Everything in CAP
Type
Domain: Security & Compliance
Origin
Signals
More: Apache-2.0
Group by: Capability
CAP integration with the SAP Audit Log service
CAP Java plugin sending audit log events to SAP Audit Log service
OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app
TechEd 2025 workshop on OWASP Top 10 risks in CAP applications
JWT authentication for CAP without xsuaa or xssec
Last released April 2022 at 0.0.2, and no repository is declared on the package.
Maps Microsoft Entra ID groups and app roles onto cds.User roles
Quiet Release and repository quiet for 25 months.
Functional boundary It performs no authentication flow of its own. The app must already be protected by Entra ID OAuth 2.0 at the App Service level; this only maps the resulting claims. It is explicitly not intended to run locally.
CAP microservice on XSUAA managing users and authorizations
OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app
CAP-based PWA for EV drivers proxying SAP E-Mobility OData APIs
TechEd 2025 workshop on OWASP Top 10 risks in CAP applications
Change history for annotated CAP entities
CAP integration with SAP Data Privacy Integration
Custom messages and handler classes for CAP input validation
Six CAP features in one package, from replication cache to rate limits
It is a bundle, not a plugin with one job. Depending on it for one feature brings the rest.
Rate-limit pattern for CAP Node.js applications
Last released January 2024 at 0.0.6. The repository the package declares has been deleted — verified against the GitHub API, not just a failed fetch. The package is still on npm, so it installs; the source it was published from is no longer readable, which is a harder thing to discover than a stale version number.