Skip to content

CHANGES.md

Latest commit

 

History

History
1335 lines (887 loc) · 39 KB

CHANGES.md

File metadata and controls

1335 lines (887 loc) · 39 KB
Raw

CHANGES

2.93 (2026-03-20)

  • pom.xml

    • Updated the version of authlete-java-common from 4.33 to 4.39.

  • AuthleteApiCaller class

    • Added the callAttestationChallenge(AttestationChallengeRequest, Options) method.

  • AuthleteApiImpl class

    • Implemented the attestationChallenge(AttestationChallengeRequest, Options) method.

  • AuthleteApiImplV3 class

    • Implemented the attestationChallenge(AttestationChallengeRequest, Options) method.

  • BackchannelAuthenticationRequestHandler class

    • Supported the OAuth-Client-Attestation-Challenge HTTP response header.

  • DeviceAuthorizationRequestHandler class

    • Supported the OAuth-Client-Attestation-Challenge HTTP response header.

  • PushedAuthReqHandler class

    • Supported the OAuth-Client-Attestation-Challenge HTTP response header.

  • ResponseUtil class

    • Added the javaScript(String, Map<String, Object>) method.

  • RevocationRequestHandler class

    • Supported the OAuth-Client-Attestation-Challenge HTTP response header.

  • TokenRequestHandler class

    • Supported the OAuth-Client-Attestation-Challenge HTTP response header.

  • New types

    • AttestationChallengeRequestHandler class
    • BaseAttestationChallengeEndpoint class

2.91 (2026-03-05)

  • AuthleteApiJaxrsImpl class

    • Fixed non-2xx HTTP responses not throwing AuthleteApiException in callGetApi() and callPostApi(). Added explicit status check to restore the error-handling contract after the switch from typed to untyped JAX-RS overloads in v2.88.

  • New test

    • AuthleteApiJaxrsImplTest class
      • Added regression tests for GET, POST, and DELETE error handling.

2.90 (2025-12-29)

  • pom.xml

    • Updated the version of authlete-java-common from 4.27 to 4.33.

  • AuthleteApiCaller class

    • Added the callCredentialNonce(CredentialNonceRequest, Options) method.

  • New types

    • BaseCredentialNonceEndpoint class
    • CredentialNonceRequestHandler class

2.89 (2025-11-04)

  • pom.xml

    • Updated the version of authlete-java-common from 4.23 to 4.27.
    • Updated the version of nimbus-jose-jwt from 10.0.2 to 10.5.

  • AuthleteApiImpl class

    • Implemented the credentialNonce(CredentialNonceRequest, Options) method.

  • AuthleteApiImplV3 class

    • Implemented the credentialNonce(CredentialNonceRequest, Options) method.

2.88 (2025-10-07)

  • pom.xml

    • Updated the version of authlete-java-common from 4.20 to 4.23.
    • Updated the version of nimbus-jose-jwt from 9.37.2 to 10.0.2.

  • AuthleteApiJaxrsImpl class

    • Added support for extracting HTTP response headers from Authlete API calls.
    • The callGetApi() and callPostApi() methods now capture response headers and set them on ApiResponse objects using the setResponseHeaders() method.
    • This enables access to headers like Request-Id from API responses.

2.87 (2025-05-03)

  • pom.xml

    • Updated the version of authlete-java-common from 4.19 to 4.20.

  • AuthleteApiImpl class

    • Added a false implementation of the nativeSsoLogout(NativeSsoLogoutRequest, Options) method that was introduced to the AuthleteApi interface in version 4.20 of authlete-java-common. The /nativesso/logout API is not available in Authlete 2.x.

  • AuthleteApiImplV3 class

    • Implemented the nativeSsoLogout(NativeSsoLogoutRequest, Options) method that was introduced to the AuthleteApi interface in version 4.20 of authlete-java-common.

2.86 (2025-05-02)

  • AuthleteApiCaller class

    • Added the sessionId parameter to methods for calling the /auth/authorization/issue API.

  • AuthleteApiImpl class

    • Added a false implementation of the nativeSso(NativeSsoRequest, Options) method that was introduced to the AuthleteApi interface in version 4.18 of authlete-java-common. The /nativesso API is not available in Authlete 2.x.

  • AuthleteApiImplV3 class

    • Implemented the nativeSso(NativeSsoRequest, Options) method that was introduced to the AuthleteApi interface in version 4.18 of authlete-java-common.

  • AuthorizationDecisionHandler class

    • Added support for the sessionId request parameter for the /auth/authorization/issue API.

  • AuthorizationDecisionHandlerSpi interface

    • Added the getSessionId() method.

  • AuthorizationDecisionHandlerSpiAdapter class

    • Added an empty implementation of the getSessionId() method.

  • TokenRequestHandler class

    • Added support for the TokenResponse.NATIVE_SSO action.

  • TokenRequestHandlerSpi interface

    • BREAKING CHANGE: Changed the method signature of the tokenExchange(TokenResponse) method to tokenExchange(TokenResponse, Map<String, Object>).
    • BREAKING CHANGE: Changed the method signature of the jwtBearer(TokenResponse) method to jwtBearer(TokenResponse, Map<String, Object>).
    • Added the nativeSso(TokenResponse, Map<String, Object>) method.

  • TokenRequestHandlerSpiAdapter class

    • BREAKING CHANGE: Changed the method signature of the tokenExchange(TokenResponse) method to tokenExchange(TokenResponse, Map<String, Object>).
    • BREAKING CHANGE: Changed the method signature of the jwtBearer(TokenResponse) method to jwtBearer(TokenResponse, Map<String, Object>).
    • Added an empty implementation of the nativeSso(TokenResponse, Map<String, Object>) method.

  • pom.xml

    • Updated the version of authlete-java-common from 4.17 to 4.19.

2.85 (2025-02-13)

  • Bumped com.authlete.common to 4.17 from 4.16.

2.84 (2025-01-24)

  • Removed TestRequest object, and replaced it with mocks.

2.82 (2025-01-12)

  • Added request options to some request handler classes, some base endpoint classes, and some API implementation classes.

2.81 (2024-10-20)

  • New types

    • RequestUrlResolver class

  • pom.xml

    • Added a new dependency, com.authlete.http:http-field-parser:1.0.
    • Removed the duplicate org.apache.maven.plugins:maven-compiler-plugin dependency.

2.80 (2024-10-02)

  • AuthleteApiCaller class

    • Change the callUserInfo(String, String, String, String, String) method to callUserInfo(UserInfoRequestHandler.Params).

  • BaseEndpoint class

    • Added the extractHeadersAsPairs(HttpServletRequest) method.

  • UserInfoRequestHandler.Params class

    • Added the getTargetUri() method.
    • Added the setTargetUri(URI) method.
    • Added the getHeaders() method.
    • Added the setHeaders(Pair[]) method.
    • Added the isRequestBodyContained() method.
    • Added the setRequestBodyContained(boolean) method.
    • Added the isDpopNonceRequired() method.
    • Added the setDpopNonceRequired(boolean) method.

2.79 (2024-06-24)

  • BackchannelAuthenticationRequestHandler class

    • Added the handle(Params) method.

  • BaseBackchannelAuthenticationEndpoint class

    • Added the handle(AuthleteApi, BackchannelAuthenticationRequestHandlerSpi, Params) method.

  • BaseDeviceAuthorizationEndpoint class

    • Added the handle(AuthleteApi, Params) method.

  • BaseRevocationEndpoint class

    • Added the handle(AuthleteApi, Params) method.

  • DeviceAuthorizationRequestHandler class

    • Added the handle(Params) method.

  • PushedAuthReqHandler.Params class

    • Added the getClientAttestation() method.
    • Added the setClientAttestation(String) method.
    • Added the getClientAttestationPop() method.
    • Added the setClientAttestationPop(String) method.

  • RevocationRequestHandler class

    • Added the handle(Params) method.

  • TokenRequestHandler.Params class

    • Added the getClientAttestation() method.
    • Added the setClientAttestation(String) method.
    • Added the getClientAttestationPop() method.
    • Added the setClientAttestationPop(String) method.

  • New types

    • BackchannelAuthenticationRequestHandler.Params class
    • DeviceAuthorizationRequestHandler.Params class
    • HandlerUtility class
    • RevocationRequestHandler.Params class

2.74 (2024-05-14)

  • AuthleteApiImplV3 implementations
    • Fixed token create batch status API path.

2.73 (2024-05-14)

  • AuthleteApiImplV3 implementations
    • Fixed some API paths.

2.72 (2024-05-14)

  • AuthleteApiImplV3 implementations
    • Implemented tokenCreateBatch(TokenCreateRequest[] request, boolean dryRun) method.
    • Implemented getTokenCreateBatchStatus(String requestId) method.

2.71 (2024-05-07)

  • AuthleteApi implementations
    • Changed the getTokenList() method.
    • Changed the getTokenList(String clientIdentifier, String subject) method.
    • Changed the getTokenList(int start, int end) method.
    • Changed the getTokenList(String clientIdentifier, String subject, int start, int end) method.
    • Implemented the getTokenList(TokenStatus) method.
    • Implemented the getTokenList(int start, int end, TokenStatus tokenStatus) method.
    • Implemented the getTokenList(String clientIdentifier, String subject, TokenStatus tokenStatus) method.
    • Implemented the getTokenList(String clientIdentifier, String subject, int start, int end, TokenStatus tokenStatus) method.

2.70 (2023-12-17)

  • BasePushedAuthReqEndpoint class
    • Added the handle(AuthleteApi, Params) method.

2.69 (2023-12-17)

  • AuthleteApi implementations

    • Implemented the authorizationTicketInfo(AuthorizationTicketInfoRequest) method.
    • Implemented the authorizationTicketUpdate(AuthorizationTicketUpdateRequest) method.

  • AuthleteApiCaller class

    • Added the dpop, htm and htu arguments to the callPushedAuthReq methods.

  • PushedAuthReqHandler class

    • Added the handle(Params) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.82 to 3.88.

  • New types

    • PushedAuthReqHandler.Params class

2.68 (2023-11-16)

  • Synchronized Authlete Java JAX-RS with Authlete Java Jakarta project.

2.66 (2023-10-31)

  • AccessTokenValidator class

    • Added the validate(IntrospectionRequest) method.

  • AuthleteApiCaller class

    • Added the headers argument to the tokenFailResponse method.
    • Added the headers argument to the tokenIssue method.
    • Added the headers argument to the userInfoIssue method.
    • Added the callIntrospection(IntrospectionRequest) method.

  • BaseResourceEndpoint class

    • Added the validateAccessToken(AuthleteApi, IntrospectionRequest) method.

  • ResponseUtil class

    • Added the ok(String, Map<String, Object>) method.
    • Added the ok(String, MediaType, Map<String, Object>) method.
    • Added the noContent(Map<String, Object>) method.
    • Added the badRequest(String, Map<String, Object>) method.
    • Added the unauthorized(String, String, Map<String, Object>) method.
    • Added the forbidden(String, Map<String, Object>) method.
    • Added the notFound(String, Map<String, Object>) method.
    • Added the internalServerError(String, Map<String, Object>) method.
    • Added the created(String, Map<String, Object>) method.
    • Added the internalServerError(String, MediaType, Map<String, Object>) method.
    • Added the bearerError(Status, String, Map<String, Object>) method.
    • Added the tooLarge(String, Map<String, Object>) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.79 to 3.82.

2.65 (2023-09-18)

  • AuthleteApi implementations

    • Implemented the credentialJwtIssuerMetadata(CredentialJwtIssuerMetadataRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.77 to 3.79.

  • New types

    • BaseCredentialJwtIssuerMetadataEndpoint class
    • CredentialJwtIssuerMetadataRequestHandler class

2.64 (2023-09-04)

  • AuthleteApiCaller class

    • Removed introspectionSignKeyId from the arguments of callStandardIntrospection method.

  • IntrospectionRequestHandler class

    • Removed introspectionSignKeyId property from Params inner class.

  • pom.xml

    • Updated the version of authlete-java-common from 3.76 to 3.77.

2.63 (2023-09-03)

  • AuthleteApiCaller class

  • BaseIntrospectionEndpoint class

    • Added handle(AuthleteApi, Params) method.

  • IntrospectionRequestHandler class

    • Added Params inner class.
    • Updated process method to support JWT action.

  • ResponseUtil class

    • Added tokenIntrospection(String) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.75 to 3.76.

2.62 (2023-08-02)

  • AuthleteApi implementations

    • Implemented the credentialIssuerJwks(CredentialIssuerJwksRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.71 to 3.75.

2.61 (2023-07-12)

  • AuthleteApiCaller class

    • Added callCredentialOfferInfo method.

  • New types

    • BaseCredentialOfferUriEndpoint class
    • CredentialOfferUriRequestHandler class

2.60 (2023-07-10)

  • AuthleteApi implementations

    • Implemented the credentialBatchParse(CredentialBatchParseRequest) method.
    • Implemented the credentialBatchIssue(CredentialBatchIssueRequest) method.
    • Implemented the credentialDeferredParse(CredentialDeferredParseRequest) method.
    • Implemented the credentialDeferredIssue(CredentialDeferredIssueRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.68 to 3.71.

2.59 (2023-07-03)

  • AuthleteApi implementations

    • Implemented the idTokenReissue(IDTokenReissueRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.67 to 3.68.

2.58 (2023-06-28)

  • AuthleteApi implementations

    • Implemented the credentialOfferCreate(CredentialOfferCreateRequest) method.
    • Implemented the credentialOfferInfo(CredentialOfferInfoRequest) method.
    • Implemented the credentialSingleParse(CredentialSingleParseRequest) method.
    • Implemented the credentialSingleIssue(CredentialSingleIssueRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.56 to 3.67.

2.57 (2023-04-13)

  • AuthleteApi implementations

    • Implemented the credentialIssuerMetadata(CredentialIssuerMetadataRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.52 to 3.56.

  • New types

    • BaseCredentialIssuerMetadataEndpoint class
    • CredentialIssuerMetadataRequestHandler class

2.56 (2023-03-03)

  • AuthorizationPageModel class

    • Added getClaimsForIdToken() method.
    • Added setClaimsForIdToken(String[]) method.
    • Added getClaimsForUserInfo() method.
    • Added setClaimsForUserInfo(String[]) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.46 to 3.52.
    • Updated the version of gson from 2.8.9 to 2.10.1.
    • Updated the version of nimbus-jose-jwt from 9.22 to 9.31.

2.55 (2022-12-31)

  • FederationRegistrationRequestHandler class
    • Changed the Content-Type of successful responses from application/jose to application/entity-statement+jwt. The draft 25 of the OpenID Connect Federation 1.0 specification says that the Content-Type is application/jose but it will be corrected by a future draft.

2.54 (2022-12-11)

  • AuthorizationPageModel class
    • Updated to recognize dynamic scopes.

2.53 (2022-11-29)

  • ResponseUtil class

    • Added jose(String) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.45 to 3.46.

  • New types

    • BaseFederationRegistrationEndpoint class
    • FederationRegistrationRequestHandler class

2.52 (2022-11-28)

  • AuthleteApi implementations

    • Implemented the federationRegistration(FederationRegistrationRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.44 to 3.45.

2.51 (2022-11-23)

  • BaseConfigurationEndpoint class

    • Reverted the implementation of the handle(AuthleteApi) method back to that of the version 2.49.

  • ConfigurationRequestHandler class

    • Reverted the implementation of the handle(boolean) method back to that of the version 2.49.

2.50 (2022-11-23)

  • AuthleteApi implementations

    • Implemented the getServiceConfiguration(ServiceConfigurationRequest) method.

  • BaseConfigurationEndpoint class

    • Added handle(AuthleteApi, ServiceConfigurationRequest) method.

  • ConfigurationRequestHandler class

    • Added handle(ServiceConfigurationRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.41 to 3.44.

2.49 (2022-11-16)

  • AuthleteApi implementations

    • Implemented the federationConfiguration(FederationConfigurationRequest) method.
    • Fixed a bug of the gm(GMRequest) method.
    • Fixed a bug of the updateClientLockFlag(String, boolean) method.

  • ResponseUtil class

    • Added entityStatement(String) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.30 to 3.41.

  • New types

    • BaseFederationConfigurationEndpoint class
    • FederationConfigurationRequestHandler class

2.48 (2022-08-10)

  • TokenRequestHandler class

    • Supported TokenResponse.Action.JWT_BEARER which is returned from Authlete's /auth/token API when the token request uses the grant type urn:ietf:params:oauth:grant-type:jwt-bearer which is defined in RFC 7523.

  • TokenRequestHandlerSpi interface

    • Added jwtBearer(TokenResponse) method to support the grant type urn:ietf:params:oauth:grant-type:jwt-bearer which is defined in RFC 7523.

  • TokenRequestHandlerSpiAdapter class

    • Implemented jwtBearer(TokenResponse) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.26 to 3.30.

2.47 (2022-07-24)

  • TokenRequestHandler class

    • Supported TokenResponse.Action.TOKEN_EXCHANGE which is returned from Authlete's /auth/token API when the token request is a token exchange request (RFC 8693: OAuth 2.0 Token Exchange).

  • TokenRequestHandlerSpi interface

  • TokenRequestHandlerSpiAdapter class

    • Implemented tokenExchange(TokenResponse) method.

2.46 (2022-07-23)

  • AuthleteApi implementations

    • Implemented the tokenRevoke(TokenRevokeRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 3.23 to 3.26.

2.45 (2022-06-18)

  • AuthleteApi implementations

    • Support Authlete API version 3

  • pom.xml

    • Updated the version of authlete-java-common from 3.18 to 3.23.
    • Updated the version of com.google.code.gson:gson from 2.8.6 to 2.8.9.

2.44 (2022-06-09)

  • pom.xml
    • PR #27 allow deployment to internal and external registries

2.43 (2022-04-30)

  • AuthleteApiCaller class

    • Added an argument verifiedClaimsForTx to authorizationIssue method.
    • Added an argument verifiedClaimsForTx to userInfoIssue method.

  • AuthleteApiImpl class

    • Implemented updateClientLockFlag(String, boolean) method.

  • AuthorizationDecisionHandler class

    • Updated to support transformed claims in verified_claims/claims.

  • AuthorizationDecisionHandler.Params class

    • Added getRequestedVerifiedClaimsForTx() method.
    • Added setRequestedVerifiedClaimsForTx(StringArray[]) method.

  • UserInfoRequestHandler class

    • Updated to support transformed claims in verified_claims/claims.

  • pom.xml

    • Updated the version of authlete-java-common from 3.9 to 3.18.
    • Updated the version of com.nimbusds:nimbus-jose-jwt from 8.14 to 9.22.

  • New types

    • VerifiedClaimsCollector class

2.42 (2022-03-23)

  • AuthorizationDecisionHandler.Params class

    • Added isOldIdaFormatUsed() method.
    • Added setOldIdaFormatUsed(boolean) method.

  • AuthorizationDecisionHandlerSpi interface

    • Added getVerifiedClaims(String, Object) method.
    • Marked getVerifiedClaims(String, VerifiedClaimsConstraint) method as deprecated.

  • AuthorizationPageModel class

    • Added isOldIdaFormatUsed() method.
    • Added setOldIdaFormatUsed(boolean) method.

  • UserInfoRequestHandler.Params class

    • Added isOldIdaFormatUsed() method.
    • Added setOldIdaFormatUsed(boolean) method.

  • UserInfoRequestHandlerSpi interface

    • Added getVerifiedClaims(String, Object) method.
    • Marked getVerifiedClaims(String, VerifiedClaimsConstraint) method as deprecated.

2.41 (2021-11-28)

  • AuthleteApiCaller class

    • Added claimsForTx parameter to authorizationIssue().
    • Added claimsForTx parameter to userInfoIssue().

  • AuthorizationDecisionHandler class

    • Updated to prepare claimsForTx.

  • AuthorizationDecisionHandler.Params class

    • Added getRequestedClaimsForTx() method.
    • Added setRequestedClaimsForTx(String[]) method.

  • UserInfoRequestHandler class

    • Updated to prepare claimsForTx.

  • pom.xml

    • Updated the version of authlete-java-common from 3.4 to 3.9.

2.40 (2021-10-25)

  • HeaderClientCertificateXSslExtractor class
    • [bugfix] 'n' in SSL_CLIENT_CERT_CHAIN_n (Apache Module mod_ssl) starts from 0, not 1.

2.39 (2021-10-21)

  • HeaderClientCertificateClientCertExtractor class
    • Supported the case where the Client-Cert header is missing. (PR 24)

2.38 (2021-10-20)

  • New classes
    • BaseGrantManagementEndpoint

2.37 (2021-10-20)

  • AuthleteApiImpl class

    • Added gm(GMRequest) method.

  • ClientRegistrationRequestHandler class

    • Supported ClientRegistrationResponse.Action.UNAUTHORIZED.

  • pom.xml

    • Updated the version of authlete-java-common from 3.0 to 3.4.

  • New classes

    • GMRequestHandler

2.36 (2021-08-25)

Rebuild with OpenJDK 8.

2.35 (2021-08-25)

  • AuthleteApiImpl class

    • Added echo(Map<String, String>) method.

  • pom.xml

    • Updated the version of authlete-java-common from 2.97 to 3.0.

2.34 (2021-08-25)

  • HeaderClientCertificateExtractor class

    • Added abstract to the class definition.
    • Moved X-Ssl and X-Ssl-Chain-* to HeaderClientCertificateXSslExtractor.

  • New classes

    • HeaderClientCertificateClientCertExtractor
    • HeaderClientCertificateXSslExtractor

2.33 (2021-07-09)

  • AuthleteApiImpl class

    • Added hskCreate(HskCreateRequest) method.
    • Added hskDelete(String) method.
    • Added hskGet(String) method.
    • Added hskGetList() method.

  • pom.xml

    • Updated the version of authlete-java-common from 2.82 to 2.97.

2.32 (2021-06-20)

  • New classes
    • CertificateUtils

2.31 (2020-11-02)

  • pom.xml
    • Updated the version of authlete-java-common from 2.81 to 2.82.

2.30 (2020-11-02)

  • AuthleteApiImpl class

    • Added tokenDelete(String) method.

  • pom.xml

    • Updated the version of authlete-java-common from 2.73 to 2.81.

2.29 (2020-06-29)

  • HeaderClientCertificateExtractor class
    • Supported $ssl_client_escaped_cert of Nginx.

2.28 (2020-04-09)

  • AuthleteApiImpl class

    • Added DPoP support.

  • pom.xml

    • Updated the version of authlete-java-common from 2.71 to 2.73.
    • Added com.nimbusds:nimbus-jose-jwt:8.14.

2.27 (2020-03-07)

  • AccessTokenValidator class

    • Added Params inner class.
    • Added validate(Params) method.

  • AuthleteApiCaller class

    • Added dpop, htm and htu arguments to callIntrospection, callToken and callUserInfo methods.

  • AuthorizationDecisionHandlerSpi interface

    • Changed the return type of getVerifiedClaims(String, VerifiedClaimsConstraint) method from VerifiedClaims to List<VerifiedClaims>.

  • BaseResourceEndpoint class

    • Added validateAccessToken(AuthleteApi, Params) method.

  • BaseTokenEndpoint class

    • Added handle(AuthleteApi, TokenRequestHandlerSpi, Params) method.

  • BaseUserInfoEndpoint class

    • Added handle(AuthleteApi, UserInfoRequestHandlerSpi, Params) method.

  • TokenRequestHandler class

    • Added Params inner class.
    • Added handle(Params) method.

  • UserInfoRequestHandler class

    • Added Params inner class.
    • Added handle(Params) method.

  • UserInfoRequestHandlerSpi interface

    • Changed the return type of getVerifiedClaims(String, VerifiedClaimsConstraint) method from VerifiedClaims to List<VerifiedClaims>.

  • pom.xml

    • Updated the version of authlete-java-common from 2.65 to 2.71.

2.26 (2019-12-23)

  • AuthorizationPageModel class

    • Added getVerifiedClaimsForIdToken() method.
    • Added setVerifiedClaimsForIdToken(Pair[]) method.
    • Added getVerifiedClaimsForUserInfo() method.
    • Added setVerifiedClaimsForUserInfo(Pair[]) method.
    • Added isAllVerifiedClaimsForIdTokenRequested() method.
    • Added setAllVerifiedClaimsForIdTokenRequested(boolean) method.
    • Added isAllVerifiedClaimsForUserInfoRequested() method.
    • Added setAllVerifiedClaimsForUserInfoRequested(boolean) method.
    • Added isIdentityAssuranceRequired() method.
    • Added setIdentityAssuranceRequired(boolean) method.
    • Removed getPurposesForIdToken() method.
    • Removed setPurposesForIdToken(Pair[]) method.
    • Removed getPurposesForUserInfo() method.
    • Removed setPurposesForUserInfo(Pair[]) method.

  • BaseAuthorizationDecisionEndpoint class

    • Added handle(AuthleteApi, AuthorizationDecisionHandlerSpi, Params) method.

  • pom.xml

    • Updated the version of authlete-java-common from 2.64 to 2.65.

2.25 (2019-12-23)

  • AuthorizationDecisionHandlerSpi interface

    • Added getVerifiedClaims(String subject, VerifiedClaimsConstraint constraint) method.

  • AuthorizationPageModel class

    • Added getPurpose() method.
    • Added setPurpose(String) method.
    • Added getPurposesForIdToken() method.
    • Added setPurposesForIdToken(Pair[]) method.
    • Added getPurposesForUserInfo() method.
    • Added setPurposesForUserInfo(Pair[]) method.

  • UserInfoRequestHandlerSpi interface

    • Added getVerifiedClaims(String subject, VerifiedClaimsConstraint constraint) method.

  • pom.xml

    • Updated the version of authlete-java-common from 2.61 to 2.64.

  • New classes

    • AuthorizationDecisionHandler.Params

2.24 (2019-12-15)

  • JaxRsUtils class
    • Added parseFormUrlencoded(String) method.

2.23 (2019-12-05)

  • AuthorizationPageModel class

    • Added getAuthorizationDetails() method.
    • Added setAuthorizationDetails(String) method.

  • pom.xml

    • Updated the version of authlete-java-comon from 2.51 to 2.61.

2.22 (2019-12-04)

  • AuthorizationDecisionHandlerSpi interface

    • Added getSub() method.

  • AuthorizationRequestHandlerSpi interface

    • Added getSub() method.

2.21 (2019-11-13)

  • AuthleteApiCaller class

    • Added callPushedAuthReq methods.

  • ResponseUtil class

    • Added toLarge(String) method.

  • New classes

    • BasePushedAuthReqEndpoint
    • PushedAuthReqHandler

2.20 (2019-10-05)

  • AuthleteApiImpl class

    • Implemented deleteClient(String) method.
    • Implemented getClient(String) method.
    • Implemented pushAuthorizationRequest(PushedAuthReqRequest) method.
    • Removed `registerRequestObject(RequestObjectRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 2.50 to 2.51.

2.19 (2019-08-24)

  • AuthleteApiImpl class

    • Implemented registerRequestObject(RequestObjectRequest) method.

  • pom.xml

    • Updated the version of authlete-java-common from 2.49 to 2.50.

2.18 (2019-07-12)

  • AuthleteApiCaller class

    • Added some parameters to the arguments of callDeviceComplete(String userCode, String subject, DeviceCompleteRequest.Result result, Property[] properties, String[] scopes, String errorDescription, URI errorUri) method for ID token generation.

  • BaseEndpoint class

    • Added takeAttribute(HttpSession session, String key) method.

  • New classes

    • BaseDeviceAuthorizationEndpoint class
    • BaseDeviceCompleteEndpoint class
    • BaseDeviceVerificationEndpoint class
    • DeviceAuthorizationPageModel class
    • DeviceAuthorizationRequestHandler class
    • DeviceCompleteRequestHandler class
    • DeviceVerificationPageModel class
    • DeviceVerificationRequestHandler class
    • DeviceCompleteRequestHandlerSpi class
    • DeviceCompleteRequestHandlerSpiAdapter class
    • DeviceVerificationRequestHandlerSpi class
    • DeviceVerificationRequestHandlerSpiAdapter class

  • pom.xml

    • Updated the version of authlete-java-common from 2.41 to 2.49.

2.17 (2019-05-30)

  • AuthleteApiCaller class

    • Added callClientRegistration(String json) method.
    • Added callClientRegistration(String json, String initialAccessToken) method.
    • Added callClientRegistrationGet(String clientId, String registrationAccessToken) method.
    • Added callClientRegistrationUpdate(String clientId, String json, String registrationAccessToken) method.
    • Added callClientRegistrationDelete(String clientId, String registrationAccessToken) method.

  • ResponseUtil class

    • Added created(String entity) method.

  • New classes

    • BaseClientRegistrationEndpoint class
    • ClientRegistrationRequestHandler class

  • pom.xml

    • Updated the version of authlete-java-common from 2.36 to 2.41.

2.16 (2019-03-05)

  • BackchannelAuthenticationRequestHandler class

    • Modified some parts according the change to BackchannelAuthenticationRequestHandlerSpi interface.

  • BackchannelAuthenticationRequestHandlerSpi interface

    • Added a BackchannelAuthenticationIssueResponse parameter to the arguments of startCommunicationWithAuthenticationDevice(User user, BackchannelAuthenticationResponse baRes) method.

  • BackchannelAuthenticationRequestHandlerAdapter class

    • Modified startCommunicationWithAuthenticationDevice(User user, BackchannelAuthenticationResponse baRes) method according the change to BackchannelAuthenticationRequestHandlerSpi interface.

2.15 (2019-02-28)

  • AuthleteApiCaller class

    • Added error description and error URI support to callBackchannelAuthenticationComplete(String, String, Result, long, String, Map<String, Object>, Property[], String[]) method.

  • BackchannelAuthenticationCompleteRequestHandler class

    • Added error description and error URI support.

  • BackchannelAuthenticationCompleteRequestHandlerSpi interface

    • Added getErrorDescription() method.
    • Added getErrorUri() method.

  • BackchannelAuthenticationCompleteRequestHandlerSpiAdapter class

    • Implemented getErrorDescription() method.
    • Implemented getErrorUri() method.

2.14 (2019-01-17)

  • BackchannelAuthenticationRequestHandler class

    • Updated the implementation of handleUserIdentification(BackchannelAuthenticationResponse) method to validate the binding_message request parameter.

  • BackchannelAuthenticationRequestHandlerSpi interface

    • Added isValidBindingMessage(String) method.

  • BackchannelAuthenticationRequestHandlerSpiAdapter class

    • Implemented isValidBindingMessage(String) method.

  • pom.xml

    • Updated the version of authlete-java-common from 2.33 to 2.36.

2.13 (2019-01-09)

  • AuthleteApiCaller class

    • Added callBackchannelAuthentication(MultivaluedMap<String, String>, String, String, String, String[] clientCertificatePath) method.
    • Added backchannelAuthenticationFail(String, BackchannelAuthenticationFailRequest.Reason) method.
    • Added callBackchannelAuthenticationIssue(String) method.
    • Added callBackchannelAuthenticationComplete(String, String, Result, long, String, Map<String, Object>, Property[], String[]) method.

  • AuthleteApiImpl class

    • Implemented backchannelAuthentication(BackchannelAuthenticationRequest) method.
    • Implemented backchannelAuthenticationIssue(BackchannelAuthenticationIssueRequest) method.
    • Implemented backchannelAuthenticationFail(BackchannelAuthenticationFailRequest) method.
    • Implemented backchannelAuthenticationComplete(BackchannelAuthenticationCompleteRequest) method.

  • New classes and interfaces

    • BackchannelAuthenticationCompleteRequestHandler class
    • BackchannelAuthenticationCompleteRequestHandlerSpi interface
    • BackchannelAuthenticationCompleteRequestHandlerSpiAdapter class
    • BackchannelAuthenticationRequestHandler class
    • BackchannelAuthenticationRequestHandlerSpi interface
    • BackchannelAuthenticationRequestHandlerSpiAdapter class
    • BaseBackchannelAuthenticationEndpoint class

  • pom.xml

    • Updated the version of authlete-java-common from 2.30 to 2.33.

2.12 (2018-10-10)

  • AuthleteApiImpl class

    • Implemented getTokenList methods.

  • pom.xml

    • Updated the version of authlete-java-common from 2.23 to 2.30.
    • Updated the version o gson from 2.6.2 to 2.8.5.

2.11 (2018-09-11)

  • AuthleteApiImpl class

    • Added getJaxRsClientBuilder() method.
    • Added setJaxRsClientBuilder(ClientBuilder) method.

  • pom.xml

    • Updated the version of javax.ws.rs-api from 2.0 to 2.1.

2.10 (2018-07-21)

  • authlete-java-common library

    • Updated the version from 2.18 to 2.23.

  • AuthleteApiImpl class

    • Implemented registerClient(ClientRegistrationRequest) method.
    • Implemented verifyJose(JoseVerifyRequest) method.

2.9 (2018-05-26)

  • HeaderClientCertificateExtractor class
    • Updated the implementation of extractClientCertificateChain() method to ignore wrong X-Ssl-Cert[-*] headers sent from misconfigured Apache servers.

2.8 (2018-05-09)

  • BaseEndpoint class

    • Slightly changed the behavior of onError(WebApplicationException). The old implementation called exception.printStackTrace(), but the new implementation does nothing.
    • Added extractClientCertificateChain(HttpServletRequest) method.
    • Added extractClientCertificate(HttpServletRequest) method.

  • BaseResourceEndpoint class

    • Added a variant of validateAccessToken() method which accepts String clientCertificate as the 5th parameter.

  • BaseTokenEndpoint class

    • Added a variant of handle() method which accepts 5 arguments.

  • TokenRequestHandler class

    • Added a variant of handle() method which accepts 3 arguments.

  • New parts

    • ClientCertificateExtractor interface
    • HeaderClientCertificateExtractor class
    • HttpsRequestClientCertificateExtractor class

  • Updated the version of authlete-java-common to 2.18 and updated AuthleteApiImpl accordingly.

2.7 (2017-12-08)

  • Fixed a bug in RevocationRequestHandler. When the action response parameter in a response from /api/auth/revocation is OK, Content-Type of the response returned from the revocation endpoint to the client application should be application/javascript instead of application/json.

2.6 (2017-11-20)

  • Added JaxRsUtils class.

2.5 (2017-11-16)

  • Updated the version of authlete-java-common to 2.11.

  • Implemented new AuthleteApi methods added by authlete-java-common-2.11.

2.4 (2017-10-18)

  • Updated the version of authlete-java-common to 2.10.

  • Supported Settings.setReadTimeout(int) method.

2.3 (2017-10-13)

  • Updated the version of authlete-java-common to 2.9.

  • Implemented AuthleteApi.getSettings() method.

2.2 (2017-07-21)

  • Updated the version of authlete-java-common to 2.7.

  • Implemented AuthleteApi.standardIntrospection(StandardIntrospectionRequest) method.

  • Added BaseIntrospectionEndpoint class and IntrospectionRequestHandler class.

2.1 (2017-07-10)

  • Fixed bug where user authentication time was being treated as milliseconds instead of seconds.

2.0 (2017-03-18)

  • Updated the version of authlete-java-common to 2.1.

  • Implemented the following new methods of AuthleteApi interface.

    • deleteClientAuthorization(long, String)
    • getClientAuthorizationList(ClientAuthorizationGetListRequest)
    • updateClientAuthorization(long, ClientAuthorizationUpdateRequest)

1.8 (2017-02-17)

  • Updated the version of authlete-java-common to 1.40.

  • Implemented deleteGrantedScopes(long, String) method of AuthleteApi interface.

1.7 (2017-02-15)

  • Modified AuthleteApiImpl to catch IllegalStateException which Response.hasEntity() may throw.

1.6 (2017-02-14)

  • Updated the version of authlete-java-common to 1.39.

  • Implemented getGrantedScopes(long, String) method of AuthleteApi interface.

1.5 (2017-02-03)

  • Changed application/json to application/json;UTF-8 in callPostApi() defined in AuthleteApiImpl.

1.4 (2016-07-30)

  • Added getScopes() method to AuthorizationDecisionHandlerSpi and AuthorizationRequestHandlerSpi to provide a function to replace scopes.

  • Updated AuthleteApiImpl for AuthleteApi version 1.34.

1.3 (2016-04-25)

  • Added getProperties() method to AuthorizationDecisionHandlerSpi, AuthorizationRequestHandlerSpi and TokenRequestHandlerSpi to support the mechanism to associate extra properties with access tokens.

  • Added getProperties() method, setProperties(Property[]) method, and other setter methods to AccessTokenInfo class.

1.2 (2016-02-08)

  • Added some Base*Endpoint classes.

  • Added classes to validate an access token.

  • Added utility classes to implement a userinfo endpoint.

1.1 (2016-02-06)

  • Added utility classes to implement (a) a JWK Set endpoint, (b) a configuration endpoint, and (c) a revocation endpoint.

  • Updated AuthleteApiImpl for AuthleteApi version 1.28.

1.0 (2016-01-11)

  • The first release.