Version 2.9.0

2.9.0 and 0.2.0 [BETA]

• [java-security] and [spring-security] validates IAS OIDC tokens from multiple IAS tenants and zones.
  Prerequisite: identity service broker needs to provide list of domains via VCAP_SERVICES-identity-credentials.
• [spring-security] Resource Server raises InvalidBearerTokenException in case token couldn't be successfully validated (as documented here). Adapt your configuation locally according to this documentation.

Dependency upgrades

• commons-io:commons-io 2.8.0 --> 2.9.0
• org.springframework.boot:spring-boot 2.4.5 --> 2.5.0
• org.springframework:spring-core 5.3.6 --> 5.3.7
• org.springframework.security:spring-security-oauth2-jose 5.4.6 --> 5.5.0
• org.springframework.security:spring-security-oauth2-resource-server 5.4.6 --> 5.5.0
• org.springframework.security:spring-security-oauth2-jose 5.4.6 --> 5.5.0
• org.springframework.security:spring-boot-starter-test 5.4.6 --> 5.5.0
• org.junit.jupiter 5.7.1 --> 5.7.2
• org.mockito:mockito-core 3.9.0 --> 3.10.0