You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Backend: Include H2 in-memory database only when using bootRun (Gradle: developmentOnly) and not when deploying as it is only for local development. Real database drivers (e.g. postgres JDBC) for production should be included using implementation.
Backend: Configure HTTP Security Header permission policy with .permissionsPolicyHeader as .permissionPolicy is deprecated
Backend: Gradle 8.13
Backend: Spring Boot 3.4.3, Spring Modulith 1.3.2, Hibernate 6.6.8.Final
Backend: OIDC: Support extraction of claims from IdToken, EndUser Endpoint and end user attributes. Claims are converted to Granted Authorities (roles) thart can natively be used in Spring for authorizing access
Backend: Enable PKCE by default for Authorization Code Flow. This is a recommended security setting also for secure clients and mandatory by OAuth 2.1