BREAKING: Remove licenseKey, use only OAuth2 Basic auth (v3.0.0)

- Remove licenseKey field from AxonFlowConfig
- Remove X-License-Key header support
- Simplify addAuthHeaders() to only use OAuth2 Basic auth
- Update all tests to check for Authorization: Basic header
- Update javadoc examples to use clientId/clientSecret
- Update README and CHANGELOG with breaking changes

Breaking Changes:
- licenseKey config option removed
- X-License-Key header no longer sent
- clientId and clientSecret are now required for enterprise features

Author: saurabhjain1592

CHANGELOG.md

@@ -5,7 +5,13 @@ All notable changes to the AxonFlow Java SDK will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [2.2.0] - 2026-01-07
+## [3.0.0] - 2026-01-08
+
+### Breaking Changes
+
+- **BREAKING**: Removed `licenseKey` config option - use `clientId` and `clientSecret` instead
+- **BREAKING**: Removed `X-License-Key` header support - SDK now uses only OAuth2 Basic auth
+- **BREAKING**: `clientId` and `clientSecret` are now required for all enterprise features
 
 ### Added
 
@@ -17,16 +23,34 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- **OAuth2 Basic Authentication**: Standardized authentication to use industry-standard OAuth2 Basic auth
+- **OAuth2-Only Authentication**: Simplified authentication to use only OAuth2 Basic auth
   - Uses `Authorization: Basic base64(clientId:clientSecret)` header
-  - Removed non-standard `X-Client-ID` and `X-Client-Secret` headers
-  - `X-License-Key` retained for backward compatibility (fallback when OAuth2 credentials not provided)
-  - Matches TypeScript SDK authentication pattern for consistency across all SDKs
+  - Removed `X-License-Key` and non-standard `X-Client-ID`/`X-Client-Secret` headers
+  - Aligns with industry-standard OAuth2 client credentials pattern
 
 ### Fixed
 
 - **getPlanStatus endpoint**: Fixed endpoint path from `/api/v1/orchestrator/plan/{id}` to `/api/v1/plan/{id}` to match agent proxy routes
 
+### Migration Guide
+
+**Before (v2.x):**
+```java
+AxonFlowConfig config = AxonFlowConfig.builder()
+    .endpoint("http://localhost:8080")
+    .licenseKey("AXON-V2-...")
+    .build();
+```
+
+**After (v3.0.0):**
+```java
+AxonFlowConfig config = AxonFlowConfig.builder()
+    .endpoint("http://localhost:8080")
+    .clientId("my-client-id")
+    .clientSecret("my-client-secret")
+    .build();
+```
+
 ## [2.1.2] - 2026-01-07
 
 ### Fixed

README.md

@@ -45,7 +45,8 @@ public class GatewayExample {
         // Initialize client
         AxonFlow client = AxonFlow.create(AxonFlowConfig.builder()
             .endpoint("https://agent.getaxonflow.com")
-            .licenseKey("your-license-key")
+            .clientId("your-client-id")
+            .clientSecret("your-client-secret")
             .build());
 
         // Step 1: Pre-check the request
@@ -99,7 +100,8 @@ public class ProxyExample {
     public static void main(String[] args) {
         AxonFlow client = AxonFlow.create(AxonFlowConfig.builder()
             .endpoint("https://agent.getaxonflow.com")
-            .licenseKey("your-license-key")
+            .clientId("your-client-id")
+            .clientSecret("your-client-secret")
             .build());
 
         ClientResponse response = client.executeQuery(
@@ -126,7 +128,8 @@ public class ProxyExample {
 ```java
 AxonFlowConfig config = AxonFlowConfig.builder()
     .endpoint("https://agent.getaxonflow.com")  // Required
-    .licenseKey("your-license-key")             // Required for cloud
+    .clientId("your-client-id")
+            .clientSecret("your-client-secret")             // Required for cloud
     .timeout(Duration.ofSeconds(30))            // Default: 60s
     .debug(true)                                // Enable request logging
     .insecureSkipVerify(false)                  // SSL verification (default: false)
@@ -240,7 +243,8 @@ The SDK includes automatic retry with exponential backoff:
 ```java
 AxonFlowConfig config = AxonFlowConfig.builder()
     .endpoint("https://agent.getaxonflow.com")
-    .licenseKey("your-license-key")
+    .clientId("your-client-id")
+            .clientSecret("your-client-secret")
     .retryConfig(RetryConfig.builder()
         .maxAttempts(3)
         .initialDelayMs(100)
@@ -258,7 +262,8 @@ Enable caching for repeated policy checks:
 ```java
 AxonFlowConfig config = AxonFlowConfig.builder()
     .endpoint("https://agent.getaxonflow.com")
-    .licenseKey("your-license-key")
+    .clientId("your-client-id")
+            .clientSecret("your-client-secret")
     .cacheEnabled(true)
     .cacheTtl(Duration.ofMinutes(5))
     .cacheMaxSize(1000)
@@ -279,7 +284,8 @@ import com.getaxonflow.sdk.interceptors.*;
 // Initialize AxonFlow client
 AxonFlow axonflow = AxonFlow.create(AxonFlowConfig.builder()
     .endpoint("https://agent.getaxonflow.com")
-    .licenseKey("your-license-key")
+    .clientId("your-client-id")
+            .clientSecret("your-client-secret")
     .build());
 
 // Create interceptor

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>com.getaxonflow</groupId>
     <artifactId>axonflow-sdk</artifactId>
-    <version>2.2.0</version>
+    <version>3.0.0</version>
     <packaging>jar</packaging>
 
     <name>AxonFlow Java SDK</name>

src/main/java/com/getaxonflow/sdk/AxonFlow.java

@@ -888,11 +888,7 @@ public ConnectorResponse queryConnector(ConnectorQuery query) {
                 context.put("params", query.getParameters());
             }
 
-            // Determine clientId: prefer config.getClientId(), fallback to license key
             String clientId = config.getClientId();
-            if (clientId == null || clientId.isEmpty()) {
-                clientId = config.getLicenseKey();
-            }
 
             ClientRequest clientRequest = ClientRequest.builder()
                 .query(query.getOperation())
@@ -1668,20 +1664,11 @@ private void addAuthHeaders(Request.Builder builder) {
         }
 
         // OAuth2-style: Authorization: Basic base64(clientId:clientSecret)
-        if (config.getClientId() != null && !config.getClientId().isEmpty() &&
-            config.getClientSecret() != null && !config.getClientSecret().isEmpty()) {
-            String credentials = config.getClientId() + ":" + config.getClientSecret();
-            String encoded = Base64.getEncoder().encodeToString(
-                credentials.getBytes(StandardCharsets.UTF_8)
-            );
-            builder.header("Authorization", "Basic " + encoded);
-            return;
-        }
-
-        // Fallback: X-License-Key header (backward compatibility)
-        if (config.getLicenseKey() != null && !config.getLicenseKey().isEmpty()) {
-            builder.header("X-License-Key", config.getLicenseKey());
-        }
+        String credentials = config.getClientId() + ":" + config.getClientSecret();
+        String encoded = Base64.getEncoder().encodeToString(
+            credentials.getBytes(StandardCharsets.UTF_8)
+        );
+        builder.header("Authorization", "Basic " + encoded);
     }
 
     /**
@@ -1693,7 +1680,7 @@ private void addAuthHeaders(Request.Builder builder) {
     private void requireCredentials(String feature) {
         if (!config.hasCredentials()) {
             throw new AuthenticationException(
-                feature + " requires credentials. Set licenseKey or clientId/clientSecret in config."
+                feature + " requires credentials. Set clientId and clientSecret in config."
             );
         }
     }

src/main/java/com/getaxonflow/sdk/AxonFlowConfig.java

@@ -51,7 +51,6 @@ public final class AxonFlowConfig {
     private final String endpoint;
     private final String clientId;
     private final String clientSecret;
-    private final String licenseKey;
     private final Mode mode;
     private final Duration timeout;
     private final boolean debug;
@@ -64,7 +63,6 @@ private AxonFlowConfig(Builder builder) {
         this.endpoint = normalizeUrl(builder.endpoint != null ? builder.endpoint : DEFAULT_ENDPOINT);
         this.clientId = builder.clientId;
         this.clientSecret = builder.clientSecret;
-        this.licenseKey = builder.licenseKey;
         this.mode = builder.mode != null ? builder.mode : Mode.PRODUCTION;
         this.timeout = builder.timeout != null ? builder.timeout : DEFAULT_TIMEOUT;
         this.debug = builder.debug;
@@ -87,13 +85,13 @@ private void validate() {
     /**
      * Checks if credentials are configured.
      *
-     * <p>Returns true if either a license key or client credentials are set.
+     * <p>Returns true if client credentials (clientId and clientSecret) are set.
      *
      * @return true if credentials are available
      */
     public boolean hasCredentials() {
-        return (licenseKey != null && !licenseKey.isEmpty()) ||
-               (clientId != null && clientSecret != null && !clientSecret.isEmpty());
+        return clientId != null && !clientId.isEmpty() &&
+               clientSecret != null && !clientSecret.isEmpty();
     }
 
     private String normalizeUrl(String url) {
@@ -122,7 +120,6 @@ public boolean isLocalhost() {
      *   <li>AXONFLOW_AGENT_URL - The endpoint URL (kept for backwards compatibility)</li>
      *   <li>AXONFLOW_CLIENT_ID - The client ID</li>
      *   <li>AXONFLOW_CLIENT_SECRET - The client secret</li>
-     *   <li>AXONFLOW_LICENSE_KEY - The license key</li>
      *   <li>AXONFLOW_MODE - Operating mode (production/sandbox)</li>
      *   <li>AXONFLOW_TIMEOUT_SECONDS - Request timeout in seconds</li>
      *   <li>AXONFLOW_DEBUG - Enable debug mode (true/false)</li>
@@ -149,11 +146,6 @@ public static AxonFlowConfig fromEnvironment() {
             builder.clientSecret(clientSecret);
         }
 
-        String licenseKey = System.getenv("AXONFLOW_LICENSE_KEY");
-        if (licenseKey != null && !licenseKey.isEmpty()) {
-            builder.licenseKey(licenseKey);
-        }
-
         String modeStr = System.getenv("AXONFLOW_MODE");
         if (modeStr != null && !modeStr.isEmpty()) {
             builder.mode(Mode.fromValue(modeStr));
@@ -188,10 +180,6 @@ public String getClientSecret() {
         return clientSecret;
     }
 
-    public String getLicenseKey() {
-        return licenseKey;
-    }
-
     public Mode getMode() {
         return mode;
     }
@@ -233,13 +221,12 @@ public boolean equals(Object o) {
                insecureSkipVerify == that.insecureSkipVerify &&
                Objects.equals(endpoint, that.endpoint) &&
                Objects.equals(clientId, that.clientId) &&
-               Objects.equals(licenseKey, that.licenseKey) &&
                mode == that.mode;
     }
 
     @Override
     public int hashCode() {
-        return Objects.hash(endpoint, clientId, licenseKey, mode, debug, insecureSkipVerify);
+        return Objects.hash(endpoint, clientId, mode, debug, insecureSkipVerify);
     }
 
     @Override
@@ -260,7 +247,6 @@ public static final class Builder {
         private String endpoint;
         private String clientId;
         private String clientSecret;
-        private String licenseKey;
         private Mode mode;
         private Duration timeout;
         private boolean debug;
@@ -321,17 +307,6 @@ public Builder clientSecret(String clientSecret) {
             return this;
         }
 
-        /**
-         * Sets the license key for SaaS authentication.
-         *
-         * @param licenseKey the license key
-         * @return this builder
-         */
-        public Builder licenseKey(String licenseKey) {
-            this.licenseKey = licenseKey;
-            return this;
-        }
-
         /**
          * Sets the operating mode.
          *

src/main/java/com/getaxonflow/sdk/interceptors/AnthropicInterceptor.java

@@ -29,7 +29,7 @@
  * // Create AxonFlow client
  * AxonFlow axonflow = AxonFlow.builder()
  *     .agentUrl("http://localhost:8080")
- *     .licenseKey("your-license-key")
+ *     .clientId("your-client-id").clientSecret("your-client-secret")
  *     .build();
  *
  * // Create interceptor

src/main/java/com/getaxonflow/sdk/interceptors/OpenAIInterceptor.java

@@ -30,8 +30,9 @@
  * <pre>{@code
  * // Create AxonFlow client
  * AxonFlow axonflow = AxonFlow.builder()
- *     .agentUrl("http://localhost:8080")
- *     .licenseKey("your-license-key")
+ *     .endpoint("http://localhost:8080")
+ *     .clientId("your-client-id")
+ *     .clientSecret("your-client-secret")
  *     .build();
  *
  * // Create interceptor

src/main/java/com/getaxonflow/sdk/interceptors/package-info.java

@@ -23,7 +23,7 @@
  * // Create AxonFlow client
  * AxonFlow axonflow = AxonFlow.builder()
  *     .agentUrl("http://localhost:8080")
- *     .licenseKey("your-license-key")
+ *     .clientId("your-client-id").clientSecret("your-client-secret")
  *     .build();
  *
  * // Wrap OpenAI calls

src/test/java/com/getaxonflow/sdk/AxonFlowConfigTest.java

@@ -61,7 +61,6 @@ void shouldCreateFullConfig() {
             .endpoint("https://api.example.com")
             .clientId("test-client")
             .clientSecret("test-secret")
-            .licenseKey("test-license")
             .mode(Mode.SANDBOX)
             .timeout(Duration.ofSeconds(30))
             .debug(true)
@@ -74,7 +73,6 @@ void shouldCreateFullConfig() {
         assertThat(config.getEndpoint()).isEqualTo("https://api.example.com");
         assertThat(config.getClientId()).isEqualTo("test-client");
         assertThat(config.getClientSecret()).isEqualTo("test-secret");
-        assertThat(config.getLicenseKey()).isEqualTo("test-license");
         assertThat(config.getMode()).isEqualTo(Mode.SANDBOX);
         assertThat(config.getTimeout()).isEqualTo(Duration.ofSeconds(30));
         assertThat(config.isDebug()).isTrue();
@@ -111,7 +109,7 @@ void shouldDetectLocalhost(String url) {
     void shouldDetectNonLocalhost(String url) {
         AxonFlowConfig config = AxonFlowConfig.builder()
             .endpoint(url)
-            .licenseKey("test-key")
+            .clientId("test-client").clientSecret("test-secret")
             .build();
 
         assertThat(config.isLocalhost()).isFalse();
@@ -129,17 +127,6 @@ void shouldAllowNonLocalhostWithoutCredentials() {
         assertThat(config.getEndpoint()).isEqualTo("https://api.example.com");
     }
 
-    @Test
-    @DisplayName("should accept license key for non-localhost")
-    void shouldAcceptLicenseKeyForNonLocalhost() {
-        AxonFlowConfig config = AxonFlowConfig.builder()
-            .endpoint("https://api.example.com")
-            .licenseKey("test-license")
-            .build();
-
-        assertThat(config.getLicenseKey()).isEqualTo("test-license");
-    }
-
     @Test
     @DisplayName("should accept client credentials for non-localhost")
     void shouldAcceptClientCredentialsForNonLocalhost() {