Features:
- Use cdoc2-auth-token:0.3.3-SNAPSHOT that adds support for ES256 (Mobile-ID)
Improvements:
- Certificates updates + added script that downloads and creates truststore
- Spring Boot 3.3.3 -> 3.4.1 + other dependency updates
- Tag
cdoc2-shares-server-liquibase
withlatest
when built usingbuild-image.sh
script
- use auth-token:0.2.0-SNAPSHOT (SDJWT.body:
"aud":"https://server:port/key-shares/{shareID}?nonce={nonce}"
)- Fix Disclosure decoding (previously Disclosure were incorrectly decoded even when digest didn't match )
- Use
"aud"
list of{server}/key-shares/{shareID}?nonce={nonce}
URLs instead of customshareAccessData
json object. - remove
"kid"
from JWT header (duplicate of "iss" in JWT body) - remove
"iat"
and"exp"
claims. Nonce creation time is checked bycdoc2-shares-server
- Move x5c certificate issuer check into cdoc2-auth-token module (from
cdoc2-shares-server
)