{"ref":"artifact:cap-java-cds-feature-xsuaa","page":"/artifacts/cap-java-cds-feature-xsuaa","json":"/artifacts/cap-java-cds-feature-xsuaa.json","generated":"2026-10-26","drafted_with_ai":true,"entity":{"id":"cap-java-cds-feature-xsuaa","name":"com.sap.cds:cds-feature-xsuaa","artifact_type":"package","ecosystem":"cap","domain":"security-and-compliance","origin_ring":"sap-official","description":{"one_line":"The CAP Java feature that validated XSUAA-issued JWTs, published up to 2.10.7 before CAP Java 3.0 removed it in favour of com.sap.cds:cds-feature-identity.","short":"Former XSUAA JWT validation for CAP Java, removed in CAP Java 3.0","what_it_solves":"Validated XSUAA-issued OAuth2 tokens and built the security context for a CAP Java application built on [com.sap.cds:cds-services-bom](artifact:cap-java-cds-services-bom), as its own Maven POM described it: an API implementation to handle OAuth2 tokens (JWT) in XSUAA format. Capire's migration guide records it as a removed feature: support for XSUAA and IAS was unified under [com.sap.cds:cds-feature-identity](artifact:cap-java-cds-feature-identity) with the CAP Java 3.0 release. Its last published version was 2.10.7, on 2025-02-20. Applications relying on the standard security configuration and one of the CAP starter bundles were not expected to need code changes to move across; a customised security configuration had to adapt to SAP's spring-security library instead."},"links":{"homepage":"https://central.sonatype.com/artifact/com.sap.cds/cds-feature-xsuaa","docs":"https://cap.cloud.sap/docs/java/migration#two-to-three"},"identity":{"license":"SAP DEVELOPER LICENSE AGREEMENT"},"source_available":false,"compat":{"runtimes":["java"]},"flavors":[{"key":"java","source":{"url":"https://cap.cloud.sap/docs/java/migration#two-to-three","title":"Migration Guides — capire","checked":"2026-09-19","quote":"If your application relies on the standard security configuration by CAP Java and depend on one of the CAP starter bundles, it is expected that you won't need to adapt code."}}],"drafted_with_ai":true,"provides":[{"capability":"capability:authentication","what_it_does":"Validated XSUAA-issued JWTs and built the security context for a CAP Java application before CAP Java 3.0 removed it; applications on the standard security configuration and a CAP starter bundle needed no code changes to move to its replacement.","sources":[{"url":"https://repo1.maven.org/maven2/com/sap/cds/cds-feature-xsuaa/2.10.7/cds-feature-xsuaa-2.10.7.pom","title":"com.sap.cds:cds-feature-xsuaa — Maven POM","checked":"2026-09-19","quote":"API implementation to handle oauth2 tokens (JWT) in XSUAA format"},{"url":"https://cap.cloud.sap/docs/java/migration#two-to-three","title":"Migration Guides — capire","checked":"2026-09-19","quote":"If your application relies on the standard security configuration by CAP Java and depend on one of the CAP starter bundles, it is expected that you won't need to adapt code."}]}],"history":[{"date":"2026-09-19","field":"provides.what_it_does","from":null,"to":"Validated XSUAA-issued JWTs and built the security context for a CAP Java application before CAP Java 3.0 removed it; applications on the standard security configuration and a CAP starter bundle needed no code changes to move to its replacement.","reason":"Removed CAP Java module documented for historical completeness: capire's migration guide records its removal in CAP Java 3.0 and its replacement by cds-feature-identity. Last published version taken from the Maven Central listing supplied for this batch, not independently re-verified."}],"provenance":{"discovered_via":[{"source":"source:curator"}],"first_seen":"2026-09-19"}},"effective_normative_relations":[],"readings":{"liveness":[{"label":"Maintenance","tier":"unknown","evidence":"no release data"},{"label":"Continuity","tier":"unknown","evidence":"no contributor data"},{"label":"Repository","tier":"unknown","evidence":"no repository data"}],"compatibility":[{"label":"Declared for","tier":"fair","evidence":"nothing declared"},{"label":"Survived majors","tier":"unknown","evidence":"no release dates"},{"label":"Maintainer's CI","tier":"unknown","evidence":"no repository data"}],"practice":[{"label":"Tests","tier":"unknown","evidence":"not crawled"},{"label":"Docs","tier":"unknown","evidence":"docs link declared, tree not read"},{"label":"Changelog","tier":"unknown","evidence":"not crawled"}],"reach":[{"value":null,"unit":"installs/week"},{"value":null,"unit":"watching"}]},"signals":{"crawled_at":"2026-10-24","npm":"not published under this name"},"edges":{"maintainers":[],"contributors":[],"explained_by":[],"alternative_to_this":[],"needed_by":[],"available_via":[],"parts":[],"add_ons":[],"answered_through_parts":[]}}