Secure-by-default token-handler BFF: server-side OAuth2 login, session-held tokens,
opaque __Host- cookie, per-user authorized-client manager for gateway TokenRelay, cookie-mode
CSRF, RP-initiated logout and an XHR-aware authentication entry point. Spring-Cloud-Gateway-agnostic.
Version26.10.19compared with
Version Details
| 26.07.06 | 26.10.19 | |
|---|---|---|
| Release date | Jul 22, 2026 | Oct 19, 2026 |
| Licenses | Apache 2.0 | Apache 2.0 |
| Vulnerabilities | None | None |
Compile Changes (5)
| 26.07.06 | 26.10.19 | ||
|---|---|---|---|
| Change | Group / Artifact | Previous | Current |
| + Added | org.springframework.boot » spring-boot-jackson2 | - | 4.1.1 |
| + Added | org.springframework.boot » spring-boot-starter-security-oauth2-client | - | 4.1.1 |
| ~ Updated | org.springframework.boot » spring-boot-autoconfigure | 3.5.10 | 4.1.1 |
| ~ Updated | org.springframework.boot » spring-boot-starter-webflux | 3.5.10 | 4.1.1 |
| - Removed | org.springframework.boot » spring-boot-starter-oauth2-client | 3.5.10 | - |
Test Changes (3)
| 26.07.06 | 26.10.19 | ||
|---|---|---|---|
| Change | Group / Artifact | Previous | Current |
| + Added | io.projectreactor » reactor-test | - | - |
| + Added | org.springframework.boot » spring-boot-starter-security-test | - | 4.1.1 |
| + Added | org.springframework.boot » spring-boot-starter-webflux-test | - | 4.1.1 |