spiffe/java-spiffe v0.7.0

on GitHub

API Changes

• Method TrustDomain.of was renamed to TrustDomain.parse (#74)

New Features

• Add FetchX509Bundles method to Workload API client (#63)
• Add support to the SpiffeTrustManager for a SpiffeIdVerifier callback. (#77)
• Add method TrustDomain.fromSegments (#74)

Bug Fixes

• Remove private/public key match verification that was causing long delays in AWS machines. (#56)

Behavior Changes

• Strict SPIFFE ID parsing (#74)
• Validate JWT 'typ' header. (#62)
• Validate 'alg' header when parsing JWT-SVIDs from tokens. (#60)

Dependencies

• Upgrade gRPC dependencies to 1.40.1 (#81)
• Upgrade Nimbus JWT-JOSE library dependency to 9.13 (#82)

Documentation

Maven

Import the java-spiffe-core component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-core</artifactId>
  <version>0.7.0</version>
</dependency>

Import the java-spiffe-provider component:

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>java-spiffe-provider</artifactId>
  <version>0.7.0</version>
</dependency>

This component imports the java-spiffe-core automatically.

Gradle

java-spiffe-core:

implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.7.0'

java-spiffe-provider:

implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.7.0'

MacOS Support

Maven

<dependency>
  <groupId>io.spiffe</groupId>
  <artifactId>grpc-netty-macos</artifactId>
  <version>0.7.0/version>
  <scope>runtime</scope>
</dependency>

Gradle

runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.7.0'

The Jars bundled with all the dependencies are part of the assets:

• java-spiffe-helper: executable jar to fetch the SVIDs and store them in a java KeyStore in disk.
• java-spiffe-provider all: jar to install the SPIFFE provider in a JVM.