Skip to content

4.3.2

Choose a tag to compare

@devondragon devondragon released this 28 Mar 22:41
· 134 commits to main since this release

Features

  • HTMX-aware AuthenticationEntryPoint for session expiry handling (#294)
    • When HTMX requests (HX-Request: true header) hit an expired session, the framework now returns a 401 JSON response with an HX-Redirect header instead of the default 302 redirect that causes HTMX to swap login page HTML into fragment targets
    • New classes: HtmxAwareAuthenticationEntryPoint, HtmxAwareAuthenticationEntryPointConfiguration
    • WebSecurityConfig now always configures exceptionHandling() with the injected entry point (previously only configured when OAuth2 was enabled)
    • Consumer override: define any AuthenticationEntryPoint bean to replace the default
    • Respects server.servlet.context-path for non-root deployments
    • 100% backward-compatible: non-HTMX browser requests get the same 302 redirect as before

Maintenance

  • Fix Groovy space-assignment deprecation in build.gradle (Gradle 10 compatibility)
  • Suppress removal warning on deprecated method test in UserEmailServiceTest

Maven Central

<dependency>
    <groupId>com.digitalsanctuary</groupId>
    <artifactId>ds-spring-user-framework</artifactId>
    <version>4.3.2</version>
</dependency>