Les Hazlewood

JWE support

2

This does not yet support JWKs. That'll be next.

Due to `ServiceLoader` problems with: * file I/O at scale as discussed in https://github.com/jwtk/jjwt/issues/648#issuecomment-1206632743 as well as * ClassLoader problems in JEE environments as discussed in https://github.com/jwtk/jjwt/issues/751 (and perhaps this...

Remove the ability to verify asymmetric signatures with PrivateKeys

3

JJWT's early days allowed this for server-side convenience - in case a server wanted to verify a JWS with the private key it had access to. This however encourages poor...

JWK X5U verification

1

https://datatracker.ietf.org/doc/html/rfc7517#section-4.6 If receiving a JWK with x5u, it must be verified as defined in the above spec section before it can be used. Work to be done in the `jwe`...

Functional interface cleanup

2

Current 0.10.0-SNAPSHOT base (master) has a few of duplicate(ish) interfaces in the `io.jsonwebtoken.io` package that could probably be consolidated with a single functional interface. This would have to be an...

Initial JWE support

13

Shared key ( `dir` ) encryption first, more complicated next.

Move candidate io.jsonwebtoken.lang.* classes to the impl module

3

Due to old implementations (before JJWT was modularized), the `io.jsonwebtoken.lang` package in the `api` module contains a lot of classes and methods that aren't needed by JJWT users. For 1.0,...

JwtParser custom validators

1

The current `JwtParser` interface at the time of this issue's creation has mutator methods that enable validation of various claims. The current `require`* methods only enforce that the claim exists...

To allow custom signature algorithms to be plugged in. This is the strategy already taken by the JWE work, we should do the same for JWS. Because this is a...

Remove Clock in favor of Supplier<Date>

2

Requires JDK 8, i.e. 1.0.0 release #java