Skip to content

74.5.0

Compare
Choose a tag to compare
@cf-identity cf-identity released this 17 Oct 19:07
6c965d3

FEATURES

Added option to enable basic auth uri encoding compatibility mode: This feature is meant to complement functionality released as a breaking change in UAA v74.0.0 wherein we enabled the Correct handling of special characters within the client secret. The added feature in this release provides optionality as to whether encoding of client secrets is enabled by introducing ‘uaa.authentication.enable_uri_encoding_compatibility_mode’. When enabled (set to true) basic auth credentials will only be URI decoded when the X-CF-ENCODED-CREDENTIALS header is set to true. The default continues to operate in the same manner as v74.0.0 introduced.

DEPENDENCY UPDATES

Bump reflections from 0.9.10 to 0.9.11
Bump org.eclipse.jgit from 3.4.1.201406201815-r to 5.5.1.201910021850-r
Bump bouncycastle from 1.63 to 1.64
Bump cglib from 3.2.5 to 3.3.0
Bump apacheds-core from 1.5.5 to 2.0.0.AM25
Bump apacheds-protocol-ldap from 1.5.5 to 2.0.0.AM25
Bump httpclient from 4.5.3 to 4.5.10
Bump spring-security-jwt from 1.0.10.RELEASE to 1.0.11.RELEASE