Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
com.microsoft.sqlserver:mssql-jdbc_auth
Advanced tools
Microsoft JDBC Driver for SQL Server Authentication Library for Windows
Welcome to the Microsoft JDBC Driver for SQL Server project!
The Microsoft JDBC Driver for SQL Server is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces (APIs) available in the Java Platform, Enterprise Editions. The Driver provides access to Microsoft SQL Server and Azure SQL Database from any Java application, application server, or Java-enabled applet.
Releases can be found on the GitHub Releases page, in the Microsoft JDBC Documentation, or via Maven. Starting from preview release 12.1.0, each release contains two versions of the driver. One for use with Java 8 (jre8), and one for use with version Java 11 and above (jre11).
We hope you enjoy using the Microsoft JDBC Driver for SQL Server.
Microsoft JDBC driver for SQL Server Team
Let us know how you think we're doing.
Azure Pipelines (Windows) | Azure Pipelines (Linux) | Azure Pipelines (MacOS) |
---|---|---|
What's coming next? We will look into adding a more comprehensive set of tests, improving our javadocs, and start developing the next set of features.
Getting started with SQL Server and Java
Maven builds automatically trigger a set of verification tests to run. For these tests to pass, you will first need to add an environment variable in your system called mssql_jdbc_test_connection_properties
to provide the correct connection properties for your SQL Server or Azure SQL Database instance.
To build the jar files, you must use minimum version of Java 11 with Maven. You may choose to build JDBC 4.3 compliant jar file (for use with JRE 11 or newer JRE versions) and/or a JDBC 4.2 compliant jar file (for use with JRE 8).
Maven:
mssql_jdbc_test_connection_properties
in your system with the connection properties for your SQL Server or SQL DB instance.\target
directory.
mvn install -Pjre23
. This creates JRE 23 compatible jar in \target
directory which is JDBC 4.3 compliant (Build with JDK 23).mvn install -Pjre21
. This creates JRE 21 compatible jar in \target
directory which is JDBC 4.3 compliant (Build with JDK 21+).mvn install -Pjre17
. This creates JRE 17 compatible jar in \target
directory which is JDBC 4.3 compliant (Build with JDK 17+).mvn install -Pjre11
. This creates JRE 11 compatible jar in \target
directory which is JDBC 4.3 compliant (Build with JDK 11+).mvn install -Pjre8
. This creates JRE 8 compatible jar in \target
directory which is JDBC 4.2 compliant (Build with JDK 11+).Gradle:
mssql_jdbc_test_connection_properties
in your system with the connection properties for your SQL Server or SQL DB instance.\build\libs
directory.
gradle build -PbuildProfile=jre23
. This creates JRE 23 compatible jar in \build\libs
directory which is JDBC 4.3 compliant (Build with JDK 23).gradle build -PbuildProfile=jre21
. This creates JRE 21 compatible jar in \build\libs
directory which is JDBC 4.3 compliant (Build with JDK 21+).gradle build -PbuildProfile=jre17
. This creates JRE 17 compatible jar in \build\libs
directory which is JDBC 4.3 compliant (Build with JDK 17+).gradle build -PbuildProfile=jre11
. This creates JRE 11 compatible jar in \build\libs
directory which is JDBC 4.3 compliant (Build with JDK 11+).gradle build -PbuildProfile=jre8
. This creates JRE 8 compatible jar in \build\libs
directory which is JDBC 4.2 compliant (Build with JDK 11+).API reference documentation is available in Javadocs.
This driver is documented on Microsoft Docs.
For samples, please see the src\sample
directory.
For some features (e.g. Integrated Authentication and Distributed Transactions), you may need to use the sqljdbc_xa
and mssql-jdbc_auth-<version>.<arch>
DLLs. They can be found in the package that can be downloaded from Microsoft. mssql-jdbc_auth-<version>.<arch>
can also be downloaded from Maven.
Don't want to compile anything?
We're now on the Maven Central Repository. Add the following to your POM file to get the most stable release:
<dependency>
<groupId>com.microsoft.sqlserver</groupId>
<artifactId>mssql-jdbc</artifactId>
<version>12.8.1.jre11</version>
</dependency>
The driver can be downloaded from Microsoft. For driver version 12.1.0 and greater, please use the jre11 version when using Java 11 or greater, and the jre8 version when using Java 8.
To get the latest version of the driver, add the following to your POM file:
<dependency>
<groupId>com.microsoft.sqlserver</groupId>
<artifactId>mssql-jdbc</artifactId>
<version>12.8.1.jre11</version>
</dependency>
Starting from version 7.0.0, the driver Jars (jre10 and above) will expose 'Automatic-Module' as 'com.microsoft.sqlserver.jdbc'. The supporting Jar can now be added to ModulePath to access this module.
This project has following dependencies:
Compile Time:
com.azure:azure-security-keyvault-keys
: Microsoft Azure Client Library For KeyVault Keys (optional)com.azure:azure-identity
: Microsoft Azure Client Library For Identity (optional)org.bouncycastle:bcprov-jdk18on
: Bouncy Castle Provider for Always Encrypted with secure enclaves feature with JAVA 8 only (optional)com.google.code.gson:gson
: Gson for Always Encrypted with secure enclaves feature (optional)Test Time:
junit:jar
: For Unit Test cases.One can see all dependencies including Transitive Dependency by executing following command.
mvn dependency:tree
Projects that require either of the two features need to explicitly declare the dependency in their pom file.
For Example: If you are using Azure Active Directory Authentication feature then you need to declare the azure-identity dependency in your project's POM file. Please see the following snippet:
<dependency>
<groupId>com.microsoft.sqlserver</groupId>
<artifactId>mssql-jdbc</artifactId>
<version>12.8.1.jre11</version>
<scope>compile</scope>
</dependency>
<dependency>
<groupId>com.azure</groupId>
<artifactId>azure-identity</artifactId>
<version>1.12.2</version>
</dependency>
For Example: If you are using Azure Key Vault feature then you need to declare the azure-identity and azure-security-keyvault-keys dependencies in your project's POM file. Please see the following snippet:
<dependency>
<groupId>com.microsoft.sqlserver</groupId>
<artifactId>mssql-jdbc</artifactId>
<version>12.8.1.jre11</version>
<scope>compile</scope>
</dependency>
<dependency>
<groupId>com.azure</groupId>
<artifactId>azure-identity</artifactId>
<version>1.12.2</version>
</dependency>
<dependency>
<groupId>com.azure</groupId>
<artifactId>azure-security-keyvault-keys</artifactId>
<version>4.7.3</version>
</dependency>
Please note as of the v6.2.2, the way to construct a SQLServerColumnEncryptionAzureKeyVaultProvider
object has changed. Please refer to this Wiki page for more information.
When setting 'useFmtOnly' property to 'true' for establishing a connection or creating a prepared statement, antlr-runtime dependency is required to be added in your project's POM file. Please see the following snippet:
<dependency>
<groupId>com.microsoft.sqlserver</groupId>
<artifactId>mssql-jdbc</artifactId>
<version>12.8.1.jre11</version>
</dependency>
<dependency>
<groupId>org.antlr</groupId>
<artifactId>antlr4-runtime</artifactId>
<version>4.9.3</version>
</dependency>
We love contributions from the community. To help improve the quality of our code, we encourage you to use the mssql-jdbc_formatter.xml formatter provided on all pull requests.
Thank you!
We appreciate you taking the time to test the driver, provide feedback and report any issues. It would be extremely helpful if you:
Thank you!
Security issues and bugs should be reported privately, via email, to the Microsoft Security Response Center (MSRC) secure@microsoft.com. You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Further information, including the MSRC PGP key, can be found in the Security TechCenter.
Our goal is to release regular updates which improve the driver and bring new features to users. Stable, production quality releases happen twice a year, targeting the first and third quarters of the calendar year. They are tested against a comprehensive matrix of supported operating systems, Java versions, and SQL Server versions. Stable releases are accompanied by additional localized packages, which are available on the Microsoft website.
Preview releases happen approximately monthly between stable releases. This gives users an opportunity to try out new features and provide feedback on them before they go into stable releases. Preview releases also include frequent bug fixes for customers to verify without having to wait for a stable release. Preview releases are only available in English. While they are tested, preview releases do not necessarily go through the same rigorous, full test matrix and review process as stable releases.
You can see what is going into a future release by monitoring Milestones in the repository.
Starting with 6.0, stable versions have an even minor version. For example, 6.0, 6.2, 6.4, 7.0, 7.2, 7.4, 8.2, 8.4, 9.2, 9.4, 10.2, 11.2, 12.2, 12.4, 12.6, 12.8. Preview versions have an odd minor version. For example, 6.1, 6.3, 6.5, 7.1, 7.3, 8.1, 9.1, 10.1, 11.1, 12.1, 12.3, 12.5, 12.7, 12.9, and so on.
Special thanks to everyone who has contributed to the project.
Up-to-date list of contributors: https://github.com/Microsoft/mssql-jdbc/graphs/contributors
Here are our Top 15 contributors from the community:
The Microsoft JDBC Driver for SQL Server is licensed under the MIT license. See the LICENSE file for more details.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
FAQs
Microsoft JDBC Driver for SQL Server Authentication Library for Windows
We found that com.microsoft.sqlserver:mssql-jdbc_auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.