spiffe/java-spiffe v0.6.1

on GitHub

Bug fix and dependencies updates

What's changed

• Fix jwt-svid audience validation.
• Upgrade gprc-java dependency to 1.31.1
• Upgrade jwt nimbus library dependency to 8.20.

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.6.1</version>
</dependency>
<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.6.1</version>
</dependency>

Gradle

implementation 'io.spiffe:java-spiffe-core:0.6.1'
implementation 'io.spiffe:java-spiffe-provider:0.6.1'

MacOS Support:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.6.1</version>
  <scope>runtime</scope>
</dependency>

or:

runtimeOnly 'io.spiffe:grpc-netty-macos:0.6.1'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.