1.19.1

What's Changed

• CVE-2023-1370 fix by @FerencKemeny in #914

New Contributors

• @FerencKemeny made their first contribution in #914

Full Changelog: 1.19.0...v1.19.1

1.19.0

What's Changed

• Fix potential null pointer exception during cache lookup in #894
• Update plugins to be compatible with Java 17 builds in #900
• Fix regression issue in IClientCertificate caused by SHA256 changes in #898
• Add CacheRefreshReason to telemetry and metadata in #901
• Downgrade json-smart dependency due to CVE alert in #905

Full Changelog: v1.18.0...1.19.0

v1.18.0

What's Changed

• Fix Www-Authenticate not being read by @blancqua in #885
• Bump jackson-databind dependency by @Avery-Dunn in #887
• Pass optional tenant override to internal silent call by @Avery-Dunn in #886

New Contributors

• @blancqua made their first contribution in #885

v1.17.3

• Correctly set buffer for expired tokens (#875)
• Bump commons-io dependency from 2.7 to 2.14.0 (#871)

v1.17.2

• Make ManagedIdentityApplication.getManagedIdentitySource static (#864)

v1.17.1

• Fix 'refresh on' value calculation in Managed Identity flows (#858)
• Bump nimbusds-oauth2-oidc-sdk version (#859)

v1.17.0

• Add object ID option for Managed Identity (#854)
• Add support for custom authorities (#851)
• Fix bug where claims did not cause cache to be skipped (#811)

v1.16.2

• Use SHA256 thumbprints in non-ADFS cert flows (#840)
• Reduce logging level of cache miss messages (#844)
• Make ManagedIdentitySourceType enum public (#845)

v1.16.1

• Add missing refreshOn metadata (#838)

v1.16.0

• Fix breaking API changes introduced in v1.15.0 (#828)
• Expose refreshOn parameter in AuthenticationResultMetadata (#829)