Secure-by-default token-handler BFF: server-side OAuth2 login, session-held tokens,
opaque __Host- cookie, per-user authorized-client manager for gateway TokenRelay, cookie-mode
CSRF, RP-initiated logout and an XHR-aware authentication entry point. Spring-Cloud-Gateway-agnostic.
Version26.10.20compared with
Version Details
| 26.10.19 | 26.10.20 | |
|---|---|---|
| Release date | Oct 19, 2026 | Oct 19, 2026 |
| Licenses | Apache 2.0 | Apache 2.0 |
| Vulnerabilities | None | None |
No dependency changes compared to the selected version.