Skip to content
Flag of Europe
Made in the European Union · Independently built · Released under EUPL 1.2
Documentation
Roadmap
v00.73.00 — Delivered

v00.73.00 — Delivered

✅ Delivered in 00.73.00 — the latest release on Maven Central. It completes the fluent-bootstrap surface and rebrands the project to jSentinel. A breaking release (coordinate/package/type renames + three STRICT-mode promotions). See the 00.73.00 release notes and Quick Start.

Theme

V00.72 shipped the developer-experience layer but left two pieces recorded-only: the fluent sub-builders didn’t yet wire through to the runtime, and the compile-time wrapper index had a reader but no writer. V00.73 closes those carve-outs so the typed bootstrap is production-real — and takes the opportunity to complete the long-planned rebrand to the jSentinel name in the same breaking step (so consumers absorb one migration, not two).

Delivered — fluent-bootstrap completion

AreaWhat shipped
Sub-builder wiring.audit / .sessions / .policies / .roles / .credentials become real typed surfaces, wired through JSentinelServiceResolver + adapter/DX state — across Vaadin, REST and Standalone.
Wrapper-index writerjSentinel-processor emits META-INF/jsentinel/generated-wrappers.idx; JSentinelDiagnostics.inspect() shows every compile-time wrapper.
Policy-aware SecuredUiSecuredUi.requiresPolicy(...) evaluates the registered policy via PolicyRegistry (was a build-time UnsupportedOperationException).
Policy-aware @SecureRoute@SecureRoute(policy="…") evaluates the policy and maps Allowed / Denied / StepUpRequired (was deny-by-default).
SecureRouteDiscovery SPIOpt-in deterministic STRICT cross-validation of @SecureRoute(policy) against .policies(...). Off by default.

Delivered — the jSentinel rebrand

All project-owned coordinates, the Java package root, and 29 Security* service types move to the jSentinel namespace; the wrapper-index path and @JSentinelAutoService / @ExperimentalJSentinelApi move with them. Suffix classes (SecuredProxy, @Secured, VaadinSecurity, SecuredUi, …) are intentionally kept. Full mapping and the one-minute migration are in the release notes.

Breaking

  • Renames — no compatibility shim; update dependencies + imports.
  • STRICT promotions — secure-route/unknown-policy, session-management-view-without-session-store, and security-version-without-subject-id-resolver now throw JSentinelBootstrapException in mode(STRICT). Non-STRICT modes are unchanged.

Next

See the Roadmap for what’s planned beyond 00.73 — v00.80.00 — High-Security & Identity (MFA / WebAuthn / OIDC).

v00.72.00 — Deliveredv00.74.00 — Delivered