From ab07ec69663fd5d386e5c001d9d4ed206b430602 Mon Sep 17 00:00:00 2001 From: Manuel Fink Date: Mon, 6 Jul 2026 12:56:09 +0200 Subject: [PATCH 1/2] Java 4.3.0 CHANGELOG --- docs/Libraries/java/changelog.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/Libraries/java/changelog.md b/docs/Libraries/java/changelog.md index 7aef84f..9b16661 100644 --- a/docs/Libraries/java/changelog.md +++ b/docs/Libraries/java/changelog.md @@ -2,6 +2,12 @@ ## Version 4 +### 4.3.0 + +- Feature: The `spring-boot-starter-ams-test` auto-configuration no longer matches when an `identity` service binding is found. This enables CAP applications to include `spring-boot-starter-cap-ams-test` as regular (instead of test-scoped) dependency to start locally with mock users and file-based authorization bundles without explicitly including test-scoped dependencies. To override this auto-configuration matcher, the property `sap.ams.test.enabled` can be explicitly set to `true` or `false`. +- Fix: `AmsRouteSecurity` is not useable with Spring Boot 3 / Spring Security 6 in addition to Spring Boot 4 / Spring Security 7. +- Fix: The `spring-boot-starter-ams-ztis` auto-configuration no longer configures the AMS library with Zero Trust Identity Service certificates unless the `credential-type` of the `identity` service binding is `X509_ATTESTED` and it has the same `app-identifier` as the `zero-trust-identity` service binding. + ### 4.2.1 - Fix: The exponential retry mechanism in `AmsBundleLoader` no longer accidentally retries failed requests without a delay after ~100 consecutive failures, preventing 429 Too Many Requests errors. From e87e5774033bc9db168e8af0f39053b98fe2c6f3 Mon Sep 17 00:00:00 2001 From: Manuel Fink Date: Mon, 6 Jul 2026 15:38:09 +0200 Subject: [PATCH 2/2] fix typo --- docs/Libraries/java/changelog.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/Libraries/java/changelog.md b/docs/Libraries/java/changelog.md index 9b16661..453c4e5 100644 --- a/docs/Libraries/java/changelog.md +++ b/docs/Libraries/java/changelog.md @@ -5,7 +5,7 @@ ### 4.3.0 - Feature: The `spring-boot-starter-ams-test` auto-configuration no longer matches when an `identity` service binding is found. This enables CAP applications to include `spring-boot-starter-cap-ams-test` as regular (instead of test-scoped) dependency to start locally with mock users and file-based authorization bundles without explicitly including test-scoped dependencies. To override this auto-configuration matcher, the property `sap.ams.test.enabled` can be explicitly set to `true` or `false`. -- Fix: `AmsRouteSecurity` is not useable with Spring Boot 3 / Spring Security 6 in addition to Spring Boot 4 / Spring Security 7. +- Fix: `AmsRouteSecurity` is now useable with Spring Boot 3 / Spring Security 6 in addition to Spring Boot 4 / Spring Security 7. - Fix: The `spring-boot-starter-ams-ztis` auto-configuration no longer configures the AMS library with Zero Trust Identity Service certificates unless the `credential-type` of the `identity` service binding is `X509_ATTESTED` and it has the same `app-identifier` as the `zero-trust-identity` service binding. ### 4.2.1