7.0.0-preview4

7.0.0-preview4

Bug fixes:

• Add nullables to the properties in WsFederationMessage. See issue #2240 for details.
• Fix regression where JsonWebToken.TryGetPayloadValue() was not compatible with dictionary types. See issue #2246 for details.
• Fix regression where dictionary claims added to SecurityTokenDescriptor.Claims are no longer correctly serialized. See issue #2245 for details.
• Fix regression with a Y2038 bug. See issue #2261 for details.
• Fix a regression where claims with multiple values are incorrectly serialized. See #2244 for details.

Performance improvements:

• Remove sync-over-async pattern with JsonWebTokens.ValidateToken, which when in the hot path can lead to threadpool starvation. See issue #2253 for details.
• Perf testing using brenchmark dotnet and crank, similar to aspnetcore, to better gauge requests per second perf impacts. See issue #2232 for details.
• Use optimistic synchronization in JsonWebToken.Audiences. See PR for details.
• Reduce allocations when enumerating over collections. See PR for details.

Documentation:

• Fix description for JWT X5tS256 field.

Fundamentals:

• Improvements to the build script to accommodate .NET's source-build requirements. See PR for details.

6.32.2

6.32.2

Bug fixes:

• Underlying JsonDocument is never disposed, causing high latency in large scale services. See #2258 for details.

7.0.0-preview3

7.0.0-preview3

Performance improvements:

• Replace Newtonsoft.Json with System.Text.Json, see #2233, and as a result, ASP.NET's JwtBearer auth handler will now be fully AOT compatible.

7.0.0-preview2

7.0.0-preview2

Performance improvements:

• Series of perf improvements in collaboration with ASP .NET Core DevDiv team, results in improvements from 280K Request per second (RPS) in 7.0.0-preview to 370K RPS in 7.0.0-preview2, with more improvements to come in later versions: #2195, #2194, #2193, #2192, #2190, #2188, #2184, #2181, #2180, #2178, #2175, #2172, #2171, #2170, #2169, #2168, #2167, #2166, #2164, #2162, #2161, #2160, #2159, #2158, #2221

• First increment in replacing newtonsoft with System.Text.Json, see #2174

• Reading and writing JsonWebKey and JsonWebKeySet types now use System.Text.Json.Utf8JsonReaders/Writers for serialization. Seee PR @2208 for details.

• Remove the use of Newtonsoft from OpenIdConnectConfiguration and OpenIdConnectMessage. See PR @2214 for details.

Engineering excellence:

• Fix casing Properties directory in updateAssemblyInfo.ps1 script see,
  #2189

• Add code coverage in ADO, see #2176

• Add codeQL scanning for compliance, see #2151

• Start adding support for Nullables, see #2139 and #2203.

6.32.1

• Fix thread safety for JsonClaimSet Claims and JsonWebToken Audiences. See #2185 for details.

7.1.0-preview

7.1.0-preview

Include IdentityModel 6.32.0 release updates, including AAD specific signing key issuer validator and fix perf regression.

6.32.0

New features:

• Adding an AAD specific signing key issuer validator. See issue #2134 for details.
• Better support for WsFederation (#2100)

Bug fixes

• Address perf regression introduced in 6.31.0 (#2131)

7.0.0-preview

7.0.0-preview

Join the 7x discussion and provide your feedback!

Relevant PRs for supporting .NET 8:
#2108
#2121
#2122

Remove net45, see #2123

JwtSecurityTokenConverter, see #2117

6.31.0

This release contains work from the following PRs and commits:

• Introduce ConfigurationValidationException(#2076)
• Disarm security artifacts(#2064)
• Throw SecurityTokenMalformedTokenException on malformed tokens(#2080)
• Add ClaimsMapping to JsonWebTokenHandler
  8e7f07e

6.30.1

This release contains work from the following PRs:

• Modified token validation to be async throughout the call graph #2075
• Enforce key sizes when creating HMAC #2072
• Fix AotCompatibilityTests #2066
• Use up-to-date "now", in case take long time to get Metadata #2063

This release addresses #1743 and, as such, going forward if the SymmetricKey is smaller than the required size for HMAC IdentityModel will throw an ArgumentOutOfRangeException which is the same exception when the SymmetricKey is smaller than the minimum key size for encryption.