Skip to content

OAuth access-token support

Latest
Latest

Choose a tag to compare

View all tags
@jakeichikawasalesforce jakeichikawasalesforce released this 07 Oct 18:07
2.16.0
5e03e02
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Accept OAuth access tokens without an aud claim when global required scopes are configured.
  • Require either an OAuth audience or global required scope as the resource boundary.
  • Add optional endpoint-specific scope enforcement.
  • Support trusted non-public JWKS routing for enterprise networks.
  • Improve OAuth capability details on the landing page and /info.
  • Treat configured subdirectories literally in route matching.
Assets 2
Loading