Changelog
Features
-
Use JDBC connection pooling
By default the pool has a size of 10 and a timeout of 30s to acquire a connection.
These settings can be changed with the following configuration properties:org.osiam.auth-server.db.maximum-pool-size
org.osiam.auth-server.db.connection-timeout-ms
-
Support retrieving list of clients
Use the resource endpoint
/Client
withGET
. -
Make number of parallel connections to the auth-server configurable
The default is 40 and can be changed with the following configuration property:
org.osiam.resource-server.connector.max-connections
-
Make timeouts of connections to auth-server configurable
By default the read timeout is set to 10000ms and the connect timeout to 5000ms.
These settings can be changed with the following configuration properties:org.osiam.resource-server.connector.read-timeout-ms
org.osiam.resource-server.connector.connect-timeout-ms
Changes
-
Add Flyway migration to replace method-based scopes
The migration removes all method-based scopes from the auth-server client and adds the scope
ADMIN
. -
Increase default timeouts for connections to resource-server
By default the read timeout is set to 10000ms and the connect timeout to 5000ms.
-
Increase default maximum number of parallel connections to resource-server
The default is 40.
-
Switch to Spring Boot
-
Refactor database schema
Note: Some fields in table
osiam_client
have been renamed:accesstokenvalidityseconds
becomesaccess_token_validity_seconds
refreshtokenvalidityseconds
becomesrefresh_token_validity_seconds
validityinseconds
becomesvalidity_in_seconds
Update your SQL scripts, if you add OAuth 2 clients via direct database manipulation.
It's recommended to use the RESTful endpoints under/Client
to manage Clients.
Fixes
-
Make sure
access_token
,refresh_token
andtoken_type
are added only
once to the returned Access Token (Fixes #42). -
Remove
scopes
from the Access Token (Fixes #51). -
Prevent NPE when
User#active
is null -
Handle duplicate client creation error on application level
Respond with Conflict 409 when a client with a requested client id already
exists
Updates
- OSIAM connector4java 1.8
- MySQL JDBC driver 5.1.37
- PostgreSQL JDBC driver 9.4-1205
- OAuth2 for Spring Security 2.0.8