Skip to content

v3.4.0

Choose a tag to compare

@adrienlauer adrienlauer released this 28 Nov 22:40
· 198 commits to master since this release
  • [new] Validation exceptions on REST resources are automatically mapped to a detailed response.
  • [new] A @RequiresCrudPermissions annotation allows to add permission checks based on the detected CRUD action of the called method.
  • [new] SPI CrudActionResolver has been added to security to allow for resolving the CRUD action of a particular method.
  • [new] Provides the ability to configure some Shiro implementation classes: SubjectDAO, SubjectFactory, SubjectContext, Authenticator, AuthenticationStrategy, CacheManager and SessionStorageEvaluator.
  • [new] A JAX-RS implementation of CrudActionResolver detects the CRUD action based upon the JAX-RS annotations.
  • [new] Basic support for refreshing Web applications served with Undertow.
  • [fix] Prevent session fixation issue by regenerating the session (if any) upon successful login.
  • [fix] Make SimplePrincipalProvider serializable.
  • [chg] Security sessions are now enabled by default.
  • [brk] Data import/export API has been removed and replaced by a newer API into business framework.