Skip to content

Release v3.2.0

Choose a tag to compare

@github-actions github-actions released this 27 Nov 18:47
· 90 commits to main since this release

⚠️ Breaking Change ⚠️

🌟 Features

  • Complete CORS Configuration Overhaul: Replaced the simple app.cors.allow: true/false configuration with a comprehensive, fine-grained CORS configuration system. This provides much better control over security and flexibility for different deployment scenarios. Migration required - see MIGRATION.md.
    • Removed: app.cors.allow property (old on/off switch)
    • New configuration properties:
      • app.cors.allowed-origins - List of specific allowed origins (e.g., https://app.example.com)
      • app.cors.allowed-origin-patterns - List of origin patterns with wildcard support (e.g., https://*.example.com, *)
      • app.cors.allow-credentials - Enable/disable credentials (default: true)
      • app.cors.allowed-methods - HTTP methods to allow (default: all standard methods)
      • app.cors.allowed-headers - Headers to allow (default: *)
      • app.cors.exposed-headers - Headers to expose to client (default: Authorization)
      • app.cors.max-age - Preflight cache duration in seconds (default: 3600)
    • Environment variables: All properties can be configured via environment variables (e.g., APP_CORS_ALLOWED_ORIGINS, APP_CORS_ALLOWED_ORIGIN_PATTERNS)
    • Default configuration: Pre-configured for local development with localhost:3000, localhost:5173, and localhost:8098
    • Comprehensive documentation: Added detailed guides in CORS_CONFIG.md and CORS_EXAMPLES.md

🐞 Bug Fixes

  • Fixes an issue with UUID primary keys in EssenciumUserDetailsType

🔨 Dependency Upgrades

  • upgraded org.springframework.boot:spring-boot-starter-parent from 3.5.6 to 3.5.8
  • upgraded io.sentry:sentry-spring-boot-starter-jakarta from 8.23.0 to 8.27.1
  • upgraded org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.8.13 to 2.8.14
  • upgraded org.wiremock.integrations:wiremock-spring-boot from 3.10.6 to 4.0.8