Skip to content
Flag of Europe
Made in the European Union · Independently built · Released under EUPL 1.2
Documentation
Roadmap
v00.78.00 — Delivered

v00.78.00 — Delivered

✅ Delivered — on Maven Central. OIDC RP shipped in 00.78.00; the current published release is 00.79.41. See the release notes and Quick Start.

Theme

jSentinel-identity-oidc — the OpenID Connect identity layer on top of 00.76 (JWT validation) and 00.77 (OAuth2 flows). Where 00.77 just gets tokens, 00.78 brings identity: ID-tokens, discovery, UserInfo, logout and claims mapping.

Delivered

  • OIDC Discovery (.well-known/openid-configuration + RFC 8414) — endpoint auto-mapping, TTL cache, issuer-substitution defence.
  • ID-token validation beyond standard JWT — nonce (required, single-use, constant-time), azp (multi-audience), at_hash / c_hash (§3.1.3.6), auth_time / max_age and acr.
  • UserInfo client — Bearer GET, https-enforced, sub-match (§5.3.2).
  • RP-initiated logout — end_session_endpoint with id_token_hint.
  • Claims → Subject / Roles / Tenant mapping — pluggable SPIs; issuer-prefixed injective subject id.
  • @OidcAuthenticated — maps an insufficient acr to StepUpRequired, tying step-up to OIDC acr_values.

Modules

jSentinel-identity-oidc (RP core), jSentinel-identity-oidc-vaadin, jSentinel-identity-oidc-rest. Wired through the fluent .oidc(...) bootstrap; jSentinel-dx references only the JOSE-free oidc/api + oauth2/api core types.

Notes

  • Additive over 00.74–00.77 — three new opt-in modules.
  • All 00.78 public types shipped @ExperimentalJSentinelApi; the coordinated stable-API promotion landed in 00.79.00.

Next

See the Roadmap — next up is v00.79.00 — Identity Interop + Stable-API.

v00.77.00 — Deliveredv00.79.00 — Delivered