You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Remove CryptoProvider and just use JCE to use a third party provider such as BouncyCastle.
Tested against Bouncy Castle FIPS provider, but any provider could be used.
Added support for EdDSA curves Ed25519 and Ed448.
It is is not advised to use the EdDSA alg header as it has bee deprecated in favor of Ed25519 and Ed448.
In order to use the OpenIDConnect c_hash or at_hash methods with the Ed448 algorithm, you will need to register a crypto provider that can provide the SHAKE256 digest, such as BouncyCastle.
Using these methods with the default Java JCA will throw an exception because the SHAKE256 message digest will not be found.
Correct the padding when extracting the r and s components from a DER encoded public key.
This bug may cause some signatures to be invalid when using ES512.
Bind a deserializer using @JsonDeserialize the JWT object for all ZoneDateTime objects. This allows
you to use any Jackson Object Mapper w/out explicitly binding these deserializers.