Release notes for every release

[Former user]

Hi,

I have been working with JWE encryption using nimbus this sprint. Quite oddly, Nimbus jose-jwt JWE encryption works until version 8.22 but starts breaking from version 9.0 onwards.

When looking for release notes to see whats changed between those versions. The release notes are not available. Can someone let me know what has changed from version 9.0 onwards which breaks JWE encryption.

I can also volunteer to work closely with the devs to update the documentation on release notes.

[Yavor Vasilev]

Hi,

The changes since v1.0 can be found here:

https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt

[Pallavi Roy sawant]

Heya,

Thanks for the prompt response. This piece of code worked for us until 8.22 of the version of Nimbus. We are facing issues once we upgrade anything beyond 9.0 on JDK 11 and is rejected by the vendor. I compared the JSON objects but they match. We are using JWE Compact serialisation here. For security reasons I cannot paste the PEM here for generating the public key.

public static void testEncrypted(String pan) throws FileNotFoundException, CertificateException, JOSEException {
  InputStream stream = new ByteArrayInputStream(publiccert.getBytes());  CertificateFactory f = CertificateFactory.getInstance("X.509");  X509Certificate certificate = (X509Certificate)f.generateCertificate(stream);  RSAPublicKey publicKey = (RSAPublicKey) certificate.getPublicKey();  JWTClaimsSet jwtClaims = new JWTClaimsSet.Builder().claim("card_pan", pan).build();  System.out.println("JSON claim"+ new Payload(jwtClaims.toJSONObject()));  JWEObject jweObject = new JWEObject(new JWEHeader(JWEAlgorithm.RSA_OAEP,      EncryptionMethod.A128CBC_HS256), new Payload(jwtClaims.toJSONObject().toString()));  jweObject.encrypt(new RSAEncrypter((RSAPublicKey) publicKey));  System.out.println(jweObject.serialize());}

‌

[Yavor Vasilev]

No need to post the PEM, a stack trace is better

[Vladimir Dzhuvinov]

Feel free to reopen with a stack trace / test case if the issue is confirmed.