Nimbus OAuth 2.0 / OpenID Connect SDK 3.4

There is a new release of the Java SDK for building OAuth 2.0 and OpenID Connect client applications and servers.

Updated dynamic client registration

The OAuth 2.0 client registration logic was changed to reflect the latest draft-ietf-oauth-dyn-reg-18, published earlier this month by members of the OAuth WG.

Serialisation and parsing of the client_secret_expires_at field in client information responses when set to zero (meaning no expiration) was also fixed (issues #92 and #94).

Upgraded to Nimbus JOSE+JWT 2.26.1

We also upgraded the SDK to the use the latest release of the Nimbus library for JOSE and JWTs.

Added new classes

  • TokenEncoding -- enumerates the possible token encodings - identifier based or self-contained.

  • ClaimsTransport -- enumerates the possible ways to return OpenID Connect claims to the client application - at the UserInfo endpoint, or by including them in the ID token.

Download

The Maven Dependency for the new 3.4 release of the OAuth 2.0 / OpenID Connect SDK:

<dependency>
    <groupId>com.nimbusds</groupId>
    <artifactId>oauth2-oidc-sdk</artifactId>
    <version>3.4</version>
</dependency>

For other methods check out the downloads page.