Stateless Authentication Model Reviewed. After some discussions we found better to remove the stereotype and provide a configuration API for PicketLink Base Module. From where you can enable the stateless behavior of the Identity bean.

Configuration API for the Base Module, encapsulating both IDM and Authentication configurations. You can now observe a SecurityConfigurationEvent and provide all them from a single place.

Security Tokens based on both JWT and JWS specifications. Ideal for people looking for a simple and flexible API to issue and validate JSON-based Security Tokens.

Built-in Security Annotations for Authorization. Now you can secure your beans and methods very easily and check for roles, groups, partitions, use EL-based expressions and check if the user is authenticated. Or even define your own security annotation and authorization logic!

PicketLink uber jar. This is a new artifact/dependency that packages the most common PicketLink modules and dependencies in a single JAR. So you don’t need to specify them separately in your project. Making a lot easier to configure the PicketLink dependencies.

Quickstarts were updated to use the new authorization features. Check them out !