Version 3.5.0

• [java-api]
  • ClientIdentity interface has been extended with 2 new methods getCertificateChain()
    and getPrivateKey()
    and ClientCertificate class has been extended with new constructor that takes java.security.cert.Certificate[]
    and java.security.PrivateKey as an argument and corresponding getters for these fields.
  • user_token grant type has been re-added to GrantType enum
• [token-client] SSLContextFactory class has been extended and supports Keys in PKCS#8 format with ECC algorithm.
• [spring-security]
  • fixed NPE in IdentityServicesPropertySourceFactory on application startup when bound to a list of XSUAA services
    whose service plans are ALL not supported
  • provides an autoconfiguration that creates an Identity Service JwtDecoder with enabled proof token check. To enable
    it, set the sap.spring.security.identity.prooftoken spring property to true.
  • Fixes an issue with MockMvc when the SecurityContexts are synced. It sets SecurityContextStrategy based on an
    EnvironmentPostProcessor as in this scenario the servlet initialization is not happening and the code runs too late
    due to that.

Dependency upgrades

• Bump io.projectreactor:reactor-core from 3.6.5 to 3.6.6
• Bump com.nimbusds:nimbus-jose-jwt from 9.37.3 to 9.39.1
• Bump spring.core.version from 6.1.6 to 6.1.7