Skip to content

Version 2.5.3

Choose a tag to compare

@nenaraab nenaraab released this 25 Mar 18:26

2.5.3

  • [spring-xsuaa] XsuaaJwtDecoder supports verificationkey from VCAP_SERVICES as fallback public key.
  • [spring-xsuaa] when using auto-configuration and expose your own RestTemplate RestOperations bean, have a look at this documentation.
  • [java-security-test] JwtGenerator supports withLocalScopes().
  • [java-security] SapIdToken should return value of claim "sap_uid" (SAPGlobalUserID) as Principal name.
  • [java-security] JwtAudienceValidator Support Audience Validation of Xsuaa Broker clones: NGPBUG-111540.
  • [java-api] enhanced with config interfaces, which are relevant for SAP Java Buildpack.
  • [api] changes XSUserInfoException from Exception to RuntimeException. This reflects the json-lib change in java-container-security (version 3.12.0).
  • [token-client] [java-security] Base64JwtDecoder makes use of urldecoder. This is a prerequisite when using java-security for oidc token validation, where the encoded token may contain _ and - characters. It fixes unexpected error with message: Illegal base64 character 5f or Illegal base64 character 2d.