SCRAM Java 3.0

💥 Breaking changes

• ⚠️ Full refactor of the scram java implementation, this release is compatible with Java 8+, but it's incompatible with previous releases ⚠️

🚀 New features

• Fully rewrite the ScramClient allowing negotiation of channel-binding properly.
• Create Multi-release Modular JARs, the modules names are:
  • com.ongres.scram.common for the common scram messages.
  • com.ongres.scram.client for the scram client implementation.
• Add StringPreparation.POSTGRESQL_PREPARATION, for any error in SASL preparation, it falls back to return the raw string.
• Now the released jars are reproducible.
• Publish CycloneDX SBOM.
• Implementation of tls-server-end-point channel binding data extraction.

🏗️ Improvements

• Update of the saslprep dependency to 2.1.
• Now the password is passed as a char[].
• Improve Javadoc documentation.

👻 Maintenance

• Migrate the main repo back to GitHub.
• Remove the shaded Bouncy Castle pbkdf2 and base64 implementation used for Java 7 support.