5.0.0

What's Changed

• Build improvements to simplify project support going forward.
• CVE-2019-17195 (#486)
• JWT Secret must be defined (#487)
• Provide storeToken and removeToken methods to allow for blacklists (#437)
• Do not require encoder registration to process RestOauthController errors (#494)
• Support for Grails 6.x
• Updates to latest library versions for Grails 6.x

Full Changelog: 3.0.1...5.0.0

3.0.1

What's Changed

• Publishing RestTokenCreationEvent from RestOauthController. Fixes #312 by @longwa in #401
• Issue #391 - Don't allow refresh_token for auth; Add refreshExpiration by @longwa in #402
• Bump byte-buddy from 1.7.11 to 1.10.7 by @dependabot-preview in #421
• Bump spock-reports from 1.2.13 to 1.6.3 by @dependabot-preview in #420
• Bump byte-buddy from 1.10.7 to 1.10.8 by @dependabot-preview in #422
• Bump build-info-extractor-gradle from 4.13.0 to 4.14.1 by @dependabot-preview in #423
• Bump spock-reports from 1.6.3 to 1.7.1 by @dependabot-preview in #424
• Bump build-info-extractor-gradle from 4.14.1 to 4.15.0 by @dependabot-preview in #425
• Bump byte-buddy from 1.10.8 to 1.10.9 by @dependabot-preview in #430
• Bump nimbus-jose-jwt from 8.6 to 8.11 by @dependabot-preview in #429
• Bump build-info-extractor-gradle from 4.15.0 to 4.15.1 by @dependabot-preview in #428
• Bump jackson-databind from 2.10.2 to 2.10.3 by @dependabot-preview in #426
• Bump nimbus-jose-jwt from 8.11 to 8.12 by @dependabot-preview in #433
• Issue #431, merge changes from 2.x branch by @longwa in #432

New Contributors

• @longwa made their first contribution in #401

Full Changelog: 3.0.0...3.0.1

3.0.0

What's Changed

• Update README.md by @majkelo in #269
• use application.groovy instead of Config.groovy by @jagedn in #271
• add "image" directory to oauth.png by @jagedn in #272
• add images directory by @jagedn in #273
• Typo in tokenStorage.adoc by @majkelo in #289
• Added HealthReveal to README by @fcnorman in #303
• updated filter chain code snippet in config doc by @tonyerskine in #309
• Upgrade Spring security core version by @sdelamo in #332
• Fix issue where a bean does not exist if plugin is disabled by @bobbywarner in #348
• Ignore failing Facebook test as credentials need to be updated by @bobbywarner in #349
• Migrate to Pac4J 2.0.0 by @Prototik in #329
• Rsa signature support by @michallula in #315
• Revert "Rsa signature support" by @alvarosanchez in #356
• Refresh_token could be invalid if a user is no longer valid by @tkvw in #344
• Update README.md by @zaccak in #359
• if userDomainClassName not set, don’t look for user by @sdelamo in #363
• replace link with RFC7519 link by @sdelamo in #368
• replace ar with are by @sdelamo in #369
• Updated README.md to add my company name by @1Mr-Styler in #374
• Caching parsed JSON object in the request to make it reusable later by @sagrawal31 in #377
• bump up spring security core Version to 3.2.2 by @sdelamo in #380
• Reflect the new way of configuring CAS client in docs by @tcrespog in #381
• fix for Grails 4 / Spring Security 5 based Spring-Security-Core plugin by @rvanderwerf in #397
• Fixing configuration setting name for jwt secret key by @daninus14 in #398
• Update README.md by @abrahaj in #404
• Updated README links for CloudCard and Sharptop by @tonyerskine in #407
• Bump pac4jVersion from 2.2.1 to 3.8.3 by @dependabot-preview in #416
• Bump commons-codec from 1.11 to 1.14 by @dependabot-preview in #417
• Bump commons-fileupload from 1.3.3 to 1.4 by @dependabot-preview in #418
• Bump org.asciidoctor.convert from 1.5.7 to 2.4.0 by @dependabot-preview in #415
• Bump guava from 20.0 to 23.0 by @dependabot-preview in #412
• Bump build-info-extractor-gradle from latest.release to 4.13.0 by @dependabot-preview in #411
• Bump jackson-databind from 2.8.11.1 to 2.10.2 by @dependabot-preview in #409
• Fix for #389 by @alvarosanchez in #419

New Contributors

• @majkelo made their first contribution in #269
• @jagedn made their first contribution in #271
• @fcnorman made their first contribution in #303
• @sdelamo made their first contribution in #332
• @Prototik made their first contribution in #329
• @michallula made their first contribution in #315
• @alvarosanchez made their first contribution in #356
• @tkvw made their first contribution in #344
• @zaccak made their first contribution in #359
• @1Mr-Styler made their first contribution in #374
• @sagrawal31 made their first contribution in #377
• @tcrespog made their first contribution in #381
• @rvanderwerf made their first contribution in #397
• @daninus14 made their first contribution in #398
• @abrahaj made their first contribution in #404

Full Changelog: 1.5.3...3.0.0

3.0.0.RC1

3.0.0.RC1

2.0.0.RC1

Upgrading to the latest versions of Grails and Spring Security Core

1.5.4

1.5.4

2.0.0.M2

Fixed Travis build file

1.5.3

1.5.3

1.5.2

1.5.2

1.5.1

1.5.1