4.3.2
Features
- HTMX-aware AuthenticationEntryPoint for session expiry handling (#294)
- When HTMX requests (
HX-Request: trueheader) hit an expired session, the framework now returns a 401 JSON response with anHX-Redirectheader instead of the default 302 redirect that causes HTMX to swap login page HTML into fragment targets - New classes:
HtmxAwareAuthenticationEntryPoint,HtmxAwareAuthenticationEntryPointConfiguration WebSecurityConfignow always configuresexceptionHandling()with the injected entry point (previously only configured when OAuth2 was enabled)- Consumer override: define any
AuthenticationEntryPointbean to replace the default - Respects
server.servlet.context-pathfor non-root deployments - 100% backward-compatible: non-HTMX browser requests get the same 302 redirect as before
- When HTMX requests (
Maintenance
- Fix Groovy space-assignment deprecation in build.gradle (Gradle 10 compatibility)
- Suppress removal warning on deprecated method test in UserEmailServiceTest
Maven Central
<dependency>
<groupId>com.digitalsanctuary</groupId>
<artifactId>ds-spring-user-framework</artifactId>
<version>4.3.2</version>
</dependency>