Version 3.4.2
- [spring-security]
- fixes a NPE bug introduced in the
HybridJwtDecoderwhen the incoming request does not
containx-forwarded-client-certheader SecurityContextAutoConfigurationwhich synchronises all SecurityContexts is now enabled by default. To disable it
set thesap.spring.security.hybrid.sync_securitycontextspring property to false
- fixes a NPE bug introduced in the