Version 5.x of pac4j is now required. JDK 11 is required too.

The multiProfile and saveInSession options are now removed from the filters/routes and handled at the Client level.

The pac4j-javaee artifact is pulled instead of the pac4j-core artifact: JEE components are now in the org.pac4j.jee package.

Version 4.x of pac4j is now required.

The DefaultHttpActionAdapter has been renamed as SparkHttpActionAdapter and a default instance is available via SparkHttpActionAdapter.INSTANCE.

Version 3.x of pac4j is now required.

Version 2.x of pac4j is now required.

The ApplicationLogoutRoute has been renamed as LogoutRoute with more options.

Use context.getSparkResponse().body() instead of context.getBody().

The RequiresAuthenticationFilter is now named SecurityFilter.

The ApplicationLogoutRoute behaviour has slightly changed: even without any url request parameter, the user will be redirected to the defaultUrl if it has been defined.

Authorizations are now handled by the library so the ClientFactory can now longer be used and is replaced by a ConfigFactory which builds a Config which gathers clients (for authentication) and authorizers (for authorizations).

The application logout process can be managed with the ApplicationLogoutFilter.