Skip to content

Conversation

@petruki
Copy link
Member

@petruki petruki commented Aug 28, 2025

This pull request updates dependencies and improves the OpenAPI configuration for JWT authentication. The main focus is on aligning the OpenAPI security scheme with best practices and hiding sensitive header parameters from API documentation.

Dependency updates:

  • Upgraded Spring Boot to version 3.5.5 in pom.xml
  • Updated jsonwebtoken to 0.13.0 and springdoc to 2.8.11 in pom.xml

OpenAPI and API documentation improvements:

  • Changed the OpenAPI security scheme in OpenAPIConfiguration.java to use bearer as the scheme, explicitly set the bearer format to JWT, and removed the custom scheme naming to better align with standard JWT authentication practices [1] [2]
  • Added @Parameter(hidden = true) to the Authorization header in AdminController.java for the gitHubRefreshAuth and logout endpoints, so the header is hidden from generated API docs [1] [2]
@petruki petruki added this to the v2.0.1 milestone Aug 28, 2025
@petruki petruki self-assigned this Aug 28, 2025
@petruki petruki merged commit f57c8f5 into master Aug 28, 2025
5 checks passed
@petruki petruki deleted the staging branch August 28, 2025 02:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants