From a1076a0700914373a0b53f79c200a50b43cff28b Mon Sep 17 00:00:00 2001 From: Rujun Chen Date: Mon, 5 Jul 2021 08:50:53 +0800 Subject: [PATCH 1/3] Update release notes about required scopes in auth code flow. --- .../CHANGELOG.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md b/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md index 1b10153cb9d7..b06fdcb167fa 100644 --- a/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md +++ b/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md @@ -51,6 +51,11 @@ - Support creating `GrantedAuthority` by "roles" claim from id-token for web application. ## 3.2.0 (2021-03-03) +### Breaking Changes +- For the required scopes in auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) + + Now The requested scopes are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.Read.All`. You can Refer to `AADWebAppConfiguration.java` for detailed information. + ## 3.1.0 (2021-01-20) @@ -74,6 +79,7 @@ - Support for `AAD v1`, also named `Azure Active Directory`, endpoints in the form https://login.microsoft.online.com/common/oauth2/authorize has been removed. - `AAD v2`, also named `Microsoft Identity Platform`, endpoints in the form https://login.microsoftonline.com/common/oauth2/v2.0/authorize continue to be supported. - Please see [this documentation](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/azuread-dev/azure-ad-endpoint-comparison.md) for more information. +- The required scopes in auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. You can Refer to `AADWebAppConfiguration.java` for detailed information. ### New Features @@ -98,10 +104,13 @@ # Membership URI of Microsoft Graph API to get users' group information, default value is "https://graph.microsoft.com/v1.0/me/memberOf" azure.activedirectory.graph-membership-uri ``` + + ## 2.3.5 (2020-09-14) ### Key Bug Fixes - Get full list of groups the user belongs to from Graph API + ## 2.3.3 (2020-08-13) ### Key Bug Fixes - Address CVEs and cleaned up all warnings at build time. From bc21ab7f31aee4a9faff19404e7483f7cb2c2106 Mon Sep 17 00:00:00 2001 From: Rujun Chen Date: Wed, 7 Jul 2021 07:52:41 +0800 Subject: [PATCH 2/3] Update CHANGELOG.md. --- .../CHANGELOG.md | 12 +++---- .../azure-spring-boot-starter/CHANGELOG.md | 33 ++++++++++++++++++- sdk/spring/azure-spring-boot/CHANGELOG.md | 21 +++++++++++- 3 files changed, 58 insertions(+), 8 deletions(-) diff --git a/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md b/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md index b06fdcb167fa..a47678874336 100644 --- a/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md +++ b/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md @@ -39,6 +39,7 @@ - Fix issue that where the AAD B2C starter cannot fetch the OpenID Connect metadata document via issuer. [#21036](https://github.com/Azure/azure-sdk-for-java/issues/21036) - Deprecate *addB2CIssuer*, *addB2CUserFlowIssuers*, *createB2CUserFlowIssuer* methods in `AADTrustedIssuerRepository`. + ## 3.4.0 (2021-04-19) ### Key Bug Fixes - Fix bug that user-name-attribute cannot be configured. ([#20209](https://github.com/Azure/azure-sdk-for-java/issues/20209)) @@ -50,13 +51,12 @@ - Upgrade to `Spring Security` [5.4.5](https://github.com/spring-projects/spring-security/releases/tag/5.4.5). - Support creating `GrantedAuthority` by "roles" claim from id-token for web application. + ## 3.2.0 (2021-03-03) ### Breaking Changes - For the required scopes in auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) - - Now The requested scopes are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.Read.All`. You can Refer to `AADWebAppConfiguration.java` for detailed information. - - + Now The requested scopes are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.Read.All`. + You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.2.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L119) for detailed information. ## 3.1.0 (2021-01-20) @@ -79,8 +79,8 @@ - Support for `AAD v1`, also named `Azure Active Directory`, endpoints in the form https://login.microsoft.online.com/common/oauth2/authorize has been removed. - `AAD v2`, also named `Microsoft Identity Platform`, endpoints in the form https://login.microsoftonline.com/common/oauth2/v2.0/authorize continue to be supported. - Please see [this documentation](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/azuread-dev/azure-ad-endpoint-comparison.md) for more information. -- The required scopes in auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. You can Refer to `AADWebAppConfiguration.java` for detailed information. - +- The required scopes in auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. + You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.0.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L117) for detailed information. ### New Features - Support consent of multiple client registrations during user login. diff --git a/sdk/spring/azure-spring-boot-starter/CHANGELOG.md b/sdk/spring/azure-spring-boot-starter/CHANGELOG.md index 3c5f463eaa51..852936f4e1c4 100644 --- a/sdk/spring/azure-spring-boot-starter/CHANGELOG.md +++ b/sdk/spring/azure-spring-boot-starter/CHANGELOG.md @@ -7,6 +7,7 @@ ### New Features - Upgrade to [spring-boot-dependencies:2.5.0](https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-dependencies/2.5.0/spring-boot-dependencies-2.5.0.pom). + ## 3.5.0 (2021-05-24) ### New Features - Add `AADB2CTrustedIssuerRepository` to manage the trusted issuer in AAD B2C. @@ -30,6 +31,7 @@ - Fix issue that where the AAD B2C starter cannot fetch the OpenID Connect metadata document via issuer. [#21036](https://github.com/Azure/azure-sdk-for-java/issues/21036) - Deprecate *addB2CIssuer*, *addB2CUserFlowIssuers*, *createB2CUserFlowIssuer* methods in `AADTrustedIssuerRepository`. + ## 3.4.0 (2021-04-19) ### Key Bug Fixes - Fix bug of Keyvault refresh Timer task blocking application termination. ([#20014](https://github.com/Azure/azure-sdk-for-java/pull/20014)) @@ -40,7 +42,28 @@ ### New Features - Upgrade to `Spring Boot` [2.4.3](https://github.com/spring-projects/spring-boot/releases/tag/v2.4.3). + ## 3.2.0 (2021-03-03) +### Breaking Changes +- For the required scopes in auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) + Now The requested scopes are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.Read.All`. + You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.2.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L119) for detailed information. +- Remove `azure.activedirectory.b2c.oidc-enabled` property. +- Add `azure.activedirectory.b2c.login-flow` property. +- Change the type of `azure.activedirectory.b2c.user-flows` to map and below is the new structure: + ```yaml + azure: + activedirectory: + b2c: + login-flow: ${your-login-user-flow-key} # default to sign-up-or-sign-in, will look up the user-flows map with provided key. + user-flows: + ${your-user-flow-key}: ${your-user-flow-name-defined-on-azure-portal} + ``` +- Require new property of `spring.jms.servicebus.pricing-tier` to set pricing tier of Azure Service Bus. Supported values are `premium`, `standard` and `basic`. + +### New Features +- Enable MessageConverter bean customization. +- Update the underpinning JMS library for the Premium pricing tier of Service Bus to JMS 2.0. ## 3.1.0 (2021-01-20) @@ -61,7 +84,12 @@ azure.activedirectory.user-group.value azure.activedirectory.user-group.object-id-key ``` -- Stop support of Azure Active Directory Endpoints. +- Removed support for older `AAD v1` style endpoints. + - Support for `AAD v1`, also named `Azure Active Directory`, endpoints in the form https://login.microsoft.online.com/common/oauth2/authorize has been removed. + - `AAD v2`, also named `Microsoft Identity Platform`, endpoints in the form https://login.microsoftonline.com/common/oauth2/v2.0/authorize continue to be supported. + - Please see [this documentation](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/azuread-dev/azure-ad-endpoint-comparison.md) for more information. +- The required scopes in auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. + You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.0.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L117) for detailed information. ### New Features - Support consent of multiple client registrations during user login. @@ -90,14 +118,17 @@ ### Breaking Changes - Change group id from `com.microsoft.azure` to `com.azure.spring`. + ## 2.3.5 (2020-09-14) ### Breaking Changes - Unify spring-boot-starter version + ## 2.3.4 (2020-08-20) ### Key Bug Fixes - Replace underpinning JMS library for Service Bus of Service Bus JMS Starter to Apache Qpid to support all tiers of Service Bus. + ## 2.3.3 (2020-08-13) ### New Features - Support connection to multiple Key Vault from a single application configuration file diff --git a/sdk/spring/azure-spring-boot/CHANGELOG.md b/sdk/spring/azure-spring-boot/CHANGELOG.md index fc4618a7449b..7bf3fce4ab87 100644 --- a/sdk/spring/azure-spring-boot/CHANGELOG.md +++ b/sdk/spring/azure-spring-boot/CHANGELOG.md @@ -14,6 +14,7 @@ - "aad.group.allowed-group-ids=all" can be used to map all group ids to GrantedAuthority (ROLE_group_id). And it can work together with group names configured by "aad.group.allowed-group-names" (ROLE_group_name).[#21983](https://github.com/Azure/azure-sdk-for-java/issues/21983) + ## 3.5.0 (2021-05-24) ### New Features - Add `AADB2CTrustedIssuerRepository` to manage the trusted issuer in AAD B2C. @@ -37,11 +38,13 @@ - Fix issue that where the AAD B2C starter cannot fetch the OpenID Connect metadata document via issuer. [#21036](https://github.com/Azure/azure-sdk-for-java/issues/21036) - Deprecate *addB2CIssuer*, *addB2CUserFlowIssuers*, *createB2CUserFlowIssuer* methods in `AADTrustedIssuerRepository`. + ## 3.4.0 (2021-04-19) ### Key Bug Fixes - Fix bug of Keyvault refresh Timer task blocking application termination. ([#20014](https://github.com/Azure/azure-sdk-for-java/pull/20014)) - Fix bug that user-name-attribute cannot be configured. ([#20209](https://github.com/Azure/azure-sdk-for-java/issues/20209)) + ## 3.3.0 (2021-03-22) ### New Features Updated to `Spring Boot` [2.4.3](https://github.com/spring-projects/spring-boot/releases/tag/v2.4.3). @@ -52,8 +55,12 @@ Updated to `Spring Boot` [2.4.3](https://github.com/spring-projects/spring-boot/ ### New Features - Support creating `GrantedAuthority` by "roles" claim of id-token for web application in azure-spring-boot-starter-active-directory. + ## 3.2.0 (2021-03-03) ### Breaking Changes +- For the required scopes in auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) + Now The requested scopes are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.Read.All`. + You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.2.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L119) for detailed information. - Remove `azure.activedirectory.b2c.oidc-enabled` property. - Add `azure.activedirectory.b2c.login-flow` property. - Change the type of `azure.activedirectory.b2c.user-flows` to map and below is the new structure: @@ -70,11 +77,13 @@ Updated to `Spring Boot` [2.4.3](https://github.com/spring-projects/spring-boot/ - Enable MessageConverter bean customization. - Update the underpinning JMS library for the Premium pricing tier of Service Bus to JMS 2.0. + ## 3.1.0 (2021-01-20) ### Breaking Changes - Exposed `userNameAttributeName` to configure the user's name. - Deprecated `tenant` configuration item, add `base-uri` item to support multi-cloud environments. + ## 3.0.0 (2020-12-30) ### Breaking Changes - Deprecate `AADAppRoleStatelessAuthenticationFilter` and `AADAuthenticationFilter`. @@ -88,7 +97,12 @@ Updated to `Spring Boot` [2.4.3](https://github.com/spring-projects/spring-boot/ azure.activedirectory.user-group.value azure.activedirectory.user-group.object-id-key ``` -- Stop support of Azure Active Directory Endpoints. +- Removed support for older `AAD v1` style endpoints. + - Support for `AAD v1`, also named `Azure Active Directory`, endpoints in the form https://login.microsoft.online.com/common/oauth2/authorize has been removed. + - `AAD v2`, also named `Microsoft Identity Platform`, endpoints in the form https://login.microsoftonline.com/common/oauth2/v2.0/authorize continue to be supported. + - Please see [this documentation](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/azuread-dev/azure-ad-endpoint-comparison.md) for more information. +- The required scopes in auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. + You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.0.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L117) for detailed information. ### New Features - Support consent of multiple client registrations during user login. @@ -112,21 +126,26 @@ Updated to `Spring Boot` [2.4.3](https://github.com/spring-projects/spring-boot/ # Membership URI of Microsoft Graph API to get users' group information, default value is "https://graph.microsoft.com/v1.0/me/memberOf" azure.activedirectory.graph-membership-uri ``` + + ## 3.0.0-beta.1 (2020-11-18) ### Breaking Changes - Update `com.azure` group id to `com.azure.spring`. - Deprecated azure-spring-boot-metrics-starter. - Change group id from `com.microsoft.azure` to `com.azure.spring`. + ## 2.3.5 (2020-09-14) ### Key Bug Fixes - Get full list of groups the user belongs to from Graph API - Exclude disabled secrets when getting Key Vault secrets + ## 2.3.4 (2020-08-20) ### Key Bug Fixes - Replace underpinning JMS library for Service Bus of Service Bus JMS Starter to Apache Qpid to support all tiers of Service Bus. + ## 2.3.3 (2020-08-13) ### New Features - Support connection to multiple Key Vault from a single application configuration file From 6753e21c56701015871dc0d77934031c844bdc7c Mon Sep 17 00:00:00 2001 From: Rujun Chen Date: Wed, 7 Jul 2021 10:17:46 +0800 Subject: [PATCH 3/3] Change "auth code flow" to "AAD auth code flow" in changelog. --- .../azure-spring-boot-starter-active-directory/CHANGELOG.md | 4 ++-- sdk/spring/azure-spring-boot-starter/CHANGELOG.md | 4 ++-- sdk/spring/azure-spring-boot/CHANGELOG.md | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md b/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md index a47678874336..1bbe6f4a771d 100644 --- a/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md +++ b/sdk/spring/azure-spring-boot-starter-active-directory/CHANGELOG.md @@ -54,7 +54,7 @@ ## 3.2.0 (2021-03-03) ### Breaking Changes -- For the required scopes in auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) +- For the required scopes in AAD auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) Now The requested scopes are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.Read.All`. You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.2.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L119) for detailed information. @@ -79,7 +79,7 @@ - Support for `AAD v1`, also named `Azure Active Directory`, endpoints in the form https://login.microsoft.online.com/common/oauth2/authorize has been removed. - `AAD v2`, also named `Microsoft Identity Platform`, endpoints in the form https://login.microsoftonline.com/common/oauth2/v2.0/authorize continue to be supported. - Please see [this documentation](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/azuread-dev/azure-ad-endpoint-comparison.md) for more information. -- The required scopes in auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. +- The required scopes in AAD auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.0.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L117) for detailed information. ### New Features diff --git a/sdk/spring/azure-spring-boot-starter/CHANGELOG.md b/sdk/spring/azure-spring-boot-starter/CHANGELOG.md index 852936f4e1c4..ead7c9c8afd2 100644 --- a/sdk/spring/azure-spring-boot-starter/CHANGELOG.md +++ b/sdk/spring/azure-spring-boot-starter/CHANGELOG.md @@ -45,7 +45,7 @@ ## 3.2.0 (2021-03-03) ### Breaking Changes -- For the required scopes in auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) +- For the required scopes in AAD auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) Now The requested scopes are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.Read.All`. You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.2.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L119) for detailed information. - Remove `azure.activedirectory.b2c.oidc-enabled` property. @@ -88,7 +88,7 @@ - Support for `AAD v1`, also named `Azure Active Directory`, endpoints in the form https://login.microsoft.online.com/common/oauth2/authorize has been removed. - `AAD v2`, also named `Microsoft Identity Platform`, endpoints in the form https://login.microsoftonline.com/common/oauth2/v2.0/authorize continue to be supported. - Please see [this documentation](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/azuread-dev/azure-ad-endpoint-comparison.md) for more information. -- The required scopes in auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. +- The required scopes in AAD auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.0.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L117) for detailed information. ### New Features diff --git a/sdk/spring/azure-spring-boot/CHANGELOG.md b/sdk/spring/azure-spring-boot/CHANGELOG.md index 7bf3fce4ab87..bd484daf2515 100644 --- a/sdk/spring/azure-spring-boot/CHANGELOG.md +++ b/sdk/spring/azure-spring-boot/CHANGELOG.md @@ -58,7 +58,7 @@ Updated to `Spring Boot` [2.4.3](https://github.com/spring-projects/spring-boot/ ## 3.2.0 (2021-03-03) ### Breaking Changes -- For the required scopes in auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) +- For the required scopes in AAD auth code flow, use `Directory.Read.All` instead of `Directory.AccessAsUser.All`. ([#18901](https://github.com/Azure/azure-sdk-for-java/pull/18901)) Now The requested scopes are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.Read.All`. You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.2.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L119) for detailed information. - Remove `azure.activedirectory.b2c.oidc-enabled` property. @@ -101,7 +101,7 @@ Updated to `Spring Boot` [2.4.3](https://github.com/spring-projects/spring-boot/ - Support for `AAD v1`, also named `Azure Active Directory`, endpoints in the form https://login.microsoft.online.com/common/oauth2/authorize has been removed. - `AAD v2`, also named `Microsoft Identity Platform`, endpoints in the form https://login.microsoftonline.com/common/oauth2/v2.0/authorize continue to be supported. - Please see [this documentation](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/active-directory/azuread-dev/azure-ad-endpoint-comparison.md) for more information. -- The required scopes in auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. +- The required scopes in AAD auth code flow are: `openid`, `profile`, `offline_access`, `User.Read`, `Directory.AccessAsUser.All`. You can Refer to [AADWebAppConfiguration.java](https://github.com/Azure/azure-sdk-for-java/blob/azure-spring-boot_3.0.0/sdk/spring/azure-spring-boot/src/main/java/com/azure/spring/aad/webapp/AADWebAppConfiguration.java#L117) for detailed information. ### New Features