1.4.0

• API method to query token validity
• Bugfix in basic authentication support: allow usage of JWT token or basic authentication with one configuration
• Allows overwrite / enhancement of XSUAA jwt token validators
• Allow applications to initialize of Spring SecurityContext for non HTTP requests. As documented in https://github.com/SAP/cloud-security-xsuaa-integration/blob/master/spring-xsuaa/README.md

Build results have been published to maven central: https://search.maven.org/search?q=com.sap.cloud.security

Support for Broker plan

Changes:

• Broker plan validation failed due to incorrect audience validation

Build results have been published to maven central: https://search.maven.org/search?q=com.sap.cloud.security

1.3.0

Changes:

• JwtGenerator offers enhancement options: custom claims and audience
• Test framework support for multi tenancy

Build results have been published to maven central: https://search.maven.org/search?q=com.sap.cloud.security

1.2.0

• Eases enhancement of TokenAuthenticationConverter (issue 23)
• Makes XsuaaAudienceValidator more robust (issue 21)
• XSTokenRequest accepts custom RestTemplate (issue 25) to e.g. configure timeout behavior.
• Provides spring-xsuaa-test library with JWTGenerator (issue 29)
• Provides spring-xsuaa-mock library with XSUAA authentication mock web server for offline token key validation (issue 30)

Build results have been published to maven central: https://search.maven.org/search?q=com.sap.cloud.security

xsuaa Spring integration libraries

• Spring-Security 5 integration libraries.
• Spring-Security 5 Support for basic authentication
• Samples