From 5f3fac56cea636db2855fc84beaaebfa3e7f6f54 Mon Sep 17 00:00:00 2001 From: Devon Hillard Date: Fri, 21 Aug 2026 19:20:04 -0600 Subject: [PATCH] chore: upgrade Spring User Framework to 5.3.4 5.3.4 fixes concurrent passwordless-registration deadlocks and aligns the passkey enrollment freshness denial to HTTP 401 + step-up-required (library #371), which the demo's webauthn-register.js (updated in #91) and chromium-step-up E2E now handle. Claude-Session: https://claude.ai/code/session_01KL5qvKVGQLLQDjHToy34vj --- build.gradle | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/build.gradle b/build.gradle index 6886405..df8fdf5 100644 --- a/build.gradle +++ b/build.gradle @@ -39,8 +39,9 @@ repositories { dependencies { // DigitalSanctuary Spring User Framework - // 5.3.3 adds the WebAuthn step-up primitive (SUF-02, library #365) this demo exercises. - implementation 'com.digitalsanctuary:ds-spring-user-framework:5.3.3' + // 5.3.4 aligns the passkey enrollment freshness denial to HTTP 401 + step-up-required (library #371), + // which this demo's webauthn-register.js and step-up E2E exercise; 5.3.3 added the step-up primitive. + implementation 'com.digitalsanctuary:ds-spring-user-framework:5.3.4' // WebAuthn support (Passkey authentication) implementation 'org.springframework.security:spring-security-webauthn'