6.0.0

What's Changed

⚠️ Breaking Changes

• mock-oauth2-server no longer bundles ch.qos.logback:logback-classic nor kotlinx-serialization-json in its library.
  • If your test logs went quiet, add testRuntimeOnly("ch.qos.logback:logback-classic:<version>"). slf4j-api still comes transitively.
• The debugger UI (/<issuer>/debugger and /<issuer>/debugger/callback) can no longer target an external identity provider.
• DebuggerRequestHandler now takes an OAuth2HttpServer instead of an Ssl?.
• With (#1002), the library now uses Jackson 3 (tools.jackson.*) instead of Jackson 2 (com.fasterxml.jackson.*).
  • Consumers on Jackson 2 are unaffected. Jackson 3 uses a different group ID and package, and still depends on jackson-annotations 2.x.
  • no.nav.security.mock.oauth2.http.objectMapper and the deserializers nested in OAuth2Config are now internal. Construct your own mapper if you used objectMapper.
• NettyWrapper rejects request bodies above 1 MiB with 413. This affects the standalone server and Docker image; MockWebServerWrapper is unaffected.

See also the migration guide.

🐛 Bug Fixes

• fix: support subject request mappings for password grant (#983) @ybelMekk
• fix: restrict the debugger to this server's own endpoints (#1000) @tronghn
• fix: cap Netty request body aggregation at 1 MiB (#1001) @tronghn

🧰 Maintenance

• test: stabilize standalone and server tests (#974) @ybelMekk
• build: keep logback-classic out of the published artifact (#998) @tronghn
• build: move kotlinx-serialization-json to testImplementation (#997) @pcmoen

⬆️ Dependency upgrades

• chore(deps): bump the github-actions group with 3 updates (#1003) @dependabot[bot]
• chore(deps): bump the github-actions group across 1 directory with 3 updates (#999) @dependabot[bot]
• chore(deps): bump kotlinToolchain from 2.4.0 to 2.4.10 (#993) @dependabot[bot]
• chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 (#994) @dependabot[bot]
• chore(deps): bump org.bouncycastle:bcpkix-jdk18on from 1.84 to 1.85 (#995) @dependabot[bot]
• chore(deps): bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 (#996) @dependabot[bot]
• chore(deps): bump kotestVersion from 6.2.1 to 6.2.3 (#991) @dependabot[bot]
• chore(deps): bump nettyVersion from 4.2.15.Final to 4.2.16.Final (#985) @dependabot[bot]
• chore(deps): bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 (#986) @dependabot[bot]
• chore(deps): bump jacksonVersion from 2.22.0 to 2.22.1 (#988) @dependabot[bot]
• chore(deps): bump junitJupiterVersion from 6.1.1 to 6.1.2 (#984) @dependabot[bot]
• chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1 (#989) @dependabot[bot]
• chore(deps): bump the github-actions group across 1 directory with 3 updates (#990) @dependabot[bot]
• chore(deps): bump gradle-wrapper from 8.14.4 to 9.6.1 (#982) @dependabot[bot]
• chore(deps): bump org.jmailen.kotlinter from 5.4.2 to 5.6.0 (#978) @dependabot[bot]
• chore(deps): bump com.squareup.okhttp3:mockwebserver from 5.2.1 to 5.4.0 (#981) @dependabot[bot]
• chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.37.1 to 11.37.2 (#980) @dependabot[bot]
• chore(deps): bump the github-actions group with 2 updates (#979) @dependabot[bot]
• chore(deps): bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.37 (#977) @dependabot[bot]

New Contributors

• @pcmoen made their first contribution in #997

Full Changelog: 5.0.2...5.0.3