Micronaut Security 4.11.2

What's Changed

Bug Fixes 🐞

• protect against NPE by @sdelamo in #1858
• Context-path prefix added to absolute redirect URLs by @ThomasIommi in #1867

Full Changelog: v4.11.1...v4.11.2

Micronaut Security 3.9.7

What's Changed

Security 🔐

• Upgrade nimbus-jose-jwt to 9.37.2, which is the first release of Nimbus JOSE JWT without vulnerabilities.

New Contributors

• @dradosevic made their first contribution in #1861

Full Changelog: v3.9.6...v3.9.7

Micronaut Security 4.11.1

What's Changed

Bug Fixes 🐞

• fix: Make JwtTokenValidator not a bean by @kevin-wise in #1848

Other Changes 💡

• fix: Run createAuthentication on a BLOCKING thread by @kevin-wise in #1847

Dependency updates 🚀

• chore(deps): update graalvm/setup-graalvm action to v1.2.5 by @renovate in #1835
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.11.2 by @renovate in #1837
• chore(deps): update softprops/action-gh-release action to v2.0.9 by @renovate in #1838
• chore(deps): update micronautgradlepluginversion to v4.4.4 by @renovate in #1843
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.2 by @renovate in #1844
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.3 by @renovate in #1852
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.7.4 by @renovate in #1855
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v5.8.3 by @renovate in #1856
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.12.0 by @renovate in #1854
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.10.2 by @renovate in #1853
• fix(deps): update dependency io.micronaut.cache:micronaut-cache-bom to v5.1.0 by @renovate in #1850
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.12.0 by @renovate in #1842
• fix(deps): update dependency io.micronaut.beanvalidation:micronaut-hibernate-validator-bom to v4.6.0 by @renovate in #1849
• chore(deps): update actions/setup-java action to v4.5.0 by @renovate in #1840

New Contributors

• @kevin-wise made their first contribution in #1848

Full Changelog: v4.11.0...v4.11.1

Micronaut Security 4.11.0

What's Changed

Regressions 🧐

• fix: support deprecated config micronaut.security.oauth2.clients.*.token.auth-method by @sdelamo in #1818
• JWKS Caching via Micronaut Cache by @sdelamo in #1824

New Features 🎉

• CSRF (Cross Site Request Forgery) Protection by @sdelamo in #1826

Bug Fixes 🐞

• @requires ann for HTTP Server classes and beans. by @sdelamo in #1832

Improvements ⭐

• content-types JSON, form-url-encoded configurable by @sdelamo in #1829

Docs 📖

• doc: default values in config reference docs by @sdelamo in #1804
• doc: document SecurityFilter by @sdelamo in #1803
• doc: @RolesAllowed and @secured in the same method by @sdelamo in #1833

Other Changes 💡

• deprecate TokenCookieTokenReader by @sdelamo in #1802
• ci: graalVM 1.2.4 by @sdelamo in #1825

Dependency updates 🚀

• chore(deps): update kotlin monorepo to v2.0.21 by @renovate in #1823
• fix(deps): update dependency uk.org.webcompere:system-stubs-core to v2.1.7 by @renovate in #1816

Selenium

• fix(deps): update selenium to v4.25.0 by @renovate in #1807
• fix(deps): update selenium to v4.24.0 by @renovate in #1785

Nimbus JOSE JWT

• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.41.1 by @renovate in #1801
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.41.2 by @renovate in #1820

Micronaut Modules

Micronaut Core

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.4 by @renovate in #1792
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.5 by @renovate in #1798
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.6 by @renovate in #1821

Micronaut Views

• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.5.0 by @renovate in #1783
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.5.1 by @renovate in #1796

Micronaut Data

• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.4 by @renovate in #1813
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.6 by @renovate in #1834

Micronaut Test Resources

• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.6.0 by @renovate in #1780
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.6.1 by @renovate in #1805
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.6.2 by @renovate in #1814

Micronaut SQL

• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v5.8.1 by @renovate in #1779
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v5.8.2 by @renovate in #1800

Micronaut Servlet

• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.11.1 by @renovate in #1778

CI ⚙️Build 🐘

• chore(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.3 by @renovate in #1795
• chore(deps): update actions/upload-artifact action to v4.4.0 by @renovate in #1782
• chore(deps): update dependency gradle to v8.10.1 by @renovate in #1793
• chore(deps): update dependency gradle to v8.10.2 by @renovate in #1809
• chore(deps): update actions/setup-java action to v4.3.0 by @renovate in #1799
• chore(deps): update actions/setup-java action to v4.4.0 by @renovate in #1812
• chore(deps): update actions/checkout action to v4.2.0 by @renovate in #1811

Micronaut Build Plugin

• chore(deps): update plugin io.micronaut.build.shared.settings to v7.2.2 by @renovate in #1827
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.2.3 by @renovate in #1831

Micronaut Gradle Plugin

• chore(deps): update micronautgradlepluginversion to v4.4.3 by @renovate in #1819

Full Changelog: v4.10.2...v4.11.0

Micronaut Security 4.10.2

What's Changed

Regressions 🧐

• fix: support deprecated config micronaut.security.oauth2.clients.*.token.auth-method by @sdelamo in #1818

Docs 📖

• doc: default values in config reference docs by @sdelamo in #1804
• doc: document SecurityFilter by @sdelamo in #1803

Other Changes 💡

• deprecate TokenCookieTokenReader by @sdelamo in #1802

Micronaut Modules

Micronaut Core

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.5 by @renovate in #1798

CI ⚙️Build 🐘

• chore(deps): update actions/upload-artifact action to v4.4.0 by @renovate in #1782
• chore(deps): update dependency gradle to v8.10.1 by @renovate in #1793
• chore(deps): update actions/setup-java action to v4.3.0 by @renovate in #1799
• chore(deps): update dependency gradle to v8.10.2 by @renovate in #1809
• chore(deps): update actions/setup-java action to v4.4.0 by @renovate in #1812
• chore(deps): update actions/checkout action to v4.2.0 by @renovate in #1811
• chore(deps): update micronautgradlepluginversion to v4.4.3 by @renovate in #1819

GraalVM

• chore(deps): update dependency org.graalvm.buildtools.native:org.graalvm.buildtools.native.gradle.plugin to v0.10.3 by @renovate in #1795

Full Changelog: v4.10.1...v4.10.2

Micronaut Security 4.10.1

What's Changed

Bug Fixes 🐞

• fix: duplicate JwksSignature beans by @sdelamo in #1789
• test: reproducer of Issue 1174 by @sdelamo in #1790

Dependency updates 🚀

• chore(deps): update kotlin monorepo to v2.0.20 by @renovate in #1776
• chore(deps): update plugin io.micronaut.build.shared.settings to v7.2.1 by @renovate in #1773
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.6.3 by @renovate in #1777
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.1 by @renovate in #1784
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.2 by @renovate in #1787
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.9.3 by @renovate in #1788

Full Changelog: v4.10.0...v4.10.1

Micronaut Security 4.10.0

What's Changed

Dependency updates 🚀

• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.40 by @renovate in #1730

Kotlin

• chore(deps): update kotlin monorepo to v2 (major) by @renovate in #1710

Micronaut Modules

• Update Security to Core 4.6.0 by @sdelamo in #1766

Micronaut Core

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.5.4 by @renovate in #1758

Micronaut Validation

• fix(deps): update dependency io.micronaut.validation:micronaut-validation-bom to v4.6.1 by @renovate in #1732

Micronaut Hibernate Validator

• fix(deps): update dependency io.micronaut.beanvalidation:micronaut-hibernate-validator-bom to v4.4.0 by @renovate in #1746

Micronaut Test

• fix(deps): update dependency io.micronaut.test:micronaut-test-bom to v4.4.0 by @renovate in #1759

Micronaut Servlet

• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.9.3 by @renovate in #1729

Micronaut Views

• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.4.1 by @renovate in #1757
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.4.3 by @renovate in #1764
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.4.4 by @renovate in #1769

Micronaut Reactor

• fix(deps): update dependency io.micronaut.reactor:micronaut-reactor-bom to v3.4.1 by @renovate in #1728

CI ⚙️Build 🐘

• chore(deps): update actions/cache action to v4 by @renovate in #1733
• chore(deps): update dependency gradle to v8.10 by @renovate in #1772
• chore(deps): update actions/checkout action to v4 by @renovate in #1748
• chore(deps): update actions/setup-java action to v4 by @renovate in #1735
• chore(deps): update actions/setup-java action to v3.13.0 by @renovate in #1731
• chore(deps): update gradle/wrapper-validation-action action to v3 - autoclosed by @renovate in #1708

GraalVM

• chore(deps): update graalvm/setup-graalvm action to v1.2.3 by @renovate in #1765

Micronaut Build Plugin

• chore(deps): update plugin io.micronaut.build.shared.settings to v7.2.0 by @renovate in #1726

Full Changelog: v4.9.1...v4.10.0

v4.9.1

What's Changed

Improvements ⭐

• add PrincipalToStringConverter to initialize-at-build-time by @n0tl3ss in #1737
• remove initialize-at-runtime definitions by @graemerocher in #1750

Dependency updates 🚀

• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.8.1 by @renovate in #1727
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.10.1 by @renovate in #1722
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.5.3 by @renovate in #1724
• chore(deps): update graalvm/setup-graalvm action to v1.2.2 by @renovate in #1739
• fix(deps): update dependency com.unboundid:unboundid-ldapsdk to v7.0.1 by @renovate in #1740
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.10.2 by @renovate in #1741
• fix(deps): update managed.jjwt to v0.12.6 by @renovate in #1745
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.8.3 by @renovate in #1747
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.8.4 by @renovate in #1752
• chore(deps): update kotlin monorepo to v1.9.25 by @renovate in #1754
• chore(deps): update micronautgradlepluginversion to v4.4.2 by @renovate in #1755
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.5.4 by @renovate in #1756

Full Changelog: v4.9.0...v4.9.1

v4.9.0

What's Changed

Dependency updates 🚀

• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.5.0 by @renovate in #1718
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.8.0 by @renovate in #1715
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.4.0 by @renovate in #1717
• fix(deps): update dependency com.nimbusds:nimbus-jose-jwt to v9.39.3 by @renovate in #1712
• fix(deps): update dependency com.unboundid:unboundid-ldapsdk to v7 by @renovate in #1720
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v5.7.0 by @renovate in #1716
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.10.0 by @renovate in #1714
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.8.0 by @renovate in #1713

Full Changelog: v4.8.0...v4.9.0

Micronaut Security v4.8.0

What's Changed

New Features 🎉

• fix: allow annotations stereotyped by @secured (#1698) by @dantonyuk in #1699

Dependency updates 🚀

• chore(deps): update micronautgradlepluginversion to v4.3.6 by @renovate in #1670
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.4.2 by @renovate in #1673
• fix(deps): update dependency io.micronaut.session:micronaut-session-bom to v4.3.0 by @renovate in #1687
• fix(deps): update dependency io.micronaut.servlet:micronaut-servlet-bom to v4.7.0 by @renovate in #1686
• chore(deps): update micronautgradlepluginversion to v4.3.8 by @renovate in #1681
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.7.0 by @renovate in #1679
• chore(deps): update plugin io.micronaut.build.shared.settings to v6.7.1 by @renovate in #1677
• chore(deps): update gradle/gradle-build-action action to v3.3.2 by @renovate in #1676
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.4.6 by @renovate in #1675
• fix(deps): update dependency io.micronaut.beanvalidation:micronaut-hibernate-validator-bom to v4.3.0 by @renovate in #1678
• fix(deps): update dependency io.micronaut.serde:micronaut-serde-bom to v2.9.0 by @renovate in #1685
• fix(deps): update dependency io.micronaut.sql:micronaut-sql-bom to v5.6.0 by @renovate in #1691
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.4.7 by @renovate in #1689
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.4.8 by @renovate in #1695
• fix(deps): update dependency io.micronaut.data:micronaut-data-bom to v4.7.1 by @renovate in #1709
• fix(deps): update dependency io.micronaut.views:micronaut-views-bom to v5.3.0 by @renovate in #1707
• chore(deps): update micronautgradlepluginversion to v4.4.0 by @renovate in #1706
• fix(deps): update dependency io.micronaut.testresources:micronaut-test-resources-bom to v2.5.2 by @renovate in #1697
• fix(deps): update dependency io.micronaut.test:micronaut-test-bom to v4.3.0 by @renovate in #1696
• fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.4.10 by @renovate in #1702
• fix(deps): update dependency io.micronaut.validation:micronaut-validation-bom to v4.5.0 by @renovate in #1700

Other Changes 💡

• feat: Add reactive API for JWT and JWKS by @sdelamo in #1693

New Contributors

• @dantonyuk made their first contribution in #1699

Full Changelog: v4.7.0...v4.8.0