Micronaut Security 4.15.0

What's Changed

New Features 🎉

• feat: Token Validation via Auth Server UserInfo endpoint by @sdelamo in #2022
• feat: proxy GET requests to /.well-known requests by @sdelamo in #2024

Dependency updates 🚀

• Update to Apache Geb 8 by @sdelamo in #2016

Other Changes 💡

• test: ignore keycloack tests on CI by @sdelamo in #2021
• feat: allow define the authorization-server via config by @sdelamo in #2019
• security: don’t log token by @sdelamo in #2026

Full Changelog: v4.14.0...v4.15.0

Micronaut Security 4.14.0

What's Changed

Features

• feat: protected resource metadata by @sdelamo in #2017

Dependency updates 🚀

• fix(deps): update managed.jjwt to v0.13.0 by @renovate[bot] in #2007
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v10.5 by @renovate[bot] in #2005

Micronaut Modules

Micronaut Core

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.9.9 by @renovate[bot] in #2004
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.9.10 by @renovate[bot] in #2008
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.9.11 by @renovate[bot] in #2013

CI ⚙️Build 🐘

• chore(deps): update graalvm/setup-graalvm action to v1.3.5 by @renovate[bot] in #2002
• chore(deps): update graalvm/setup-graalvm action to v1.3.6 by @renovate[bot] in #2011
• Update micronaut build by @lissam1 in #2014

New Contributors

• @lissam1 made their first contribution in #2014

Full Changelog: v4.13.1...v4.14.0

Micronaut Security 4.13.1

What's Changed

Bug Fixes 🐞

• bug: don't hardcode refresh cookie name by @sdelamo in #2001
• bug: use ConcurrentHashMap for ClaimsUtils by @sdelamo in #2000

Docs 📖

• Documentation - Updated the module and logout handler for cookie based authentication by @dvkvarma in #1996

Dependency updates 🚀

• Update dependency com.unboundid:unboundid-ldapsdk to v7.0.3 by @renovate[bot] in #1986
• Update dependency com.nimbusds:nimbus-jose-jwt to v10.3.1 by @renovate[bot] in #1987
• Update dependency io.micronaut:micronaut-core-bom to v4.9.6 by @renovate[bot] in #1988
• chore(deps): update dependency gradle to v8.14.3 by @renovate[bot] in #1989
• chore(deps): update micronautgradlepluginversion to v4.5.4 by @renovate[bot] in #1991
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.9.7 by @renovate[bot] in #1992
• fix(deps): update dependency io.micronaut.cache:micronaut-cache-bom to v5.3.0 by @renovate[bot] in #1995
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.5.0 by @renovate[bot] in #1993
• fix(deps): update dependency io.micronaut.beanvalidation:micronaut-hibernate-validator-bom to v4.8.0 by @renovate[bot] in #1994

New Contributors

• @dvkvarma made their first contribution in #1996

Full Changelog: v4.13.0...v4.13.1

Micronaut Security 4.12.3

What's Changed

Documentation 📑

• Updated the module and logout handler for cookie based authentication (#1996)

Bug Fixes 🐞

• bug: use ConcurrentHashMap for ClaimsUtils by @sdelamo in #2000
• bug: don't hardcode refresh cookie name (#2001)

Build 🐘

chore(deps): update plugin io.micronaut.build.shared.settings to v7.5.0 (#1993)

Full Changelog: v4.12.2...v4.12.3

Micronaut Security 4.13.0

What's Changed

Docs 📖

• doc: remove duplicated "and a" by @sdelamo in #1978

Dependency updates 🚀

• chore(deps): update micronautgradlepluginversion to v4.5.1 by @renovate in #1954
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v10 by @renovate in #1956
• fix(deps): update selenium to v4.33.0 by @renovate in #1955
• chore(deps): update micronautgradlepluginversion to v4.5.3 by @renovate in #1983

Other Changes 💡

• Unsupported POST Content type status configurable by @sdelamo in #1976

Full Changelog: v4.12.2...v4.13.0

Micronaut Security 4.12.2

What's Changed

Bug Fixes 🐞

• Fix LoginController to check configured content types against request content type name without parameters by @mattlong-finocomp in #1970

Dependency updates 🚀

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.8.9 by @renovate in #1952
• fix(deps): update kotlin monorepo to v2.1.20 by @renovate in #1953
• fix(deps): update dependency uk.org.webcompere:system-stubs-core to v2.1.8 by @renovate in #1957
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v5.2.2 by @renovate in #1961
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.8.11 by @renovate in #1963
• chore(deps): update softprops/action-gh-release action to v2.2.2 by @renovate in #1964
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.12.1 by @renovate in #1969
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.14.1 by @renovate in #1972
• fix(deps): update kotlin monorepo to v2.1.21 by @renovate in #1973
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.12.2 by @renovate in #1974
• chore(deps): update dependency gradle to v8.14.2 by @renovate in #1968
• chore(deps): update actions/download-artifact action to v4.3.0 by @renovate in #1967
• chore(deps): update micronautgradlepluginversion to v4.5.3 by @renovate in #1959
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v5.3.1 by @renovate in #1975
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.8.15 by @renovate in #1966

Other Changes 💡

• graal: Initialize enums at bulid time by @sdelamo in #1977

New Contributors

• @mattlong-finocomp made their first contribution in #1970

Full Changelog: v4.12.1...v4.12.2

Micronaut Security 4.11.4

Strip parameters for configurable content type comparisons on endpoints (#1970)

Full Changelog: v4.11.3...v4.11.4

Micronaut Security 4.12.1

What's Changed

Dependency updates 🚀

• fix(deps): update selenium to v4.28.1 by @renovate in #1932
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v5.0.1 by @renovate in #1933
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.8.3 by @renovate in #1934
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.8.4 by @renovate in #1939
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.4.0 by @renovate in #1943
• chore(deps): update graalvm/setup-graalvm action to v1.3.3 by @renovate in #1935
• fix(deps): update dependency io.micronaut.beanvalidation:micronaut-hibernate-validator-bom to v4.7.0 by @renovate in #1936
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.8.5 by @renovate in #1940
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.11.2 by @renovate in #1945
• chore(deps): update slsa-framework/slsa-github-generator action to v2.1.0 by @renovate in #1944
• chore(deps): update dependency gradle to v8.13 by @renovate in #1941
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v6.1.1 by @renovate in #1947
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.8.7 by @renovate in #1948
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.8.8 by @renovate in #1949
• fix(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.6 by @renovate in #1950

Full Changelog: v4.12.0...v4.12.1

Micronaut Security 4.12.0

What's Changed

Bug Fixes 🐞

• Context-path prefix added to absolute redirect URLs by @ThomasIommi in #1867
• fix: JWKS Request should not be duplicated headers added by filters by @sdelamo in #1924

Improvements ⭐

• Improve Oracle Cloud Identity Domain OpenID Connect integration by @sdelamo in #1873
• Supports Endsession endpoint for microsoft login by @sdelamo in #1876
• Add AuthenticationMode to build-time-init by @andriy-dmytruk in #1882
• adds session-cookie boolean configuration by @sdelamo in #1906

Dependency updates 🚀

• fix(deps): update dependency io.micronaut.multitenancy:micronaut-multitenancy-bom to v5.5.0 by @renovate in #1865
• chore(deps): update softprops/action-gh-release action to v2.1.0 by @renovate in #1864
• chore(deps): update dependency gradle to v8.11 by @renovate in #1863
• fix(deps): update dependency io.micronaut.session:micronaut-session-bom to v4.5.0 by @renovate in #1866
• chore(deps): update dependency gradle to v8.11.1 by @renovate in #1869
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.10.4 by @renovate in #1871
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.6 by @renovate in #1872
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.3.0 by @renovate in #1875
• chore(deps): update kotlin monorepo to v2.1.0 by @renovate in #1874
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.13.0 by @renovate in #1878
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.47 by @renovate in #1841
• chore(deps): update dependency gradle to v8.11.1 - autoclosed by @renovate in #1880
• fix(deps): update dependency com.unboundid:unboundid-ldapsdk to v7.0.2 by @renovate in #1885
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.10.5 by @renovate in #1887
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.7 by @renovate in #1888
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.9 by @renovate in #1894
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.48 by @renovate in #1899
• chore(deps): update dependency gradle to v8.12 by @renovate in #1898
• chore(deps): update actions/upload-artifact action to v4.5.0 - autoclosed by @renovate in #1897
• chore(deps): update softprops/action-gh-release action to v2.2.0 by @renovate in #1892
• chore(deps): update actions/setup-java action to v4.6.0 by @renovate in #1896
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.6.0 by @renovate in #1891
• chore(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.4 by @renovate in #1883
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v6 by @renovate in #1895
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.7.0 by @renovate in #1890
• fix(deps): update selenium to v4.27.0 by @renovate in #1893
• fix(deps): update dependency io.micronaut.test:micronaut-test-bom to v4.6.2 by @renovate in #1889
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.10 by @renovate in #1901
• fix(deps): update dependency org.sonatype.gradle.plugins:scan-gradle-plugin to v3 by @renovate in #1904
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.3.1 by @renovate in #1905
• chore(deps): update softprops/action-gh-release action to v2.2.1 by @renovate in #1907
• chore(deps): update micronautgradlepluginversion to v4.4.5 by @renovate in #1913
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.3.2 by @renovate in #1910
• chore(deps): update graalvm/setup-graalvm action to v1.2.7 by @renovate in #1914
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.7.2 by @renovate in #1915
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.12 by @renovate in #1917
• chore(deps): update dependency gradle to v8.12.1 by @renovate in #1919
• chore(deps): update graalvm/setup-graalvm action to v1.2.8 by @renovate in #1920
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.11.0 by @renovate in #1921
• chore(deps): update actions/upload-artifact action to v4.6.0 by @renovate in #1918
• chore(deps): update softprops/action-gh-release action to v2.2.1 by @renovate in #1912
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.11.1 by @renovate in #1922
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.13.1 by @renovate in #1923
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.7.3 by @renovate in #1925
• fix(deps): update dependency io.micronaut.validation:micronaut-validation-bom to v4.8.1 by @renovate in #1927
• fix(deps): update kotlin monorepo to v2.1.10 by @renovate in #1929
• chore(deps): update actions/setup-java action to v4.7.0 by @renovate in #1930
• fix(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.5 by @renovate in #1928
• Security to 4.8.0 by @sdelamo in #1931

Other Changes 💡

• Sonatype Scan Gradle Plugin by @sdelamo in #1900
• extract access and refresh token Cookie methods by @sdelamo in #1908
• Fixed wrong validation annotations by @altro3 in #1916

New Contributors

• @andriy-dmytruk made their first contribution in #1882
• @altro3 made their first contribution in #1916

Full Changelog: v4.11.3...v4.12.0

Micronaut Security 4.11.3

🐞 Bug Fixes

• fix: JWKS Request should not be duplicated headers added by filters (#1924)

Full Changelog: v4.11.2...v4.11.3