|
| 1 | +// |
| 2 | +// Copyright (c) 2016-2018 Eclipse Microprofile Contributors: |
| 3 | +// Red Hat |
| 4 | +// |
| 5 | +// Licensed under the Apache License, Version 2.0 (the "License"); |
| 6 | +// you may not use this file except in compliance with the License. |
| 7 | +// You may obtain a copy of the License at |
| 8 | +// |
| 9 | +// http://www.apache.org/licenses/LICENSE-2.0 |
| 10 | +// |
| 11 | +// Unless required by applicable law or agreed to in writing, software |
| 12 | +// distributed under the License is distributed on an "AS IS" BASIS, |
| 13 | +// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 14 | +// See the License for the specific language governing permissions and |
| 15 | +// limitations under the License. |
| 16 | +// |
| 17 | +## Release Notes |
| 18 | + |
| 19 | +### Changes in 1.1.1-RC1 |
| 20 | +This is a candidate patch release that provides fixes to the TCK tests that were seen to have issues in different implementations. The TCK tests WARs now include a META-INF/MPJWTTESTVERSION resource that contains the major/minor version string enum for the MP-JWT version the test WAR is targeting. Currently the versions enums are: |
| 21 | + |
| 22 | +```java |
| 23 | +public enum MpJwtTestVersion { |
| 24 | + MPJWT_V_1_0, |
| 25 | + MPJWT_V_1_1 |
| 26 | + ; |
| 27 | +} |
| 28 | +``` |
| 29 | + |
| 30 | +There are no API changes. |
| 31 | + |
| 32 | +#### Closed Issues in 1.1.1-RC1 |
| 33 | +* https://github.com/eclipse/microprofile-jwt-auth/issues/104 |
| 34 | +* https://github.com/eclipse/microprofile-jwt-auth/issues/103 |
| 35 | +* https://github.com/eclipse/microprofile-jwt-auth/issues/98 |
| 36 | + |
| 37 | + |
| 38 | +### Changes in 1.1 |
| 39 | +The focus of this release was to add support for configuring the public key and issuer needed for verification of the MP-JWT using MicroProfile Config. The new MicroProfile Config properties are: |
| 40 | + |
| 41 | +mp.jwt.verify.publickey:: The embedded key material of the public key for the MP-JWT signer in PKCS8 PEM or JWK(S) format. If not found the mp.jwt.verify.publickey.location needs to be checked. |
| 42 | +mp.jwt.verify.publickey.location:: The relative path or full URL of the public key. All relative paths will be resolved within the archive using ClassLoader.getResource. If the value is a URL it will be resolved using new URL(“...”).openStream() |
| 43 | +mp.jwt.verify.issuer:: The expected iss claim value to validate against an MP-JWT. |
0 commit comments