cloud-security-xsuaa-integration | Integration libraries and samples for authenticating users and clients bound to XSUAA authentication | OAuth library

by SAP Java Version: 2.13.8 License: Apache-2.0

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | cloud-security-xsuaa-integration Summary

cloud-security-xsuaa-integration is a Java library typically used in Security, OAuth applications. cloud-security-xsuaa-integration has no bugs, it has no vulnerabilities, it has build file available, it has a Permissive License and it has low support. You can download it from GitHub, Maven.

Authentication services provided by the xsuaa service on SAP Cloud Platform or SAP HANA XS Advanced rely on usage of the OAuth 2.0 protocol and OAuth 2.0 access tokens.

Support

Quality

Security

License

Reuse

Support

cloud-security-xsuaa-integration has a low active ecosystem.

It has 125 star(s) with 125 fork(s). There are 15 watchers for this library.

It had no major release in the last 12 months.

There are 7 open issues and 292 have been closed. On average issues are closed in 12 days. There are 13 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of cloud-security-xsuaa-integration is 2.13.8

Quality

cloud-security-xsuaa-integration has 0 bugs and 0 code smells.

Security

cloud-security-xsuaa-integration has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

cloud-security-xsuaa-integration code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

cloud-security-xsuaa-integration is licensed under the Apache-2.0 License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

cloud-security-xsuaa-integration releases are available to install and integrate.

Deployable package is available in Maven.

Build file is available. You can build the component from source.

Installation instructions, examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi has reviewed cloud-security-xsuaa-integration and discovered the below as its top functions. This is intended to give you an instant insight into cloud-security-xsuaa-integration implemented functionality, and help decide if they suit your requirements.

Extracts the broker token .
Request an access token .
Returns true if token is in foreign mode .
Parse the private key from the given private key .
Retrieve token keys .
Request user token .
Gets the audience from a token .
Creates JSON web key from given JSON object .
Creates the default validators .
Loads all service configurations for the given service .

Get all kandi verified functions for this library.

cloud-security-xsuaa-integration Key Features

No Key Features are available at this moment for cloud-security-xsuaa-integration.

cloud-security-xsuaa-integration Examples and Code Snippets

No Code Snippets are available at this moment for cloud-security-xsuaa-integration.

Community Discussions

Trending Discussions on cloud-security-xsuaa-integration

Dependency conflicts between SAP-Cloud-SDK and SAP cloud-security-xsuaa-integration

QUESTION

Dependency conflicts between SAP-Cloud-SDK and SAP cloud-security-xsuaa-integration

Asked 2020-Nov-24 at 08:18

We're trying to use SAP SpringBoot Starter XSUAA 2.7.8 (https://github.com/SAP/cloud-security-xsuaa-integration) together with the SAP CloudSDK for Java 3.32.0.

The CloudSDK depends on part of the xsuaa (java-api, java-security, tokenclient, java-security-test) version 2.7.8, but does not use spring-xsuaa. The CloudSDK also depends on Spring Security 5.4.1. When we add xsuaa-spring-boot-starter, our security integration tests break, and at runtime we run into token validation errors at the "rest api" side (rest controllers) of our app. It seems to be due to the fact that xsuaa-spring-boot-starter depends on Spring Security 5.3.4.RELEASE.

We get errors saying: java.lang.NoSuchMethodError: 'java.util.Map com.nimbusds.jose.Header.toJSONObject(). This is a know issue with spring security 5.4.1 (https://github.com/spring-projects/spring-security/issues/9120). As the issue states spring security is meant to be used with springboot 2.4 and not 2.3 which is used by the cloud sdk.

We've not been able to resolve this issue. Can this be the cause of different dependencies? If so, any ideas on how to resolve these?

Thanks,

Danny

...

ANSWER

Answered 2020-Nov-24 at 08:18

Edit: As of version 3.33.0 the SDK comes with the below configuration by default in the Spring Archetype.

Your observation is correct, this is a dependency conflict introduced by the different Spring security versions.

In case you are using the SDK BOM you need to explicitly set the Spring security version before it would be set by the SDK BOM:

Source https://stackoverflow.com/questions/64764311

Community Discussions, Code Snippets contain sources that include Stack Exchange Network