Skip to content

Upgrade to Spring Boot 4#161

Merged
vpaturet merged 1 commit into
mainfrom
worktree-spring-boot-4
Jul 2, 2026
Merged

Upgrade to Spring Boot 4#161
vpaturet merged 1 commit into
mainfrom
worktree-spring-boot-4

Conversation

@vpaturet

@vpaturet vpaturet commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Upgrades nuska to Spring Boot 4, following the same approach as nabu#632.

Version bumps

  • superpom 5.6.06.5.0 — brings Spring Boot 4.0.6, Spring Framework 7, Spring Security 7
  • entur.helpers 5.50.07.2.0

Code changes

  • NuskaApplication / AuthorizationConfig / NuskaApplicationTests — relocate auto-configuration imports to their new Boot 4 packages (boot.security.autoconfigure, boot.security.oauth2.client.autoconfigure)
  • WebClientConfig (new) — provide the WebClient.Builder / ClientHttpConnector beans Boot 4 no longer auto-configures, used by the baba role-assignment extractor path
  • OAuth2Config + removed NuskaMultiIssuerAuthenticationManagerResolverentur.helpers 7.2.0 dropped the old constructor and the base MultiIssuerAuthenticationManagerResolver now performs issuer+audience JWT validation natively, so the custom subclass is replaced with MultiIssuerAuthenticationManagerResolverBuilder (same pattern nabu adopted), configuring both the internal and partner Auth0 issuers/audiences

NuskaWebSecurityConfiguration already used plain-string requestMatchers(...), so no Spring Security 7 change was needed there. nuska has no Flyway/FreeMarker/TestRestTemplate usage, so those nabu-specific dependency additions don't apply.

Verification

  • mvn clean verifyBUILD SUCCESS, 7 tests, 0 failures, 0 errors, on Spring Boot 4.0.6

Upgrades nuska to Spring Boot 4, following the same approach as
nabu#632.

Version bumps:
- superpom 5.6.0 -> 6.5.0 (Spring Boot 4.0.6, Spring Framework 7,
  Spring Security 7)
- entur.helpers 5.50.0 -> 7.2.0

Code changes:
- NuskaApplication / AuthorizationConfig / NuskaApplicationTests:
  relocate auto-configuration imports to their new Spring Boot 4
  packages (boot.security.autoconfigure, boot.security.oauth2.client.autoconfigure)
- WebClientConfig (new): provide the WebClient.Builder / ClientHttpConnector
  beans Boot 4 no longer auto-configures, used by the baba role-assignment
  extractor path
- OAuth2Config + remove NuskaMultiIssuerAuthenticationManagerResolver:
  helpers 7.2.0 dropped the old constructor and now performs issuer+audience
  JWT validation natively, so the custom subclass is replaced with
  MultiIssuerAuthenticationManagerResolverBuilder
@sonarqubecloud

sonarqubecloud Bot commented Jul 2, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
0.0% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

@vpaturet
vpaturet merged commit 566b0cf into main Jul 2, 2026
14 of 15 checks passed
@vpaturet
vpaturet deleted the worktree-spring-boot-4 branch July 2, 2026 10:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant