BrowseSAP Cloud Application Programming Model

Everything in CAP

Type
Domain: Security & Compliance
Origin: SAP official
Signals
Liveness reads the latest release, push or commit. Coverage is the capability's, as assessed behind this door.
More
Ecosystem
Runs
Licence
Group by: Capability
Domain Security & ComplianceOrigin SAP officialClear all
EntrySignals
Audit logging7SAP only
Artifacts5
@cap-js/audit-loggingv1.3.0

CAP integration with the SAP Audit Log service

none
com.sap.cds:cds-feature-auditlog-ng

CAP Java plugin sending audit log events to SAP Audit Log service

none
com.sap.cds:cds-feature-auditlog-v2

CAP Java handler for SAP Audit Log service API version 2

none
com.sap.cds:cds-services-bom

Maven bill of materials pinning CAP Java module versions

none
SAP Audit Log service

Ingests and retains compliance audit data from BTP

none
Seen working, example artifacts2
SAP-samples/btp-secure-development

OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app

none
teched2025-XP260

TechEd 2025 workshop on OWASP Top 10 risks in CAP applications

none
Authentication6SAP and community
@sap/cdsv10.2.1

CAP Node.js runtime

none
@sap/xssecv4.15.0

Token validation and security context for XSUAA and IAS

none
Cloud Identity Services

Identity Authentication and Identity Provisioning as one tenant

none
com.sap.cds:cds-feature-identity

OAuth2 token validation from XSUAA and SAP Cloud Identity Services

none
com.sap.cds:cds-feature-xsuaa

Former XSUAA JWT validation for CAP Java, removed in CAP Java 3.0

none
SAP Authorization and Trust Management service

OAuth server issuing JWTs and holding scopes for BTP apps

none
Authorization9SAP and community
Artifacts5
@sap/amsv3.10.0

Authorization from DCL policies for Node.js apps on SAP Cloud Identity

none
@sap/ams-devv3.0.2

Compiler from AMS DCL policies to DCN for local runs and tests

Functional boundary
@sap/cdsv10.2.1

CAP Node.js runtime

none
com.sap.cds:cds-services-bom

Maven bill of materials pinning CAP Java module versions

none
SAP Authorization and Trust Management service

OAuth server issuing JWTs and holding scopes for BTP apps

none
Seen working, example artifacts4
btp-user-management-microservice

CAP microservice on XSUAA managing users and authorizations

none
SAP-samples/btp-secure-development

OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app

none
SAP-samples/e-mobility-driver-app

CAP-based PWA for EV drivers proxying SAP E-Mobility OData APIs

none
teched2025-XP260

TechEd 2025 workshop on OWASP Top 10 risks in CAP applications

none
Change tracking2SAP and community
@cap-js/change-trackingv2.2.3

Change history for annotated CAP entities

none
com.sap.cds:cds-feature-change-tracking

Change log of annotated entity fields for CAP Java

none
Data privacy2SAP only
@cap-js/data-privacyv0.6.3

CAP integration with SAP Data Privacy Integration

none
@sap/cdsv10.2.1

CAP Node.js runtime

none
Input validation2SAP and community
@sap/cdsv10.2.1

CAP Node.js runtime

none
com.sap.cds:cds-services-bom

Maven bill of materials pinning CAP Java module versions

none
SAP Malware Scanning service

Scans uploaded files over REST with ClamAV

none
Rate limiting1SAP and community
API Management

API proxies with security and traffic policies and Developer Hub

none
SAP Credential Store

Vault for an application's passwords, keys and keyrings

none