Skip to content

Version 2.13.1
Compare
Choose a tag to compare
@liga-oz liga-oz released this 11 Aug 07:44
· 599 commits to main since this release
2.13.1
43de259
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

[token-client]

  • DefaultHttpClientFactory creates CloseableHttpClient with disabled redirects to avoid security vulnerabilities.
    ‼️ For your custom CloseableHttpClient implementation make sure to disable redirects as well. ‼️

  • all TokenServices and TokenKeyServices have been enhanced to add to all outgoing requests a user-agent header that contains value
    token-client/x.x.x where x.x.x is token-client version being used

[spring-xsuaa]

  • XsuaaJwtDecoder catches bases64 decoder IllegalArgumentException that can be caused by decoding malformed verificationkey from xsuaa service configuration to avoid 500 Internal server error responses

Dependency upgrades

Assets 2
Loading