Micronaut Security 4.12.0

What's Changed

Bug Fixes 🐞

• Context-path prefix added to absolute redirect URLs by @ThomasIommi in #1867
• fix: JWKS Request should not be duplicated headers added by filters by @sdelamo in #1924

Improvements ⭐

• Improve Oracle Cloud Identity Domain OpenID Connect integration by @sdelamo in #1873
• Supports Endsession endpoint for microsoft login by @sdelamo in #1876
• Add AuthenticationMode to build-time-init by @andriy-dmytruk in #1882
• adds session-cookie boolean configuration by @sdelamo in #1906

Dependency updates 🚀

• fix(deps): update dependency io.micronaut.multitenancy:micronaut-multitenancy-bom to v5.5.0 by @renovate in #1865
• chore(deps): update softprops/action-gh-release action to v2.1.0 by @renovate in #1864
• chore(deps): update dependency gradle to v8.11 by @renovate in #1863
• fix(deps): update dependency io.micronaut.session:micronaut-session-bom to v4.5.0 by @renovate in #1866
• chore(deps): update dependency gradle to v8.11.1 by @renovate in #1869
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.10.4 by @renovate in #1871
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.6 by @renovate in #1872
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.3.0 by @renovate in #1875
• chore(deps): update kotlin monorepo to v2.1.0 by @renovate in #1874
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.13.0 by @renovate in #1878
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.47 by @renovate in #1841
• chore(deps): update dependency gradle to v8.11.1 - autoclosed by @renovate in #1880
• fix(deps): update dependency com.unboundid:unboundid-ldapsdk to v7.0.2 by @renovate in #1885
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.10.5 by @renovate in #1887
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.7 by @renovate in #1888
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.9 by @renovate in #1894
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.48 by @renovate in #1899
• chore(deps): update dependency gradle to v8.12 by @renovate in #1898
• chore(deps): update actions/upload-artifact action to v4.5.0 - autoclosed by @renovate in #1897
• chore(deps): update softprops/action-gh-release action to v2.2.0 by @renovate in #1892
• chore(deps): update actions/setup-java action to v4.6.0 by @renovate in #1896
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.6.0 by @renovate in #1891
• chore(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.4 by @renovate in #1883
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v6 by @renovate in #1895
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.7.0 by @renovate in #1890
• fix(deps): update selenium to v4.27.0 by @renovate in #1893
• fix(deps): update dependency io.micronaut.test:micronaut-test-bom to v4.6.2 by @renovate in #1889
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.10 by @renovate in #1901
• fix(deps): update dependency org.sonatype.gradle.plugins:scan-gradle-plugin to v3 by @renovate in #1904
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.3.1 by @renovate in #1905
• chore(deps): update softprops/action-gh-release action to v2.2.1 by @renovate in #1907
• chore(deps): update micronautgradlepluginversion to v4.4.5 by @renovate in #1913
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.3.2 by @renovate in #1910
• chore(deps): update graalvm/setup-graalvm action to v1.2.7 by @renovate in #1914
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.7.2 by @renovate in #1915
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.12 by @renovate in #1917
• chore(deps): update dependency gradle to v8.12.1 by @renovate in #1919
• chore(deps): update graalvm/setup-graalvm action to v1.2.8 by @renovate in #1920
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.11.0 by @renovate in #1921
• chore(deps): update actions/upload-artifact action to v4.6.0 by @renovate in #1918
• chore(deps): update softprops/action-gh-release action to v2.2.1 by @renovate in #1912
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.11.1 by @renovate in #1922
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.13.1 by @renovate in #1923
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.7.3 by @renovate in #1925
• fix(deps): update dependency io.micronaut.validation:micronaut-validation-bom to v4.8.1 by @renovate in #1927
• fix(deps): update kotlin monorepo to v2.1.10 by @renovate in #1929
• chore(deps): update actions/setup-java action to v4.7.0 by @renovate in #1930
• fix(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.5 by @renovate in #1928
• Security to 4.8.0 by @sdelamo in #1931

Other Changes 💡

• Sonatype Scan Gradle Plugin by @sdelamo in #1900
• extract access and refresh token Cookie methods by @sdelamo in #1908
• Fixed wrong validation annotations by @altro3 in #1916

New Contributors

• @andriy-dmytruk made their first contribution in #1882
• @altro3 made their first contribution in #1916

Full Changelog: v4.11.3...v4.12.0

Micronaut Security 4.11.3

🐞 Bug Fixes

• fix: JWKS Request should not be duplicated headers added by filters (#1924)

Full Changelog: v4.11.2...v4.11.3

Micronaut Security 4.11.2

What's Changed

Bug Fixes 🐞

• protect against NPE by @sdelamo in #1858
• Context-path prefix added to absolute redirect URLs by @ThomasIommi in #1867

Full Changelog: v4.11.1...v4.11.2

Micronaut Security 3.9.7

What's Changed

Security 🔐

• Upgrade nimbus-jose-jwt to 9.37.2, which is the first release of Nimbus JOSE JWT without vulnerabilities.

New Contributors

• @dradosevic made their first contribution in #1861

Full Changelog: v3.9.6...v3.9.7

Micronaut Security 4.11.1

What's Changed

Bug Fixes 🐞

• fix: Make JwtTokenValidator not a bean by @kevin-wise in #1848

Other Changes 💡

• fix: Run createAuthentication on a BLOCKING thread by @kevin-wise in #1847

Dependency updates 🚀

• chore(deps): update graalvm/setup-graalvm action to v1.2.5 by @renovate in #1835
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.11.2 by @renovate in #1837
• chore(deps): update softprops/action-gh-release action to v2.0.9 by @renovate in #1838
• chore(deps): update micronautgradlepluginversion to v4.4.4 by @renovate in #1843
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.2 by @renovate in #1844
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.3 by @renovate in #1852
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.4 by @renovate in #1855
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v5.8.3 by @renovate in #1856
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.12.0 by @renovate in #1854
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.10.2 by @renovate in #1853
• fix(deps): update dependency io.micronaut.cache:micronaut-cache-bom to v5.1.0 by @renovate in #1850
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.12.0 by @renovate in #1842
• fix(deps): update dependency io.micronaut.beanvalidation:micronaut-hibernate-validator-bom to v4.6.0 by @renovate in #1849
• chore(deps): update actions/setup-java action to v4.5.0 by @renovate in #1840

New Contributors

• @kevin-wise made their first contribution in #1848

Full Changelog: v4.11.0...v4.11.1

Micronaut Security 4.11.0

What's Changed

Regressions 🧐

• fix: support deprecated config micronaut.security.oauth2.clients.*.token.auth-method by @sdelamo in #1818
• JWKS Caching via Micronaut Cache by @sdelamo in #1824

New Features 🎉

• CSRF (Cross Site Request Forgery) Protection by @sdelamo in #1826

Bug Fixes 🐞

• @requires ann for HTTP Server classes and beans. by @sdelamo in #1832

Improvements ⭐

• content-types JSON, form-url-encoded configurable by @sdelamo in #1829

Docs 📖

• doc: default values in config reference docs by @sdelamo in #1804
• doc: document SecurityFilter by @sdelamo in #1803
• doc: @RolesAllowed and @secured in the same method by @sdelamo in #1833

Other Changes 💡

• deprecate TokenCookieTokenReader by @sdelamo in #1802
• ci: graalVM 1.2.4 by @sdelamo in #1825

Dependency updates 🚀

• chore(deps): update kotlin monorepo to v2.0.21 by @renovate in #1823
• fix(deps): update dependency uk.org.webcompere:system-stubs-core to v2.1.7 by @renovate in #1816

Selenium

• fix(deps): update selenium to v4.25.0 by @renovate in #1807
• fix(deps): update selenium to v4.24.0 by @renovate in #1785

Nimbus JOSE JWT

• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.41.1 by @renovate in #1801
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.41.2 by @renovate in #1820

Micronaut Modules

Micronaut Core

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.4 by @renovate in #1792
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.5 by @renovate in #1798
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.6 by @renovate in #1821

Micronaut Views

• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.5.0 by @renovate in #1783
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.5.1 by @renovate in #1796

Micronaut Data

• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.4 by @renovate in #1813
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.6 by @renovate in #1834

Micronaut Test Resources

• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.6.0 by @renovate in #1780
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.6.1 by @renovate in #1805
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.6.2 by @renovate in #1814

Micronaut SQL

• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v5.8.1 by @renovate in #1779
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v5.8.2 by @renovate in #1800

Micronaut Servlet

• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.11.1 by @renovate in #1778

CI ⚙️Build 🐘

• chore(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.3 by @renovate in #1795
• chore(deps): update actions/upload-artifact action to v4.4.0 by @renovate in #1782
• chore(deps): update dependency gradle to v8.10.1 by @renovate in #1793
• chore(deps): update dependency gradle to v8.10.2 by @renovate in #1809
• chore(deps): update actions/setup-java action to v4.3.0 by @renovate in #1799
• chore(deps): update actions/setup-java action to v4.4.0 by @renovate in #1812
• chore(deps): update actions/checkout action to v4.2.0 by @renovate in #1811

Micronaut Build Plugin

• chore(deps): update plugin io.micronaut.build.shared.settings to v7.2.2 by @renovate in #1827
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.2.3 by @renovate in #1831

Micronaut Gradle Plugin

• chore(deps): update micronautgradlepluginversion to v4.4.3 by @renovate in #1819

Full Changelog: v4.10.2...v4.11.0

Micronaut Security 4.10.2

What's Changed

Regressions 🧐

• fix: support deprecated config micronaut.security.oauth2.clients.*.token.auth-method by @sdelamo in #1818

Docs 📖

• doc: default values in config reference docs by @sdelamo in #1804
• doc: document SecurityFilter by @sdelamo in #1803

Other Changes 💡

• deprecate TokenCookieTokenReader by @sdelamo in #1802

Micronaut Modules

Micronaut Core

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.5 by @renovate in #1798

CI ⚙️Build 🐘

• chore(deps): update actions/upload-artifact action to v4.4.0 by @renovate in #1782
• chore(deps): update dependency gradle to v8.10.1 by @renovate in #1793
• chore(deps): update actions/setup-java action to v4.3.0 by @renovate in #1799
• chore(deps): update dependency gradle to v8.10.2 by @renovate in #1809
• chore(deps): update actions/setup-java action to v4.4.0 by @renovate in #1812
• chore(deps): update actions/checkout action to v4.2.0 by @renovate in #1811
• chore(deps): update micronautgradlepluginversion to v4.4.3 by @renovate in #1819

GraalVM

• chore(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.3 by @renovate in #1795

Full Changelog: v4.10.1...v4.10.2

Micronaut Security 4.10.1

What's Changed

Bug Fixes 🐞

• fix: duplicate JwksSignature beans by @sdelamo in #1789
• test: reproducer of Issue 1174 by @sdelamo in #1790

Dependency updates 🚀

• chore(deps): update kotlin monorepo to v2.0.20 by @renovate in #1776
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.2.1 by @renovate in #1773
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.3 by @renovate in #1777
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.1 by @renovate in #1784
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.2 by @renovate in #1787
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.3 by @renovate in #1788

Full Changelog: v4.10.0...v4.10.1

Micronaut Security 4.10.0

What's Changed

Dependency updates 🚀

• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.40 by @renovate in #1730

Kotlin

• chore(deps): update kotlin monorepo to v2 (major) by @renovate in #1710

Micronaut Modules

• Update Security to Core 4.6.0 by @sdelamo in #1766

Micronaut Core

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.5.4 by @renovate in #1758

Micronaut Validation

• fix(deps): update dependency io.micronaut.validation:micronaut-validation-bom to v4.6.1 by @renovate in #1732

Micronaut Hibernate Validator

• fix(deps): update dependency io.micronaut.beanvalidation:micronaut-hibernate-validator-bom to v4.4.0 by @renovate in #1746

Micronaut Test

• fix(deps): update dependency io.micronaut.test:micronaut-test-bom to v4.4.0 by @renovate in #1759

Micronaut Servlet

• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.9.3 by @renovate in #1729

Micronaut Views

• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.4.1 by @renovate in #1757
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.4.3 by @renovate in #1764
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.4.4 by @renovate in #1769

Micronaut Reactor

• fix(deps): update dependency io.micronaut.reactor:micronaut-reactor-bom to v3.4.1 by @renovate in #1728

CI ⚙️Build 🐘

• chore(deps): update actions/cache action to v4 by @renovate in #1733
• chore(deps): update dependency gradle to v8.10 by @renovate in #1772
• chore(deps): update actions/checkout action to v4 by @renovate in #1748
• chore(deps): update actions/setup-java action to v4 by @renovate in #1735
• chore(deps): update actions/setup-java action to v3.13.0 by @renovate in #1731
• chore(deps): update gradle/wrapper-validation-action action to v3 - autoclosed by @renovate in #1708

GraalVM

• chore(deps): update graalvm/setup-graalvm action to v1.2.3 by @renovate in #1765

Micronaut Build Plugin

• chore(deps): update plugin io.micronaut.build.shared.settings to v7.2.0 by @renovate in #1726

Full Changelog: v4.9.1...v4.10.0

v4.9.1

What's Changed

Improvements ⭐

• add PrincipalToStringConverter to initialize-at-build-time by @n0tl3ss in #1737
• remove initialize-at-runtime definitions by @graemerocher in #1750

Dependency updates 🚀

• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.8.1 by @renovate in #1727
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.10.1 by @renovate in #1722
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.5.3 by @renovate in #1724
• chore(deps): update graalvm/setup-graalvm action to v1.2.2 by @renovate in #1739
• fix(deps): update dependency com.unboundid:unboundid-ldapsdk to v7.0.1 by @renovate in #1740
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.10.2 by @renovate in #1741
• fix(deps): update managed.jjwt to v0.12.6 by @renovate in #1745
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.8.3 by @renovate in #1747
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.8.4 by @renovate in #1752
• chore(deps): update kotlin monorepo to v1.9.25 by @renovate in #1754
• chore(deps): update micronautgradlepluginversion to v4.4.2 by @renovate in #1755
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.5.4 by @renovate in #1756

Full Changelog: v4.9.0...v4.9.1