Release notes

v2.1.0 Release May 06, 2024

Update to the token issue and introspection functions to support limited, token-specific scopes.

v2.0.0 Release April 02, 2022

This major release reflects a complete code refresh and update from Java EE 8.x to to Jakarta EE 9.x. There are no functional changes.

v1.0.0 Release October 18, 2020

This is the first release of the Key Bridge Security Token Service (STS), which implements the OAuth 2.0 Token Exchange specification for automated machine-to-machine authentication and authorization.

In context of an STS, an Agent is a person or organization that configured a Client to access services on their behalf. The issues tokens to the Client that a Relying Party may use for authentication and authorization.

                                              +------------+
                               register >     |            |
                         +--------------------+    STS     |
                         |   < issue token    |            |
                         |                    +------------+
                         |
+------------+     +-----+------+   use token    +----------------+
|  Agent     +-----+  Client    | +------------> | Relying Party  |
+------------+     +------------+                +----------------+

This is a very brief overview. See the documentation and referenced specifications for a more extensive write-up.

Note: v1.0.0 was re-released 2021-01-11 with an improved UI. The version number was not updated as there were no functional changes.