4.0.0

• Updated to support .NET 8 and Microsoft.IdentityModel v7.x
  • initial implementation of the new EdDsaSignatureProvider.Sign override requiring ReadOnlySpan<byte> calls into existing byte[] based Sign method
• EdDsa now implements AsymmetricAlgorithm
• Added new ExtendedJsonWebKeyConverter (contribution from @thomas-tran)
• Removed support support for .NET 6 and Microsoft.IdentityModel v6.x
• Removed JwtPayloadHandler used by obsolete Branca and PASETO libraries
• Removed obsolete Bouncy Castle constructors from EdDsaSecurityKey

3.1.0

• Added .NET 8 as target framework
• Updated BouncyCastle dependency from Portable.BouncyCastle to the maintained BouncyCastle.Cryptography
• Pinned Microsoft.IdentityModel dependency to version 6.x
• Updated dependencies
• Deprecated Branca and PASETO libraries

Important

This is the last version to include support for Branca and PASETO. These token libraries are now deprecated and only support Microsoft.IdentityModel 6.x. This is due to the low usage of this library and the PASETO project as a whole.

3.0.0

Breaking changes

• Added support for new overload on SignatureProvider.Verify. This is a breaking change introduced in Microsoft.IdentityModel version 6.23.0 (contribution by @NzKyle)

2.0.0

Breaking changes

• Moved Branca & PASETO functionality into separate libraries - ScottBrady.IdentityModel.Tokens.Branca and ScottBrady.IdentityModel.Tokens.Paseto
• Updated BrancaToken payload to be a byte array, removing dependency on utf-8
• Dropped support for .NET Core 3.1 and .NET 5
• Deprecated leaky bouncy castle abstraction for EdDsaSecurityKey

Other changes

• Removed Newtonsoft.Json dependency (contribution by @kgamecarter)
• Fixed exception message for unsupported PASETO local types
• Fixed exception message for invalid JSON in JWT payload token
• Updated EdDSA, Branca, and PASETO test vectors
• Added new EdDSA abstraction EdDsa

1.4.0

• Added support for .NET 5 (now only supports .NET Core 3.1 and .NET 5)
• Added helper for Base16 (hex) encoding
• Updated minimum versions of crypto dependencies
• Lots of GitHub actions updates 🙄

1.3.1

Minor update to make my Branca online tool possible.

• Added overloads to BrancaTokenHandler to set the token timestamp.
• Added Branca timestamp helpers

1.3.0

Fixed Branca implementation by switching to libsodium (Bouncy Castle is not ready for XChaCha-Poly1305). This makes this implementation incompatible with other implementations that use Bouncy Castle (the Java implementations).

The initial version of this .NET Branca implementation was a port of the Java Branca libraries. I have since found out that these do not conform to the Branca specification and have updated my .NET Branca library accordingly.

1.2.0

Downgraded Microsoft.IdentityModel dependency to support Microsoft's JWT Bearer authentication handler. The plan is to support Microsoft.IdentityModel v6.x once ASP.NET Core does.

1.1.0

Added Ed25519 support for JWT signing
Added test vectors for PASETO v1.public

1.0.0

Initial release of Branca and PASETO token handlers.