Skip to content

SCRAM Java 3.0
Compare
Choose a tag to compare
@jorsol jorsol released this 03 Apr 17:08
· 88 commits to main since this release
3.0
dd9bb52
This commit was signed with the committer’s verified signature.
jorsol Jorge Solórzano
GPG key ID: F857175B7A3A5ACB
Learn about vigilant mode.

💥 Breaking changes

  • ⚠️ Full refactor of the scram java implementation, this release is compatible with Java 8+, but it's incompatible with previous releases ⚠️

🚀 New features

  • Fully rewrite the ScramClient allowing negotiation of channel-binding properly.
  • Create Multi-release Modular JARs, the modules names are:
    • com.ongres.scram.common for the common scram messages.
    • com.ongres.scram.client for the scram client implementation.
  • Add StringPreparation.POSTGRESQL_PREPARATION, for any error in SASL preparation, it falls back to return the raw string.
  • Now the released jars are reproducible.
  • Publish CycloneDX SBOM.
  • Implementation of tls-server-end-point channel binding data extraction.

🏗️ Improvements

  • Update of the saslprep dependency to 2.1.
  • Now the password is passed as a char[].
  • Improve Javadoc documentation.

👻 Maintenance

  • Migrate the main repo back to GitHub.
  • Remove the shaded Bouncy Castle pbkdf2 and base64 implementation used for Java 7 support.
Assets 2
Loading