{"ref":"artifact:cap-java-cds-feature-identity","page":"/artifacts/cap-java-cds-feature-identity","json":"/artifacts/cap-java-cds-feature-identity.json","generated":"2026-10-26","drafted_with_ai":true,"entity":{"id":"cap-java-cds-feature-identity","name":"com.sap.cds:cds-feature-identity","artifact_type":"package","ecosystem":"cap","domain":"security-and-compliance","origin_ring":"sap-official","description":{"one_line":"The CAP Java feature that validates OAuth2 tokens from XSUAA and SAP [Cloud Identity Services](artifact:btp-cloud-identity-services) and builds the request's security context from them.","short":"OAuth2 token validation from XSUAA and SAP Cloud Identity Services","what_it_solves":"Adds authentication to a CAP Java application built on [com.sap.cds:cds-services-bom](artifact:cap-java-cds-services-bom): with this dependency, `org.springframework.boot:spring-boot-starter-security` and the SAP BTP Spring Security Client on the classpath, and a bound XSUAA or [Cloud Identity Services](artifact:btp-cloud-identity-services) instance at runtime, the CAP Java SDK activates a Spring Security configuration that enforces authentication on every endpoint automatically. Additionally, the application must be bound to corresponding service instances depending on the scenario: XSUAA only, IAS only, or both from the same application. It stops at the token and the caller it resolves; what an authenticated caller may then do is [authorization](capability:authorization), configured separately. It is what capire now names in place of [com.sap.cds:cds-feature-xsuaa](artifact:cap-java-cds-feature-xsuaa), removed in CAP Java 3.0."},"links":{"homepage":"https://central.sonatype.com/artifact/com.sap.cds/cds-feature-identity","docs":"https://cap.cloud.sap/docs/java/security"},"identity":{"license":"SAP DEVELOPER LICENSE AGREEMENT for CAP"},"source_available":false,"compat":{"runtimes":["java"]},"flavors":[{"key":"java","source":{"url":"https://cap.cloud.sap/docs/java/developing-applications/building#standard-modules","title":"Building Applications — capire","checked":"2026-09-19","quote":"CAP Java comes with a rich set of prepared modules for all different layers of the stack:"}}],"drafted_with_ai":true,"provides":[{"capability":"capability:authentication","what_it_does":"Activates a Spring Security configuration that enforces authentication on every endpoint once the required libraries are on the classpath and an XSUAA or [Cloud Identity Services](artifact:btp-cloud-identity-services) instance is bound; accepts either, or both from the same application.","sources":[{"url":"https://repo1.maven.org/maven2/com/sap/cds/cds-feature-identity/5.1.1/cds-feature-identity-5.1.1.pom","title":"com.sap.cds:cds-feature-identity — Maven POM","checked":"2026-09-19","quote":"API implementation to handle oauth2 tokens (IAS or XSUAA)"},{"url":"https://cap.cloud.sap/docs/java/security#bindings","title":"Security — capire","checked":"2026-09-19","quote":"Additionally, your application must be bound to corresponding service instances depending on your scenario."}]}],"requires":["artifact:btp-authorization-and-trust-management","artifact:btp-cloud-identity-services"],"history":[{"date":"2026-09-19","field":"provides.what_it_does","from":null,"to":"Activates a Spring Security configuration that enforces authentication on every endpoint once the required libraries are on the classpath and an XSUAA or Cloud Identity Services instance is bound; accepts either, or both from the same application.","reason":"New CAP Java provider discovered through official CAP documentation and its Maven POM. Facts describe capire's stated behaviour, not verified deployment compatibility."}],"provenance":{"discovered_via":[{"source":"source:curator"}],"first_seen":"2026-09-19"}},"effective_normative_relations":[],"readings":{"liveness":[{"label":"Maintenance","tier":"unknown","evidence":"no release data"},{"label":"Continuity","tier":"unknown","evidence":"no contributor data"},{"label":"Repository","tier":"unknown","evidence":"no repository data"}],"compatibility":[{"label":"Declared for","tier":"fair","evidence":"nothing declared"},{"label":"Survived majors","tier":"unknown","evidence":"no release dates"},{"label":"Maintainer's CI","tier":"unknown","evidence":"no repository data"}],"practice":[{"label":"Tests","tier":"unknown","evidence":"not crawled"},{"label":"Docs","tier":"unknown","evidence":"docs link declared, tree not read"},{"label":"Changelog","tier":"unknown","evidence":"not crawled"}],"reach":[{"value":null,"unit":"installs/week"},{"value":null,"unit":"watching"}]},"signals":{"crawled_at":"2026-10-24","npm":"not published under this name"},"edges":{"maintainers":[],"contributors":[],"explained_by":[],"alternative_to_this":[],"needed_by":[],"available_via":[],"parts":[],"add_ons":[],"answered_through_parts":[]}}