Releases · mkurz/deadbolt-2-java

Highlights

Constraint modes
New config deadbolt.java.constraint-mode can be PROCESS_FIRST_CONSTRAINT_ONLY (the default, backward compatible), AND (all constraint annotations of the current action composition chain have to be successful) or OR (only one constraint annotation of the current action composition chain has to be successful) See tests added in #83 for examples
@Pattern: added mode attribute (can be AND or OR) + value attribute takes an array now
For examples see #88
Constraint annotations are now @Repeatable
Important: Requires (at least) Play version 2.6.11!
For examples see #70

Caching improvements: Allow caching of multiple subjects per request, see #48
Faster! Removed reflection calls. This may effects you if you have high load/a lot of traffic. See #62
New config deadbolt.java.cache-before-auth-check=[true | false (default) ]
Caches the result of deadboltHandler.beforeAuthCheck(...) for the current request (similar to deadbolt.java.cache-user). Also see #48 (comment) and #51
DeadboltHandler.beforeAuthCheck(...) has been overloaded to also pass Optional<String> content. The original method has been deprecated and will be remove in deadbolt 2.7. See #64
Finished removal of ExecutionContextProvider functionality
It still exists but does nothing. => No thread switching in deadbolt anymore!
ExecutionContextProvider will be removed in deadbolt 2.7.
@Deferrable is not needed anymore, it has been deprecated and you can safely remove it.
Bugfix: Action call order was wrong when deferring, see #60
@DeferredDeadbolt now also has the content and handlerKey attributes, see #68

...and maybe some smaller bug fixes I can't remember now 😉

Also check our documentation tracking ticket where you can see what was added and/or fixed but hasn't been updated in the documentation yet.