v0.5.0

[0.5.0] - 2025-11-05

• Added a new annotation AnonymousAccess replacing the attribute publicApis in the annotation SecurityRealm for two reasons;
  • This allows more flexibility regarding request matching, previously it would match any request to that URI path, but this new way, you can specify the HTTP method, content type, and more.
  • It may not, in some situations, make sense, sematically, to define a public api in the definition of a security realm.
• Allow specifying the token TTL for the intermediary tokens (tokens generated by authentication steps which are not final). See docs for more info.
• Renamed the configuration property security-realm.token-expiration-duration to security-realm.fully-authenticated-token-ttl.
  • The reason is related to the above-mentioned new feature, so that the name better indicates that it only controls the TTL of the fully authenticated token, not intermediary ones.
• Enhanced warning log messages when some configurations are missing.
• Enhanced docs.
• Internal: Enhanced authentication request matching and request dispatching.