spring-vault

Provides familiar Spring abstractions for HashiCorp Vault

APACHE-2.0 License

Stars
281
Committers
62

Bot releases are visible (Hide)

spring-vault - 3.1.2 Latest Release

Published by mp911de 2 months ago

📗 Links

🐞 Bug Fixes

  • Secret rotation failing after LoginTokenExpiredEvent #867
  • Read-Timeout not applied with Apache Http Components and no-SSL #861
  • Private Key is null in CertificateBundle using of(String serialNumber, String certificate, String issuingCaCertificate, String privateKey) #857

📔 Documentation

  • Bundle Javadoc with Antora documentation site #872

🔨 Dependency Upgrades

  • Upgrade to Reactor 2023.0.9 #879
  • Upgrade to Spring Data 2023.1.9 #878
  • Upgrade to Spring 6.1.12 #877
  • Upgrade dependencies #876
  • Upgrade to Logback 1.4.14 #840

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

  • @dependabot[bot]
spring-vault - 3.1.1

Published by mp911de 9 months ago

📗 Links

🐞 Bug Fixes

  • Leases no longer revoked after stopping SecretLeaseContainer #844

🔨 Dependency Upgrades

  • Upgrade dependencies #850
  • Upgrade to Project Reactor 2023.0.2 #849
  • Upgrade to Spring Framework 6.1.3 #848
  • Upgrade to Spring Data 2023.1.2 #847
spring-vault - 3.1.0

Published by mp911de 11 months ago

📗 Links

⭐ New Features

  • Consistently use Instant for next trigger computation #831
  • Support prehashed for the Transit engine #745
  • Support role_name and entity_alias in VaultTokenRequest #690
  • Add transit rewrap batch method #687
  • Improvement: Enhance PKI API - reading and writing certificates #477

📔 Documentation

  • Upgrade to Antora UI 0.4.7 #833
  • Fixed the URL for the Spring Data Commons documentation #832
  • Upgrade to Antora UI 0.4.3 #822

🔨 Dependency Upgrades

  • Upgrade to Spring Security 6.2.0 #837
  • Upgrade to Spring Data 2023.1.0 #836
  • Upgrade to Project Reactor 2023.1.0 #835
  • Upgrade to Spring Framework 6.1.1 #834
  • Upgrade to Vault 1.15 #830
  • Upgrade to Spring Framework 6.1.0-RC1 #829
  • Upgrade to Project Reactor 2023.0.0-RC1 #828
  • Upgrade to Spring Security 6.2.0-RC1 #827
  • Upgrade to Spring Data 2023.1.0-RC1 #826
  • Upgrade dependencies #825

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

  • @runbing
spring-vault - 3.1.0-RC1

Published by mp911de 12 months ago

📗 Links

⭐ New Features

  • Support prehashed for the Transit engine #745
  • Support role_name and entity_alias in VaultTokenRequest #690
  • Add transit rewrap batch method #687

📔 Documentation

  • Upgrade to Antora UI 0.4.3 #822

🔨 Dependency Upgrades

  • Upgrade to Spring Framework 6.1.0-RC1 #829
  • Upgrade to Project Reactor 2023.0.0-RC1 #828
  • Upgrade to Spring Security 6.2.0-RC1 #827
  • Upgrade to Spring Data 2023.1.0-RC1 #826
  • Upgrade dependencies #825
spring-vault - 3.1.0-M1

Published by mp911de about 1 year ago

📗 Links

⭐ New Features

  • Introduce AuthenticationEventMulticaster interface #816
  • Migrate Documentation to Antora #810
  • Support for custom_metadata in Versioned.Metadata #789
  • Support JWT Authentication #689
  • ReactiveVaultTemplate for the key-value backend version 2 #576

🐞 Bug Fixes

  • SecretLeaseContainer not aware of Vault Session token expiry #815
  • @KeySpace not considered using Spring Data 3.1 #800

📔 Documentation

  • Update snapshot repository documentation #806

🔨 Dependency Upgrades

  • Upgrade dependencies #817
spring-vault - 3.0.4

Published by mp911de over 1 year ago

📗 Links

⭐ New Features

  • Role name can now be used with cert auth #780
  • Refine logging after token revocation failure #766
  • Add AWS IAM Authentication to EnvironmentVaultConfiguration #761
  • Allow reuse of library-specific configuration code in ClientHttpRequestFactoryFactory and ClientHttpConnectorFactory #760
  • AWS IAM Authentication should provide a way to sign request for the global STS endpoint (eu-east-1) #758
  • Add native image hints and AOT pre-processor #747
  • VaultTransitOperations with versioned keys #726
  • Allow dropping tokens from the session manager for easier recovery on lookup failures #684
  • Extend VaultTransitKey with additional properties returned by the API #661

🐞 Bug Fixes

  • @KeySpace not considered using Spring Data 3.1 #800
  • EnvironmentVaultConfiguration causes ClassNotFoundException if AWS SDK is not on the class path #786
  • Can not delete entity if id is UUID #777
  • Do not revoke batch tokens #764
  • VaultException thrown without "cause" hides important information #713

📔 Documentation

  • Fix typos in vault-repositories.adoc #795
  • Spring Vault documentation broken link #788

🔨 Dependency Upgrades

  • Documentation still refers to removed spring-vault-dependencies artifact #785
  • Upgrade build plugins #784
  • Upgrade to Spring Javaformat 0.38 #781
  • Upgrade to Spring Data 2022.0.4 #770
  • Upgrade to Project Reactor 2022.0.5 #769
  • Upgrade to Spring Framework 6.0.7 #768
  • Upgrade to Spring Security 6.0.2 #767
  • Upgrade to Reactor 2022.0.3 #754
  • Upgrade to Spring Data 2022.0.2 #753
  • Upgrade to Netty 4.1.89.Final #752
  • Upgrade dependencies #748

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

  • @andylintner
  • @rychkov
spring-vault - 2.3.4

Published by mp911de over 1 year ago

📗 Links

⭐ New Features

  • Role name can now be used with cert auth #780

📔 Documentation

  • Fix typos in vault-repositories.adoc #795
  • Spring Vault documentation broken link #788

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

spring-vault - 3.0.3

Published by mp911de over 1 year ago

📗 Links

⭐ New Features

  • Add reactive health check #783
  • Role name can now be used with cert auth #780
  • Refine logging after token revocation failure #766
  • Add AWS IAM Authentication to EnvironmentVaultConfiguration #761
  • Allow reuse of library-specific configuration code in ClientHttpRequestFactoryFactory and ClientHttpConnectorFactory #760
  • AWS IAM Authentication should provide a way to sign request for the global STS endpoint (eu-east-1) #758
  • Add native image hints and AOT pre-processor #747
  • VaultTransitOperations with versioned keys #726
  • Allow dropping tokens from the session manager for easier recovery on lookup failures #684
  • Extend VaultTransitKey with additional properties returned by the API #661
  • Reactive support for transit operations #620

🐞 Bug Fixes

  • EnvironmentVaultConfiguration causes ClassNotFoundException if AWS SDK is not on the class path #786
  • Can not delete entity if id is UUID #777
  • Do not revoke batch tokens #764
  • VaultException thrown without "cause" hides important information #713

📔 Documentation

  • Fix typos in vault-repositories.adoc #795
  • Add IntelliJ setup and formatting instructions to README. #794
  • Spring Vault documentation broken link #788

🔨 Dependency Upgrades

  • Documentation still refers to removed spring-vault-dependencies artifact #785
  • Upgrade build plugins #784
  • Upgrade to Spring Javaformat 0.38 #781
  • Upgrade to Spring Data 2022.0.4 #770
  • Upgrade to Project Reactor 2022.0.5 #769
  • Upgrade to Spring Framework 6.0.7 #768
  • Upgrade to Spring Security 6.0.2 #767
  • Upgrade to Reactor 2022.0.3 #754
  • Upgrade to Spring Data 2022.0.2 #753
  • Upgrade to Netty 4.1.89.Final #752
  • Upgrade dependencies #748

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

spring-vault - 3.0.2

Published by mp911de over 1 year ago

📗 Links

⭐ New Features

  • Refine logging after token revocation failure #766
  • Add AWS IAM Authentication to EnvironmentVaultConfiguration #761
  • Allow reuse of library-specific configuration code in ClientHttpRequestFactoryFactory and ClientHttpConnectorFactory #760
  • AWS IAM Authentication should provide a way to sign request for the global STS endpoint (eu-east-1) #758
  • Allow dropping tokens from the session manager for easier recovery on lookup failures #684

🐞 Bug Fixes

  • Do not revoke batch tokens #764
  • VaultException thrown without "cause" hides important information #713

🔨 Dependency Upgrades

  • Upgrade to Spring Data 2022.0.4 #770
  • Upgrade to Project Reactor 2022.0.5 #769
  • Upgrade to Spring Framework 6.0.7 #768
  • Upgrade to Spring Security 6.0.2 #767
spring-vault - 2.3.3

Published by mp911de over 1 year ago

📗 Links

⭐ New Features

  • Refine logging after token revocation failure #766
  • Allow reuse of library-specific configuration code in ClientHttpRequestFactoryFactory and ClientHttpConnectorFactory #760
  • Azure MSI auth to use with reactive infra #665
  • Enable system-property-driven proxy configuration for Reactor Netty's HTTP Client #654
  • Keystore's certificate chain derived from Vault issue-certificate lacks CA authority certificate #648
  • LifecycleAwareSessionManager doesn't differentiate between failed token renewals and intermittent network exceptions #646
  • Bumped Azure IMDS API version #644

🐞 Bug Fixes

  • Do not revoke batch tokens #764
  • VaultException thrown without "cause" hides important information #713
  • Fix typos in GCP IAM builders #657
  • AppRole authentication failed when only providing roleId using AuthenticationSteps #656
  • Fix assertion message #649

📔 Documentation

🔨 Dependency Upgrades

  • Upgrade to Project Reactor 2020.0.30 #773
  • Upgrade to Spring Data 2020.0.15 #772
  • Upgrade to Spring Framework 5.3.26 #771
  • Increase netty version to address security vulnerabilities #670

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

spring-vault - 3.0.1

Published by mp911de over 1 year ago

📗 Links

⭐ New Features

  • Add native image hints and AOT pre-processor #747

🔨 Dependency Upgrades

  • Upgrade to Reactor 2022.0.3 #754
  • Upgrade to Spring Data 2022.0.2 #753
  • Upgrade to Netty 4.1.89.Final #752
  • Upgrade dependencies #748
spring-vault - 3.0.0

Published by mp911de almost 2 years ago

📗 Links

⭐ New Features

  • Add support for reactive JDK HTTP Client #737
  • Add support for reactive HttpClient 5 #735

📔 Documentation

  • Use spring-html Asciidoctor backend #744

🔨 Dependency Upgrades

  • Upgrade to Spring Security 6.0 #742
  • Upgrade to Spring Data 2022.0 #741
  • Upgrade to Spring Framework 6.0.2 #740
  • Upgrade to Project Reactor 2022.0.0 #734
  • Upgrade to Spring Framework 6.0 #732
spring-vault - 3.0.0-RC1

Published by mp911de about 2 years ago

📗 Links

⭐ New Features

  • Remove deprecated API for removal #729
  • Upgrade to Apache HTTP Client 5 #727
  • Adds Trigger.nextExecution() impls #714
  • Overload createKeyStore to allow password parameter to be set Fixes gh-708 #711
  • Create keystore with password #708

🔨 Dependency Upgrades

  • Upgrade to Jackson 2.13.4.2 #730
  • Upgrade to Spring Data 2022.0.0-M5 #720
  • Upgrade to Spring Security 6.0 M6 #717
  • Upgrade to Reactor 2022.0.0-M4 #716
  • Upgrade to Spring Framework 6.0 M5 #715
  • Upgrade to Kotlin 1.7 #712

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

spring-vault - 3.0.0-M1

Published by mp911de over 2 years ago

📗 Links

⭐ New Features

  • Replace synchronized usage with ReentrantLock #702
  • Introduce property mapper to apply request properties #700
  • Support PEM encoded certificates and EC for private keys #688
  • Replace algorithm property in VaultSignRequest/VaultSignatureVerificationRequest #686
  • Add missing properties in VaultCertificateRequest #682
  • Add support to obtain PEM-encoded certificates as X509Certificate #678
  • Missing "private_key_type" property in VaultCertificateResponse #676
  • Add support for user/pass, LDAP, Okta, and RADIUS authentication #668
  • Azure MSI auth to use with reactive infra #665
  • Enable system-property-driven proxy configuration for Reactor Netty's HTTP Client #654
  • Keystore's certificate chain derived from Vault issue-certificate lacks CA authority certificate #648
  • LifecycleAwareSessionManager doesn't differentiate between failed token renewals and intermittent network exceptions #646
  • Bumped Azure IMDS API version #644
  • Allow external injection of Loggers into SecretLeaseContainer and PropertySources #636
  • Add ability to configure client TLS enabled protocol versions and cipher suites via Spring properties #635
  • Added VMSS support to Azure MSI Authentication #615
  • VMSS support for Azure MSI Authentication #614
  • Move off deprecated GoogleCredential IAM authentication method to IAM credentials #600
  • Support kv v2 through spring-data repositories #593
  • Upgrade to AWS SDK 2 #253

🐞 Bug Fixes

  • Fix typos in GCP IAM builders #657
  • AppRole authentication failed when only providing roleId using AuthenticationSteps #656
  • Fix assertion message #649
  • GCP-IAM authentication returning "invalid scope" error #617
  • CertificateClientAuthentication does not work with PEM_KEYSTORE_TYPE (client certificate must be supplied) #616
  • Potentially unsafe usage of WebClient in ReactiveVaultTemplate #612

📔 Documentation

🔨 Dependency Upgrades

  • Upgrade to Spring Data 2022.0.0-M4 #707
  • Upgrade dependencies #704
  • Upgrade to netty 4.1.77.Final #703
  • Upgrade to Jackson 2.13.3 #699
  • Upgrade to Spring Javaformat 0.0.31 #698
  • Upgrade to Spring Data 2021.2.0 #696
  • Update to be compatible with spring framework 6.0.0 #695
  • Upgrade to Spring Framework 5.3.20 #692
  • Upgrade to Kotlin 1.6 #672
  • Increase netty version to address security vulnerabilities #670
  • Upgrade to Spring Framework 6 snapshots #667
  • Upgrade dependencies #642
  • Upgrade dependencies #632
  • Upgrade to Reactor 2020.0.4 #628
  • Upgrade to Spring Framework 5.3.4 #625

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

spring-vault - 2.4.0-M1

Published by mp911de over 2 years ago

📗 Links

⭐ New Features

  • Replace synchronized usage with ReentrantLock #702
  • Introduce property mapper to apply request properties #700
  • Support PEM encoded certificates and EC for private keys #688
  • Replace algorithm property in VaultSignRequest/VaultSignatureVerificationRequest #686
  • Add missing properties in VaultCertificateRequest #682
  • Add support to obtain PEM-encoded certificates as X509Certificate #678
  • Missing "private_key_type" property in VaultCertificateResponse #676
  • Add support for user/pass, LDAP, Okta, and RADIUS authentication #668
  • Azure MSI auth to use with reactive infra #665
  • Enable system-property-driven proxy configuration for Reactor Netty's HTTP Client #654
  • Keystore's certificate chain derived from Vault issue-certificate lacks CA authority certificate #648
  • LifecycleAwareSessionManager doesn't differentiate between failed token renewals and intermittent network exceptions #646
  • Bumped Azure IMDS API version #644
  • Allow external injection of Loggers into SecretLeaseContainer and PropertySources #636
  • Add ability to configure client TLS enabled protocol versions and cipher suites via Spring properties #635
  • Added VMSS support to Azure MSI Authentication #615
  • VMSS support for Azure MSI Authentication #614
  • Move off deprecated GoogleCredential IAM authentication method to IAM credentials #600
  • Support kv v2 through spring-data repositories #593

🐞 Bug Fixes

  • Fix typos in GCP IAM builders #657
  • AppRole authentication failed when only providing roleId using AuthenticationSteps #656
  • Fix assertion message #649
  • GCP-IAM authentication returning "invalid scope" error #617
  • CertificateClientAuthentication does not work with PEM_KEYSTORE_TYPE (client certificate must be supplied) #616
  • Potentially unsafe usage of WebClient in ReactiveVaultTemplate #612

📔 Documentation

🔨 Dependency Upgrades

  • Upgrade dependencies #704
  • Upgrade to netty 4.1.77.Final #703
  • Upgrade to Spring Data 2021.2.1 #701
  • Upgrade to Jackson 2.13.3 #699
  • Upgrade to Spring Javaformat 0.0.31 #698
  • Upgrade to Spring Data 2021.2.0 #696
  • Upgrade to Spring Framework 5.3.20 #692
  • Upgrade to Kotlin 1.6 #672
  • Increase netty version to address security vulnerabilities #670
  • Upgrade dependencies #642
  • Upgrade dependencies #632
  • Upgrade to Reactor 2020.0.4 #628
  • Upgrade to Spring Framework 5.3.4 #625

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

spring-vault - 2.3.2

Published by mp911de over 3 years ago

📗 Links

⭐ New Features

  • Allow external injection of Loggers into SecretLeaseContainer and PropertySources #636
  • Add ability to configure client TLS enabled protocol versions and cipher suites via Spring properties #635
  • Move off deprecated GoogleCredential IAM authentication method to IAM credentials #600

🔨 Dependency Upgrades

  • Upgrade dependencies #642
  • Upgrade dependencies #632
spring-vault - 2.3.1

Published by mp911de over 3 years ago

📗 Links

⭐ New Features

  • Added VMSS support to Azure MSI Authentication #615
  • VMSS support for Azure MSI Authentication #614

🪲 Bug Fixes

  • GCP-IAM authentication returning "invalid scope" error #617
  • Potentially unsafe usage of WebClient in ReactiveVaultTemplate #612

🔨 Dependency Upgrades

  • Upgrade to Reactor 2020.0.4 #628
  • Upgrade to Spring Framework 5.3.4 #625

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

spring-vault - 2.3.0

Published by mp911de almost 4 years ago

📗 Links

🔨 Dependency Upgrades

  • Upgrade to Vault 1.6.1 #610
  • Upgrade dependencies #609
spring-vault - 2.2.3.RELEASE

Published by mp911de almost 4 years ago

📗 Links

⭐ New Features

  • Fix Vault download script for arm64 #562
  • Expanded EnvironmentVaultConfiguration options for AzureMSIAuthentication #542

🪲 Bug Fixes

  • Infinite loop when using rotating generic secrets without TTL #601
  • Logger is not passed required parameter #599
  • Netty4ClientHttpRequestFactory left uninitialized causing IllegalArgumentException: SSLContext is null #597
  • Remove all newlines in PKCS7 from EC2MetaData #571
  • ClientCertificateAuthentication path cannot be configured #557
  • VaultPkiOperations.getCrl(…) throws a NullPointerException when CRL is absent #556
  • Incorrect assert message in VaultTransitTemplate:decrypt #550
  • AbstractVaultConfiguration.restOperations does not consider RestTemplateBuilder #546

📔 Documentation

  • Polishing the content. #591

🔨 Dependency Upgrades

  • Upgrade to Spring Doc Resources 0.2.0 #549
  • Upgrade dependencies #560
  • Upgrade to Spring Doc resources 0.2.2.RELEASE #553
  • Upgrade to Spring Framework 5.2.5 #547

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

spring-vault - 2.3.0-RC1

Published by mp911de almost 4 years ago

📗 Links

⭐ New Features

  • Change default SecretLeaseContainer.leaseEndpoints from Legacy to Leases #589
  • Extend LeaseEndpoints to allow path-based lease revocation #588
  • Extend AuthenticationStepsOperator for non-blocking resource access #586
  • Support for KV Patch in VaultTemplate #585

🪲 Bug Fixes

  • Infinite loop when using rotating generic secrets without TTL #601
  • Logger is not passed required parameter #599
  • Netty4ClientHttpRequestFactory left uninitialized causing IllegalArgumentException: SSLContext is null #597
  • Non-atomic updates to LeaseAwareVaultPropertySource cause leave property source empty until SecretLeaseCreatedEvent #594

📔 Documentation

  • Polishing the content. #591

🔨 Dependency Upgrades

  • Upgrade to Vault 1.6.0 #604
  • Upgrade to Spring Framework 5.3.2
  • Upgrade to Spring Data 2020.0.2
  • Upgrade to Project Reactor 2020.0.2

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Package Rankings
Top 7.77% on Repo1.maven.org