getAudience() {
* Overriding is allowed, but it must call the super implementation.
*
* @param idToken ID token
- * @return {@code true} if verified successfully or {@code false} if failed
+ * @return {@code true} if verified successfully or {@code false} if payload validation failed
* @throws IOException if verification fails to run. For example, if it fails to get public keys
- * for signature validation.
+ * for signature verification.
*/
- public boolean verify(IdToken idToken) throws IOException {
+ public boolean verifyOrThrow(IdToken idToken) throws IOException {
boolean payloadValid = verifyPayload(idToken);
if (!payloadValid) {
@@ -331,14 +367,12 @@ private String getCertificateLocation(Header header) throws VerificationExceptio
}
/**
- * {@link Beta}
* Builder for {@link IdTokenVerifier}.
*
*
Implementation is not thread-safe.
*
* @since 1.16
*/
- @Beta
public static class Builder {
/** Clock. */
From fcc1f43e6cb16c0a4e86cfe587650749d4e7f701 Mon Sep 17 00:00:00 2001
From: Mend Renovate
Date: Fri, 29 Dec 2023 01:17:15 +0100
Subject: [PATCH 66/75] chore(deps): update dependency
com.google.cloud:libraries-bom to v26.29.0 (#938)
---
samples/snippets/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/samples/snippets/pom.xml b/samples/snippets/pom.xml
index 69fdcfc66..df7a2665d 100644
--- a/samples/snippets/pom.xml
+++ b/samples/snippets/pom.xml
@@ -30,7 +30,7 @@
com.google.cloud
libraries-bom
- 26.1.0
+ 26.29.0
pom
import
From 38c3ea218392a6d5eda429637304d6fd67827bf2 Mon Sep 17 00:00:00 2001
From: Mend Renovate
Date: Fri, 29 Dec 2023 01:21:53 +0100
Subject: [PATCH 67/75] chore(deps): update dependency
org.apache.maven.plugins:maven-jar-plugin to v3.3.0 (#940)
Co-authored-by: Timur Sadykov
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 12cc7b298..9aa26310a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -233,7 +233,7 @@
org.apache.maven.plugins
maven-jar-plugin
- 3.2.2
+ 3.3.0
From b4526cbec42a43aa4c8e495a16636fc5e0a3d2e0 Mon Sep 17 00:00:00 2001
From: Mend Renovate
Date: Fri, 29 Dec 2023 01:27:13 +0100
Subject: [PATCH 68/75] chore(deps): update dependency zipp to v3.11.0 (#999)
Co-authored-by: Timur Sadykov
From d5ddb977ec48b3812bf095dd9007b748e488f80b Mon Sep 17 00:00:00 2001
From: Mend Renovate
Date: Fri, 29 Dec 2023 01:34:51 +0100
Subject: [PATCH 69/75] chore(deps): update dependency
org.apache.maven.plugins:maven-dependency-plugin to v3.6.1 (#1002)
Co-authored-by: Timur Sadykov
---
google-oauth-client-appengine/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/google-oauth-client-appengine/pom.xml b/google-oauth-client-appengine/pom.xml
index 32ea92d3c..b18e36d7e 100644
--- a/google-oauth-client-appengine/pom.xml
+++ b/google-oauth-client-appengine/pom.xml
@@ -15,7 +15,7 @@
org.apache.maven.plugins
maven-dependency-plugin
- 3.3.0
+ 3.6.1
com.google.appengine:appengine-api-stubs
From 4468388288ede078f2da48ee8b66cdb2ca9e3012 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 28 Dec 2023 16:43:11 -0800
Subject: [PATCH 70/75] chore(deps): bump certifi from 2022.9.24 to 2022.12.7
in /.kokoro (#1008)
* chore(deps): bump certifi from 2022.9.24 to 2022.12.7 in /.kokoro
Bumps [certifi](https://github.com/certifi/python-certifi) from 2022.9.24 to 2022.12.7.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](https://github.com/certifi/python-certifi/compare/2022.09.24...2022.12.07)
---
updated-dependencies:
- dependency-name: certifi
dependency-type: direct:production
...
Co-authored-by: Timur Sadykov
From 1b586226b40172a4853facd3248f81e82e2c7ea9 Mon Sep 17 00:00:00 2001
From: Mend Renovate
Date: Fri, 29 Dec 2023 01:45:26 +0100
Subject: [PATCH 71/75] chore(deps): update dependency
org.apache.maven.plugins:maven-surefire-plugin to v3.2.3 (#1020)
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 9aa26310a..ac4db5541 100644
--- a/pom.xml
+++ b/pom.xml
@@ -244,7 +244,7 @@
maven-surefire-plugin
- 3.0.0-M7
+ 3.2.3
-Xmx1024m
sponge_log
From 406ba03d7e96e21d2ff5a2dacea4ce9970f03c8c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 29 Dec 2023 00:46:15 +0000
Subject: [PATCH 72/75] chore(deps): bump requests from 2.27.1 to 2.31.0 in
/.kokoro (#1052)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [requests](https://togithub.com/psf/requests) from 2.27.1 to 2.31.0.
Release notes
Sourced from requests's releases.
v2.31.0
2.31.0 (2023-05-22)
Security
-
Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential
forwarding of Proxy-Authorization
headers to destination servers when
following HTTPS redirects.
When proxies are defined with user info (https://user:pass@proxy:8080), Requests
will construct a Proxy-Authorization
header that is attached to the request to
authenticate with the proxy.
In cases where Requests receives a redirect response, it previously reattached
the Proxy-Authorization
header incorrectly, resulting in the value being
sent through the tunneled connection to the destination server. Users who rely on
defining their proxy credentials in the URL are strongly encouraged to upgrade
to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy
credentials once the change has been fully deployed.
Users who do not use a proxy or do not supply their proxy credentials through
the user information portion of their proxy URL are not subject to this
vulnerability.
Full details can be read in our Github Security Advisory
and CVE-2023-32681.
v2.30.0
2.30.0 (2023-05-03)
Dependencies
v2.29.0
2.29.0 (2023-04-26)
Improvements
- Requests now defers chunked requests to the urllib3 implementation to improve
standardization. (#6226)
- Requests relaxes header component requirements to support bytes/str subclasses. (#6356)
... (truncated)
Changelog
Sourced from requests's changelog.
2.31.0 (2023-05-22)
Security
-
Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential
forwarding of Proxy-Authorization
headers to destination servers when
following HTTPS redirects.
When proxies are defined with user info (https://user:pass@proxy:8080), Requests
will construct a Proxy-Authorization
header that is attached to the request to
authenticate with the proxy.
In cases where Requests receives a redirect response, it previously reattached
the Proxy-Authorization
header incorrectly, resulting in the value being
sent through the tunneled connection to the destination server. Users who rely on
defining their proxy credentials in the URL are strongly encouraged to upgrade
to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy
credentials once the change has been fully deployed.
Users who do not use a proxy or do not supply their proxy credentials through
the user information portion of their proxy URL are not subject to this
vulnerability.
Full details can be read in our Github Security Advisory
and CVE-2023-32681.
2.30.0 (2023-05-03)
Dependencies
2.29.0 (2023-04-26)
Improvements
- Requests now defers chunked requests to the urllib3 implementation to improve
standardization. (#6226)
- Requests relaxes header component requirements to support bytes/str subclasses. (#6356)
2.28.2 (2023-01-12)
... (truncated)
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://togithub.com/googleapis/google-oauth-java-client/network/alerts).
From 12f96cc5e405d0954ed8958f93f27725f69e2602 Mon Sep 17 00:00:00 2001
From: Mend Renovate
Date: Fri, 29 Dec 2023 01:48:38 +0100
Subject: [PATCH 73/75] chore(deps): update dependency
org.apache.maven.plugins:maven-project-info-reports-plugin to v3.5.0 (#1019)
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index ac4db5541..d56ee81bb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -272,7 +272,7 @@
org.apache.maven.plugins
maven-project-info-reports-plugin
- 3.4.1
+ 3.5.0
org.apache.maven.plugins
From a5a2515c9e266fd6e4a05fbbcd68201436780047 Mon Sep 17 00:00:00 2001
From: Mend Renovate
Date: Fri, 29 Dec 2023 01:50:40 +0100
Subject: [PATCH 74/75] chore(deps): update project.http.version to v1.43.3
(#1038)
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index d56ee81bb..2af55478e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -461,7 +461,7 @@
-->
2.0.6
UTF-8
- 1.42.3
+ 1.43.3
3.0.2
31.1-android
1.1.4c
From 53eaa28611764ac5e8c7b9917d4f96c553b9b8f0 Mon Sep 17 00:00:00 2001
From: "release-please[bot]"
<55107282+release-please[bot]@users.noreply.github.com>
Date: Thu, 18 Jan 2024 03:46:43 -0800
Subject: [PATCH 75/75] chore(main): release 1.35.0 (#925)
Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
---
CHANGELOG.md | 20 ++++++++++++++++++++
google-oauth-client-appengine/pom.xml | 2 +-
google-oauth-client-assembly/pom.xml | 2 +-
google-oauth-client-bom/pom.xml | 12 ++++++------
google-oauth-client-java6/pom.xml | 2 +-
google-oauth-client-jetty/pom.xml | 2 +-
google-oauth-client-servlet/pom.xml | 2 +-
google-oauth-client/pom.xml | 2 +-
pom.xml | 2 +-
samples/dailymotion-cmdline-sample/pom.xml | 2 +-
samples/keycloak-pkce-cmdline-sample/pom.xml | 2 +-
versions.txt | 2 +-
12 files changed, 36 insertions(+), 16 deletions(-)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c3adecd2e..c5c72b2ef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,25 @@
# Changelog
+## [1.35.0](https://github.com/googleapis/google-oauth-java-client/compare/v1.34.1...v1.35.0) (2023-12-29)
+
+
+### Features
+
+* Add googleapis-auth as codeowner team ([#923](https://github.com/googleapis/google-oauth-java-client/issues/923)) ([d7dc38c](https://github.com/googleapis/google-oauth-java-client/commit/d7dc38c3a701b074ac90faf6618f594c3675d126))
+
+
+### Bug Fixes
+
+* Adding retries to public key fetch for IdTokenVerifier to cover transient network issues. ([289f139](https://github.com/googleapis/google-oauth-java-client/commit/289f1397168ac825da68907b050a1ef41827c4ca))
+* Deprecating the IdTokenVerifier.verify, adding verifyOrThrow as an alternative ([#1091](https://github.com/googleapis/google-oauth-java-client/issues/1091)) ([a9a062e](https://github.com/googleapis/google-oauth-java-client/commit/a9a062ef8665495055571534b9fff4fcc630c8ad))
+* **test:** Update test tokens ([#953](https://github.com/googleapis/google-oauth-java-client/issues/953)) ([d523410](https://github.com/googleapis/google-oauth-java-client/commit/d5234104b28dfcc3c9424e200f2ede8832bede6f))
+* Update test tokens ([#971](https://github.com/googleapis/google-oauth-java-client/issues/971)) ([c28d149](https://github.com/googleapis/google-oauth-java-client/commit/c28d1495a9095753544651294373990207b25203))
+
+
+### Dependencies
+
+* Update doclet version to 1.9.0 ([#1054](https://github.com/googleapis/google-oauth-java-client/issues/1054)) ([ca216f9](https://github.com/googleapis/google-oauth-java-client/commit/ca216f9fd1499a2d76a199c74adeff5fd0d8b122))
+
## [1.34.1](https://github.com/googleapis/google-oauth-java-client/compare/v1.34.0...v1.34.1) (2022-06-09)
diff --git a/google-oauth-client-appengine/pom.xml b/google-oauth-client-appengine/pom.xml
index b18e36d7e..d6e447f4a 100644
--- a/google-oauth-client-appengine/pom.xml
+++ b/google-oauth-client-appengine/pom.xml
@@ -4,7 +4,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
../pom.xml
google-oauth-client-appengine
diff --git a/google-oauth-client-assembly/pom.xml b/google-oauth-client-assembly/pom.xml
index c7dc2fdd1..4f585f0eb 100644
--- a/google-oauth-client-assembly/pom.xml
+++ b/google-oauth-client-assembly/pom.xml
@@ -4,7 +4,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
../pom.xml
com.google.oauth-client
diff --git a/google-oauth-client-bom/pom.xml b/google-oauth-client-bom/pom.xml
index 4632f173d..b9ec8f85f 100644
--- a/google-oauth-client-bom/pom.xml
+++ b/google-oauth-client-bom/pom.xml
@@ -3,7 +3,7 @@
4.0.0
com.google.oauth-client
google-oauth-client-bom
- 1.34.2-SNAPSHOT
+ 1.35.0
pom
Google OAuth Client Library for Java BOM
@@ -63,27 +63,27 @@
com.google.oauth-client
google-oauth-client
- 1.34.2-SNAPSHOT
+ 1.35.0
com.google.oauth-client
google-oauth-client-appengine
- 1.34.2-SNAPSHOT
+ 1.35.0
com.google.oauth-client
google-oauth-client-java6
- 1.34.2-SNAPSHOT
+ 1.35.0
com.google.oauth-client
google-oauth-client-jetty
- 1.34.2-SNAPSHOT
+ 1.35.0
com.google.oauth-client
google-oauth-client-servlet
- 1.34.2-SNAPSHOT
+ 1.35.0
diff --git a/google-oauth-client-java6/pom.xml b/google-oauth-client-java6/pom.xml
index ac671f169..126c87240 100644
--- a/google-oauth-client-java6/pom.xml
+++ b/google-oauth-client-java6/pom.xml
@@ -4,7 +4,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
../pom.xml
google-oauth-client-java6
diff --git a/google-oauth-client-jetty/pom.xml b/google-oauth-client-jetty/pom.xml
index 389e4a4c7..226eacf6b 100644
--- a/google-oauth-client-jetty/pom.xml
+++ b/google-oauth-client-jetty/pom.xml
@@ -4,7 +4,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
../pom.xml
google-oauth-client-jetty
diff --git a/google-oauth-client-servlet/pom.xml b/google-oauth-client-servlet/pom.xml
index 12ca9e04b..225d868f0 100644
--- a/google-oauth-client-servlet/pom.xml
+++ b/google-oauth-client-servlet/pom.xml
@@ -4,7 +4,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
../pom.xml
google-oauth-client-servlet
diff --git a/google-oauth-client/pom.xml b/google-oauth-client/pom.xml
index bbcc4ea11..3ab1c1058 100644
--- a/google-oauth-client/pom.xml
+++ b/google-oauth-client/pom.xml
@@ -4,7 +4,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
../pom.xml
google-oauth-client
diff --git a/pom.xml b/pom.xml
index 2af55478e..46c4fd8a5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
pom
Parent for the Google OAuth Client Library for Java
Google OAuth Client Library for Java
diff --git a/samples/dailymotion-cmdline-sample/pom.xml b/samples/dailymotion-cmdline-sample/pom.xml
index 9f9b62296..a2ff0150a 100644
--- a/samples/dailymotion-cmdline-sample/pom.xml
+++ b/samples/dailymotion-cmdline-sample/pom.xml
@@ -4,7 +4,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
../../pom.xml
dailymotion-simple-cmdline-sample
diff --git a/samples/keycloak-pkce-cmdline-sample/pom.xml b/samples/keycloak-pkce-cmdline-sample/pom.xml
index 113cfcd80..84b7c6e87 100644
--- a/samples/keycloak-pkce-cmdline-sample/pom.xml
+++ b/samples/keycloak-pkce-cmdline-sample/pom.xml
@@ -4,7 +4,7 @@
com.google.oauth-client
google-oauth-client-parent
- 1.34.2-SNAPSHOT
+ 1.35.0
../../pom.xml
keycloak-pkce-cmdline-sample
diff --git a/versions.txt b/versions.txt
index d2b2de001..23df4547f 100644
--- a/versions.txt
+++ b/versions.txt
@@ -1,4 +1,4 @@
# Format:
# module:released-version:current-version
-google-oauth-client:1.34.1:1.34.2-SNAPSHOT
+google-oauth-client:1.35.0:1.35.0