• Allow override of the system clock, remove jmockit from tests. (thanks @Ophirr33)
• JwtHeader and JwtClaim are no longer case class so that you can extend them. (thanks @fahman)
• Fix Play demo app. (thanks @ma3574)
• Remove dependency on Bouncycastle. (thanks @brakthehack)
• Deprecate (but also improved) the pure Scala implementation of JwtCore. It's very limited, non-performant and should not be used. I will keep it around for tests and if some people need it.

Migration

If you want to keep using the BouncyCastle implementation, you will have to add it manually. You can see how it's done in the tests. Don't forget to also add "org.bouncycastle" % "bcpkix-jdk15on" % "1.60" as a dependency of your project.

Security.addProvider(new BouncyCastleProvider())

• Upgrade to play-json 2.7.1 (thanks @etspaceman)
• Add Scala 2.13.0-M5 to cross compilation for projects supporting it (thanks @2m and @ennru)
• Move JwtHeader and JwtClaim to basic classes (thanks @fahman)

• Upgrade to Play 2.7.0 (thanks @prakhunov)
• Upgrade to play-json 2.7.0 (thanks @etspaceman)
• Drop support for Java 6 and 7

• Upgrade to uPickle 0.7.1 (thanks @edombowsky)
• Add support for Argonaut (thanks @isbodand)

• Bump bouncyCastle version to fix CVE-2018-1000613 (thanks @djamelz)
• Also 1.0.0 for no reason except no feature was needed over the last months.

Breaking change

This is actually a simple one but still... fixed a typo at asymmetric missing one m, just need to rename a few types to fix your code (thanks @DrPhil).

• Add support to spray-json (thanks @Slakah)
• Bump some versions (thanks @vhiairrassary)

• Add support to aud being a simple string on uPickle (thans @deterdw)
• Make all parseHeader and parseClaim methods public.

After consideration, release #84 , which mostly allow users to write custom parsers by extending jwt-scala ones. Doc page can be found here.

• Adding Key ID property to JwtHeader as kid in JSON payload

• Upgrade to uPickle 0.5.1
• Upgrade to Circe 0.9.1 (thanks @jan0sch)

• Fix exception when play.http.session.maxAge is null in Play 2.6.x (thanks @austinpernell)

• Add play.http.session.jwtResponseName to customize response header in Play (thanks @Isammoc)
• Fix code snippet style in docs

• Upgrade to Circe 0.8.0 (thanks @dvic)
• Play 2.6 support (thanks @perotom)
• Bouncy Castle 1.57 (thanks @rwhitworth)

• Support spaces in JSON for pure Scala JWT

• Breaking changes I liked having all implicits directly inside the package object but it started to create problems. When generating the documentation, which depends on all projects, we had runtime errors while all tests were green, but they are ran on project at a time. Also, it means all implicits where always present on the scope which might not be the best option. So the idea is to move them from the package object to the JwtXXX object. For example, for Play Json:

// Before
// JwtJson.scala.
package pdi.jwt

object JwtJson extends JwtJsonCommon[JsObject] {
  // stuff...
}

// package.scala
package pdi

package object jwt extends JwtJsonImplicits {}

// --------------------------------------------------------
// After
// JwtJson.scala.
package pdi.jwt

object JwtJson extends JwtJsonCommon[JsObject] with JwtJsonImplicits {
  // stuff...
}

• Drop Scala 2.10
• Play support is back

• Support Scala 2.12.0
• Drop Play Framework support until it supports Scala 2.12
• Add uPickle support (thanks @alonsodomin )
• Update Play Json to 2.6.0-M1 for Scala 2.12 support
• Update Circe to 0.7.0

• Support Circe 0.6.0 (thanks @TimothyKlim )

• Support Json4s 3.5.0 (thanks @sanllanta )

• Transformation of Signature to ASN.1 DER for ECDSA Algorithms (thanks @bestehle )
• Remove algorithm aliases to align with JWA spec