Skip to content

CHANGELOG.md

Latest commit

 

History

History
90 lines (73 loc) · 4.31 KB

CHANGELOG.md

File metadata and controls

90 lines (73 loc) · 4.31 KB
Raw

Changelog

All notable changes to this project will be documented in this file. The format is based on Keep a Changelog.

[2.0] - 2020-11-20

Changed

  • Switch to Smart-ID API 2.0
  • AuthenticationResponseValidator.validate() returns AuthenticationIdentity if validation passes. If validation fails then SmartIdResponseValidationException or its subclass CertificateLevelMismatchException (if signer's certificate is below requested level) is thrown.
  • Grouped exceptions thrown by library to reduce need to handle each exception individually. See Readme.md for detail info.
  • Minimum Java level raised to Java 8
  • Relying Party must keep a list of trusted certificates (in plain text or in a trust store).
  • request.setVcChoice() was removed in Smart-ID API 2.0 and replaced by request.setAllowedInteractionsOrder();

Added

  • New parameter allowedInteractionsOrder added to authentication and signing requests. It replaces parameters displayText and requestProperties.vcChoice
  • New parameter interactionFlowUsed added into session status response message.
  • If user refuses then a dedicated exception is thrown that indicates exact screen where user pressed cancel. Thrown exception is subclass of UserRefusedException.

Removed

  • all endpoints using NationalIdentityNumber are now removed as this functionality has been removed from Smart-ID API 2.0
  • errors that the caller cannot recover from are now removed from method throws list.
  • Hard-coded certificates were removed together with methods:
    • SmartIdClient.useDemoEnvSSLCertificates()
    • SmartIdClient.useLiveEnvSSLCertificates()

[1.6] - 2020-05-25

Added

  • UserSelectedWrongVerificationCodeException is now thrown when user selects wrong verification code from three-choice selection.

[1.5.1] - 2020-05-18

Security

  • Bumped jackson-databind from 2.9.10.1 to 2.9.10.4
  • Updated Maven Dependency Check plugin version.

Changed

  • AuthenticationRequestBuilder method withRequestProperties access modifier changed to public

Added

  • Maven wrapper to project

[1.5] - 2019-11-12

Security

  • CVE-2019-16943
  • CVE-2019-17531
  • CVE-2019-16942
  • CVE-2019-16335
  • CVE-2019-14540

Added

  • SSL pinning to verify, that the client is communicating with SK environment #3
  • SmartIdClient.addTrustedSSLCertificates(String ...sslCertificate) - add ssl certificates when Sk starts to use new certs
  • SmartIdClient.setTrustedSSLCertificates(String ...sslCertificates) - set specific ssl certificates to trust
  • SmartIdClient.useDemoEnvSSLCertificates() - uses only demo env ssl certificates
  • SmartIdClient.useLiveEnvSSLCertificates() - uses only live env ssl certificates
  • SmartIdClient.loadSslCertificatesFromKeystore(KeyStore keyStore) - loads only the certificates from keystore

[1.4] - 2019-09-23

Added

  • Client configuration on different JAX-WS implementations. #22, #11
  • SmartIdClient.setConfiguredClient()
  • SmartIdClient.setNetworkConnectionConfig()

[1.3] - 2019-09-13

Added

[1.2] - 2019-08-21

Added

  • Support for Semantics Identifier (#17)
  • Document number to authentication responses (#14)
  • Maven dependency check plugin for continuous security
  • SpotBugs plugin for continuous bug detection

[1.1] - 2018-12-10

Added

  • SmartIdClient.getSmartIdConnector()
  • SmartIdRequestBuilder.validateSessionResult
  • MIT license to code base

Changed

  • renamed SignatureSessionResponse.sessionId -> SignatureSessionResponse.sessionID
  • renamed SmartIdRestConnector -> SmartIdConnector
  • renamed SessionStatus.getCertificate() -> SessionStatus.getCert()
  • renamed SessionSignature.getValueInBase64() -> SessionSignature.getValue()
  • improved and cleaned up tests