class in example
2020-11-13 16:01:53 -08:00
Max Lambrecht 2f295c86ab
Merge pull request #43 from maxlambrecht/docs-improvements
Minor improvements in READMEs and javadocs.
2020-10-27 18:23:07 -03:00
Max Lambrecht dbd44a4db4 Minor improvements in READMEs and javadocs.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-10-27 10:52:22 -03:00
Max Lambrecht 3cfa6a8ccd Updating gRPC and protobuf dependencies.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-10-27 09:34:08 -03:00
Max Lambrecht 5a8d9d9056 Bump version to 0.6.2
Improve how the SpiffeTrustManager is configured to either validate SPIFFE IDs or acceptAny.
Validate the SslContextOptions.
Add visibility to some validation errors by logging warnings.
Improve log of the X509Source update.
Improve Spiffe Provider README.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-25 13:08:52 -03:00
Max Lambrecht d64db92d1f Bump version to 0.6.1
Upgrade gprc-java dependency to 1.31.1
Upgrade other dependencies.
Fix jwt-svid audience validation.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-20 13:40:47 -03:00
Max Lambrecht 09149487a0 Tasks for signing and publishing artifacts to maven repository.
Add to README instruction to add the maven and gradle dependencies.
Minor additions to gradle build configs.

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-08-04 14:39:35 -03:00
Max Lambrecht 2fcaf752d7 Introduce JwtSource interface and refactor JWT Source implementation.
Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>
2020-07-16 16:28:54 -03:00