List view
- Due by August 25, 2026•0/3 issues closed
Optimize no longer depends on Management Identity for OIDC token issuance or user/role storage. The library owns IdP integration end to end for Optimize.
Due by December 17, 2026•0/2 issues closedTarget: 8.11. Hub no longer depends on Management Identity for OIDC token issuance or user/role storage. The library owns IdP integration end to end for Hub.
Due by December 17, 2026•0/11 issues closedAuthorization checks for Optimize endpoints are evaluated through the library, using the same AuthorizationService and scope resolution as OC and Hub.
Due by November 24, 2026•0/3 issues closedOptimize mounts the library-supplied admin pages and manages identity and authorization configuration through them.
Due by November 24, 2026•0/1 issues closedAuthorization checks for Hub endpoints are evaluated through the library, using the same AuthorizationService and scope resolution as OC.
Due by October 27, 2026•0/6 issues closedHub mounts the library-supplied admin pages and manages identity and authorization configuration through them.
Due by October 27, 2026•0/1 issues closedOptimize adopts a new library-owned stateless JWT-cookie webapp chain, generic over its three deployment modes (CCSM, CCSaaS, Auth0). Optimize's deployment-specific Spring Security adapters are deleted; IdP behaviour plugs in via SPIs. Optimize's end-user authentication behaviour is unchanged.
Due by June 30, 2026•0/6 issues closedHub adopts the library-owned authentication filter chain via @Import and host-supplied SPI implementations. Hub's end-user authentication behaviour is unchanged.
Due by June 30, 2026•5/30 issues closedAuthorization checks for OC engine-layer operations (process/decision commands) are evaluated through the library. OC's engine-side authorization code is deleted.
Due by July 28, 2026•4/5 issues closedAuthorization checks for OC search-layer endpoints (resource queries, list/read operations) are evaluated through the library. OC's search-side authorization code is deleted.
Due by July 28, 2026•9/12 issues closedThe library owns the Spring Security filter chain for authentication. OC consumes the library chain via @Import and host-supplied SPI implementations. OC's end-user authentication behaviour is unchanged.
Due by June 30, 2026•26/30 issues closed