Skip to content

v5.3.4

Compare
Choose a tag to compare
@rrayst rrayst released this 08 Mar 12:34
· 430 commits to master since this release

Changes since 5.3.3:

  • improved OpenTelemetry reporting (changes in <openTelemetry> configuration)
  • improved several problem URIs

Fixes:

  • upgraded dependencies
  • OpenAPI: support nested types
  • added prometheus example
  • support <requireAuth required="false" .../> to skip authentication, if no token is present
  • support <requireAuth errorStatus="401" .../> to return specific error code on authentication failure
  • support <oAuth2Resource2 afterErrorUrl="/foo" .../> to send user to error page after error during login
  • support <oAuth2Resource2 onlyRefreshToken="true" .../> to allow Authorization Server to return no access token (only a refresh token)
  • support <requireAuth scope="foo" oauth2="oauth2"/> and <requireAuth scope="bar" oauth2="oauth2"/> to request multiple access tokens from Authorization Server