9.3.2
RESTHeart 9.3.2 — Release Notes
Bug Fixes
/tokenendpoint now honorsNo-Auth-Challenge(#621)
The/token,/token/cookie, and/authorizeendpoints were unconditionally returning theWWW-Authenticateheader on401responses, ignoring both theNo-Auth-Challengerequest header and the?noauthchallengequery parameter. Behavior is now consistent with all other endpoints.
Improvements
-
BsonUtils.get(): native path token parsing — theget(doc, path)method now includes a built-in path parser as an alternative to JSONPath. The parser supports dot notation (a.b.c), numeric bracket indexing ([0]), and quoted bracket keys (['key']). This allows nested field access without relying on JSONPath for straightforward paths, with proper handling of intermediatenullvalues. -
BsonUtilsrefactoring — code rewritten to eliminate style warnings and improve overall readability.