Skip to content

4.0.0

Choose a tag to compare

View all tags
@NiklasHerrmann21 NiklasHerrmann21 released this 30 Mar 13:59
· 20 commits to main since this release
4.0.0
5e226d8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Major release upgrading to Spring Boot 4.x and Jakarta EE 10. Spring Boot 3.x compatibility modules provided.

Breaking Changes

Framework Upgrades:

  • Spring Boot 3.x → 4.0.3
  • Spring Framework 6.x → 7.0.5
  • Spring Security 6.x → 7.0.3
  • Jakarta Servlet API 6.0.0 → 6.1.0

Token Client HTTP Change:

  • Now uses Java 11 HttpClient by default (no Apache HttpClient dependency)
  • Apache HttpClient 4 constructors deprecated (removed in 5.0.0)
  • Custom HTTP clients supported via SecurityHttpClientFactory

Removed Modules:

  • spring-xsuaa* → use spring-security or spring-security-3
  • spring-security-compatibility → use spring-security-3

Token Client Spring Classes:

  • Spring-dependent classes moved to new token-client-spring module

New Features

Spring Boot 3.x Compatibility:

  • spring-security-3 - Core module for Spring Boot 3.5.9
  • resourceserver-security-spring-boot-3-starter - Starter for Spring Boot 3.x

Pluggable HTTP Client:

  • Support for Apache HttpClient 4.x/5.x, OkHttp, SAP Cloud SDK, custom implementations

Documentation

https://github.com/SAP/cloud-security-services-integration-library/blob/main/token-client/APACHE_HTTPCLIENT_MIGRATION.md

Assets 2
Loading