Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump System.IdentityModel.Tokens.Jwt from 6.22.1 to 6.26.0 #130

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 23, 2023

Bumps System.IdentityModel.Tokens.Jwt from 6.22.1 to 6.26.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

6.26.0

Servicing release Introducing a new boolean TokenValidationParameter LogTokenId. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2002 Update System.Text.Encodings.Web AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1997 Update ValidateToken call stack fully async AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1996 JsonWebTokenHandler to return the JsonWebToken on validation failure AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1989 Update documentation of DefaultTokenLifetimeInMinutes AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1988

6.25.1

Servicing release .net was throwing when JWT tokens contained claims that used escaped characters. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1975 Fixed Typo in comments AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1971 Added inner exception to help diagnose when reading JWT tokens fails. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1968 Updated comments to improve understanding of RoleClaimTypeRetriever and NameClaimTypeRetriever AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1960

6.25.0

Add Instance property bag that is cleared when Clone is called. Added comments to JsonWebTokenHandler and JwtSecurityTokenHandler to emphasize that ReadToken does not validate the token. #1952 #1954

6.24.0

Single feature to control if exceptions are logged for Audience and Issuer failures. Sometimes multiple policies are used, when a subsequent policy succeeds the upper layer can decide if previous exceptions should be logged. #1949

6.23.1

A simple 'dot' release to fix an issue where JsonWebTokenHandler virtual CreateClaimsIdentity was not called. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1940

6.23.0

#1934 JsonWebToken and JsonWebTokenHandler use System.Text.Json for JSON parsing for targets Net61+. String splits have been removed and much of the duplicated string copying and processing has been removed resulting in a 20-25% performance increase.

#1924 This delegate will be called just before a token has the SignatureValidated. This allows for preprocessing of the token prior to signature validation. This is currently only used by the JsonWebTokenHandler.

Changelog

Sourced from System.IdentityModel.Tokens.Jwt's changelog.

See the release notes for details on bug fixes and added features.

Commits
  • 716124a Add TVP to check if Token Identifier can be logged (#2002)
  • 2d18df9 JsonWebTokenHandler to return the JsonWebToken on validation failure (#1989)
  • 73691c9 Update System.Text.Encodings.Web to address https://github.com/AzureAD/azure-...
  • c0f9c8d corrected links to datatracker.ietf.org
  • 0e9e6bd correct documentation of DefaultTokenLifetimeInMinutes
  • 9ccf953 Make internal methods async
  • 82fda2c Optimize LKG feature for better resilience (#1967)
  • 013a422 Bundling the exception as an inner exception of the ArgumentException.
  • 17e0f7c update version
  • a3fd695 Try to resolve signing keys from TVP if configuration is null or does not con...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [System.IdentityModel.Tokens.Jwt](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) from 6.22.1 to 6.26.0.
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@6.22.1...6.26.0)

---
updated-dependencies:
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 23, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 8, 2023

Superseded by #132.

@dependabot dependabot bot closed this Feb 8, 2023
@dependabot dependabot bot deleted the dependabot/nuget/System.IdentityModel.Tokens.Jwt-6.26.0 branch February 8, 2023 00:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants