Hi! I am happy to announce a new release of buddy, a security library for clojure.
Since the buddy is split in different modules, here relevant changes across all modules: buddy-core: - Add support for AEAD mode of operations (gcm) - Add support for AES Key Wrapping algorithms. - Add support for deflate compression algorithm. - Several fixes for padding, codecs and keys namespaces. buddy-sign: - Add support for JWE (Json Web Encryption) specification. With support for all specified (in RFC) content encryption algorithms and good subset of key encryption algorithms, including asymmetric key encryption schemes. - Add support also for JWE and JWS registered claims validation: aud, iss (exp, nbf are already supported previously). - The default JWE and JWS api not raises descriptive exceptions instead of returning a useless nil in case of something goes wrong on unsing/decrypt process (breaking change). - Implement security considerations from https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ (breaking change because now is more strict with parameters) buddy-auth: - Improved exception based authorization system, removing all java source (now is 100% clojure source). - Add JWE authentication/authorization backend. - Add the ability to match by http method on access rules. - Add the ability to set multiple authentication backends in `wrap-authentication` middleware. - Several bugfixes on all parts of the library. Github: https://github.com/funcool/buddy-core https://github.com/funcool/buddy-auth https://github.com/funcool/buddy-hashers https://github.com/funcool/buddy-sign Documentation: https://funcool.github.io/buddy-core/latest/ https://funcool.github.io/buddy-auth/latest/ https://funcool.github.io/buddy-hashers/latest/ https://funcool.github.io/buddy-sign/latest/ Cheers. Andrey -- Andrey Antukh - Андрей Антух - <andrei.anto...@kaleidos.net> / <n...@niwi.be > http://www.niwi.be <http://www.niwi.be/page/about/> https://github.com/niwibe -- You received this message because you are subscribed to the Google Groups "Clojure" group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups "Clojure" group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
