bump optional dep for bc-fips to 1.0.2.1 (1.0.2+P1)

CHANGES

@@ -1,5 +1,12 @@
 FusionAuth JWT Changes
 
+Changes in 4.2.2
+
+ * Bump optional dep bc-fips to 1.0.2.1 (1.0.2+P1)
+
+    See https://github.com/advisories/GHSA-6xx3-rg99-gc3p
+    See https://nvd.nist.gov/vuln/detail/CVE-2020-15522
+
 Changes in 4.2.1
 
  * Bump optional dep bc-fips to 1.0.2

build.savant

@@ -17,7 +17,7 @@
 savantVersion = "1.0.0"
 jacksonVersion = "2.12.2"
 
-project(group: "io.fusionauth", name: "fusionauth-jwt", version: "4.2.1", licenses: ["ApacheV2_0"]) {
+project(group: "io.fusionauth", name: "fusionauth-jwt", version: "4.2.2", licenses: ["ApacheV2_0"]) {
 
   workflow {
     standard()
@@ -34,7 +34,7 @@ project(group: "io.fusionauth", name: "fusionauth-jwt", version: "4.2.1", licens
       dependency(id: "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}")
     }
     group(name: "test-compile", export: false) {
-      dependency(id: "org.bouncycastle:bc-fips:1.0.2")
+      dependency(id: "org.bouncycastle:bc-fips:1.0.2+P1")
       dependency(id: "org.testng:testng:6.8.7")
     }
   }

fusionauth-jwt.iml

@@ -49,11 +49,11 @@
     <orderEntry type="module-library" scope="TEST">
       <library>
         <CLASSES>
-          <root url="jar://$USER_HOME$/.savant/cache/org/bouncycastle/bc-fips/1.0.2/bc-fips-1.0.2.jar!/" />
+          <root url="jar://$USER_HOME$/.savant/cache/org/bouncycastle/bc-fips/1.0.2+P1/bc-fips-1.0.2+P1.jar!/" />
         </CLASSES>
         <JAVADOC />
         <SOURCES>
-          <root url="jar://$USER_HOME$/.savant/cache/org/bouncycastle/bc-fips/1.0.2/bc-fips-1.0.2-src.jar!/" />
+          <root url="jar://$USER_HOME$/.savant/cache/org/bouncycastle/bc-fips/1.0.2+P1/bc-fips-1.0.2+P1-src.jar!/" />
         </SOURCES>
       </library>
     </orderEntry>

pom.xml

@@ -6,7 +6,7 @@
 
   <groupId>io.fusionauth</groupId>
   <artifactId>fusionauth-jwt</artifactId>
-  <version>4.2.1</version>
+  <version>4.2.2</version>
   <packaging>jar</packaging>
 
   <name>FusionAuth JWT</name>
@@ -86,7 +86,7 @@
     <dependency>
       <groupId>org.bouncycastle</groupId>
       <artifactId>bc-fips</artifactId>
-      <version>1.0.2</version>
+      <version>1.0.2.1</version>
       <scope>test</scope>
     </dependency>
   </dependencies>

src/main/java/io/fusionauth/jwt/TimeMachineJWTDecoder.java

@@ -1,3 +1,19 @@
+/*
+ * Copyright (c) 2020, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
 package io.fusionauth.jwt;
 
 import java.time.ZonedDateTime;