Version 2.7.3
2.7.3
- [java-security]
- Audience Validation is skipped when
client_id
of token matches the trusted client. This is relevant to support tokens of grant typeuser_token
that contains no scopes. - provides the subaccount identifier from the
ext_attr
claim.
- Audience Validation is skipped when
- [spring-xsuaa] provides the subaccount identifier from the
ext_attr
claim.