Skip to content
Flag of Europe
Made in the European Union · Independently built · Released under EUPL 1.2
Documentation
Roadmap
v00.74.00 — Delivered

v00.74.00 — Delivered

✅ Delivered — on Maven Central. This line is fully delivered; the current published release is 00.79.41. See the 00.74.00, 00.74.10 and 00.74.20 release notes and Quick Start.

Theme

After the 00.73 rebrand, 00.74 adds declarative token propagation — the operations experience Quarkus offers with oidc-token-propagation. An inbound bearer token (JWT, opaque access token, API key) is attached to downstream HTTP calls automatically, with the strategy declared per client interface or method. Additive over 00.73: apps without .propagation(...) are unaffected.

Delivered in 00.74.00 — token propagation

AreaWhat shipped
Declarative marker@PropagateToken (class- or method-level), via the existing JSentinelAnnotationScanner.
Inbound captureTokenCredential sealed types + TokenCredentialStore SPI with Vaadin / REST / Standalone defaults + RestTokenCredentialFilter.
Outbound strategyOutboundTokenStrategy SPI + PassThroughStrategy default. Opt-in jSentinel-propagation-oidc: TokenExchangeStrategy (RFC 8693), ClientCredentialsStrategy (RFC 6749 §4.4), InMemoryTokenExchangeCache.
Wrapper generationRuntime PropagatingProxy.wrap(...) + compile-time <Type>Propagating generator; wrapper index gains a kind column.
Bootstrap.propagation(...) sub-builder + PropagationDiagnosticContributor, symmetric with .audit / .sessions / .policies.
New modulesjSentinel-propagation, jSentinel-propagation-processor, jSentinel-propagation-oidc.

Delivered in 00.74.10 — maintenance & DX tooling

A tens-release on top of 00.74.00 (release notes):

  • JSentinelRuntime tooling API — summary() / toMap() / toJson() / healthCheck() (+ Health / HealthFinding / HealthStatus records, internal Jackson-free JSON encoder) to build /health endpoints without parsing logs.
  • Framework-feedback fixes in jSentinel-core: InitialAdminCreationResult.InternalError carries its cause; audit-sink failures in EmailVerificationService / PasswordResetService now WARN; PasswordPolicy.minLength() hint.
  • Ten demo-jsentinel-* modules + the matching Claude Code skills.

Delivered in 00.74.20 — Storage-Pair architecture

A tens-release on top of 00.74.10 (release notes):

  • JSentinelStorageFactory.openAt(...) → JSentinelStoragePair — opens the framework storage (audit, sessions, login attempts) and an app-owned Eclipse-Store manager under one parent directory, with a single two-phase shutdown (app first, framework always closed, addSuppressed discipline). New StorageLayout record; all @ExperimentalJSentinelApi.
  • 00.74.10 cleanup folded in — the HealthView admin demo, the JSentinelBootstrapInitListener.currentRuntime() accessor, and the coordinated demo-jsentinel-* pom bump.
  • Security hygiene — bcprov-jdk18on 1.78.1 → 1.84 (two Dependabot alerts, unused code paths) and the -javadoc.jar regression fix.

Notes

  • Every 00.74 public type ships @ExperimentalJSentinelApi; stable-API promotion is staged for 00.76.
  • No migration from 00.73 or within the 00.74 line.

Next

See the Roadmap — next up is v00.75.00 — Security Event Bus.

v00.73.00 — Deliveredv00.75.00 — Delivered