jjwt v0.10.0 Release Notes
-
🚀 This is a fairly large feature enhancement release that enables the following:
- Modular project structure resulting in pluggable JJWT dependencies (Issue 348)
- 🔧 Auto-configuration for Jackson or JSON-Java JSON processors.
- Automatic SignatureAlgorithm selection based on specified signing Key.
- Algorithm and Key Strength Assertions
- Simplified Key generation
- 👍 Deterministic Base64(URL) support on all JDK and Android platforms
- Custom JSON processing
- 📚 Complete documentation
- 🛠 and a bunch of other minor fixes and enhancements.
BACKWARDS-COMPATIBILITY NOTICE:
JJWT's new modular design utilizes distinctions between compile and runtime dependencies to ensure you only depend on the public APIs that are safe to use in your application. All internal/private implementation classes have 🚚 been moved to a new
jjwt-implruntime dependency.If you depended on any internal implementation classes in the past, you have two choices:
🔨 1. Refactor your code to use the public-only API classes and interfaces in the
jjwt-api.jar. Any functionality you might have used in the internal implementation should be available via newer cleaner interfaces and helper classes in that .jar.- Specify the new
jjwt-impl.jar not as a runtime dependency but as a compile dependency. This would make your upgrade to JJWT 0.10.0 fully backwards compatible, but you do so at your own risk. JJWT will make NO semantic version compatibility guarantees in thejjwt-impl.jar moving forward. Semantic versioning will be very carefully adhered to in all other JJWT dependencies however.