v0.5.3

[0.5.3] - 2025-11-22

• Support Spring Boot 4

v0.5.2

[0.5.2] - 2025-11-14

• Fix AnonymousAccess not working if the method RequestMapping has no path specified.

v0.5.1

[0.5.1] - 2025-11-14

• Fix AnonymousAccess not working if the controller had a path defined in a RequestMapping on the controller level.
• Fix AnonymousAccess not working if the controller is annotated with PreAuthorize.

v0.5.0

[0.5.0] - 2025-11-05

• Added a new annotation AnonymousAccess replacing the attribute publicApis in the annotation SecurityRealm for two reasons;
  • This allows more flexibility regarding request matching, previously it would match any request to that URI path, but this new way, you can specify the HTTP method, content type, and more.
  • It may not, in some situations, make sense, sematically, to define a public api in the definition of a security realm.
• Allow specifying the token TTL for the intermediary tokens (tokens generated by authentication steps which are not final). See docs for more info.
• Renamed the configuration property security-realm.token-expiration-duration to security-realm.fully-authenticated-token-ttl.
  • The reason is related to the above-mentioned new feature, so that the name better indicates that it only controls the TTL of the fully authenticated token, not intermediary ones.
• Enhanced warning log messages when some configurations are missing.
• Enhanced docs.
• Internal: Enhanced authentication request matching and request dispatching.

v0.4.0

[0.4.0] - 2025-10-09

• Support websockets.

v0.3.1

[0.3.1] - 2025-05-04

• Fix: support tokens generated before version 0.3.0.

v0.3.0

[0.3.0] - 2025-05-03

• Breaking: Error response from authentication endpoints now has HTTP status 400 instead of 401.
• Breaking: Error response from authentication endpoints now has HTTP body containing only the error key; since other fields are irrelevant and should not
  be read by the client in case of error.
• Added tokenType and expiresInSeconds to success response.
• Added the ability to put extra data (key-value pairs) in the authentication object, which will appear in the authentication response.
• Added optional errorDescription to error response, based on if you add it to SecurityRealmAuthenticationException.
• Internal enhancements.

v0.2.1

[0.2.1] - 2025-05-03

• Fix the default exception handler for SecurityRealmAuthenticationException was not invoked if the user defines a custom @ControllerAdvice, even if they
  don't specify a handler for this specific exception, but a super class like RuntimeException would block it.
• Fix "library source does not match the bytecode for class".

v0.2.0

[0.2.0] - 2025-05-02

• You can now specify a different JWT signing secret and a TTL for each realm separately (using the @SecurityRealm annotation).
• Warn and use auto generated JWT secret instead of failing when the user does not provide security-realm.signing-secret.
• Internal enhancements.

v0.1.2

[0.1.2] - 2024-09-13

• Fix application not starting when spring-boot-starter-actuator is present in the classpath.