Added

• Upgraded Plugin #711 (tanya732)
• Fix jackson vuln #705 (tanya732)
• Fix typo in example code #682 (kasperkarlsson)
• Remove dead README links #676 (jimmyjames)
• Fix typo on a comment in JWTCreator.java #672 (sgc109)
• Remove CircleCI #670 (jimmyjames)
• Empty string audience claim should be deserialized as empty string #663 (jimmyjames)

Fixed

• empty expected audience array should throw InvalidClaimException #679 (jimmyjames)

Full Changelog

Changed

• Add support for passing json values for header and payload #643 (andrewrigas)
• Preserve insertion order for claims #656 (snago)
• Update Jackson to 2.14.2 #657 (jimmyjames)

Full Changelog

Changed

• Improve JWT parse/decode performance #620 (noetro)

Fixed

• Fix for exp claim considered valid if equal to now #652 (jimmyjames)
• Code cleanup #642 (CodeDead)

Full Changelog

This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices.
Please review the README note for additional details.

Full Changelog

This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices.
Please review the README note for additional details.

Full Changelog

Security

• Update com.fasterxml.jackson.core:jackson-databind to 2.13.4.2 #631 (jimmyjames)

Security

Bump com.fasterxml.jackson.core:jackson-databind to 2.13.4.2 https://github.com/auth0/java-jwt/pull/630 (evansims)

Changed

• Re-enable japicmp API diff checking #619 (jimmyjames)
• Update .shiprc to only update lib version in build.gradle #625 (jimmyjames)
• Optimise TokenUtils parsing #611 (noetro)
• Update Circle Ship Orb configuration #616 (frederikprijck)

Fixed

• Update Claim#asString documentation #615 (jimmyjames)

⚠️ BREAKING CHANGES

• Make JWT constants final values #604 (poovamraj)

Added

• Add integration with our Shipping orb #612 (frederikprijck)
• Add Ship CLI support #609 (jimmyjames)
• Provide straightforward example for JWKS #600 (poovamraj)

Changed

• Update to gradle 6.9.2 #608 (jimmyjames)
• Update OSS plugin to latest #607 (jimmyjames)
• SDK-3466 Upgrade Codecov #595 (evansims)
• Update README.md #590 (poovamraj)

Fixed

• Check for null token before splitting #606 (jimmyjames)
• [SDK-3816] Update docs for verification thread-safety #605 (jimmyjames)

4.0.0 (2022-06-24)

Full Changelog

This is a major release and contains breaking changes!

💡 Check the Migration Guide to understand the changes required to migrate your application to v4.

Main features

• Predicates based claim verification
• Support for Instant API and Lambda functions
• Improved Exceptions API
• Consistent null handling

See the changelog entries for additional details.