---
schema_version: "1"
id: c4afe5344e4bd09ef1e048ec76eb7c5f64b384510a276f8a853223e5b24277a5
title: OAuth2 Provider Module Release Notes
collection: mulesoft
version: current
locale: ja-jp
portal_url: https://docs.salesforce.com/mulesoft/current/ja-jp/release-notes/connector/oauth2-provider-release-notes.md
canonical_url: https://docs.mulesoft.com/jp/release-notes/connector/oauth2-provider-release-notes
source_site: docs.mulesoft.com
content_type: documentation
content_hash: fb9a8efa33ed1059f77522b4aa32652719a8655cee558f1d221a9c0bf6fbfdfd
description: MuleSoft Documentation Site
latest: true
---
# OAuth2 Provider Module Release Notes

The OAuth2 Provider module enables a Mule runtime engine (Mule) app to be configured as an Authentication Manager in an OAuth2 dance.

Guide: [OAuth2 Provider User Guide](https://docs.mulesoft.com/jp/oauth2-provider-module/latest/)  
Reference: [OAuth2 Provider Reference](https://docs.mulesoft.com/jp/oauth2-provider-module/latest/oauth2-provider-module-reference)

## [](#1-2-4)1.2.4

**October 22, 2026**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">OpenJDK</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">8, 11, and 17</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue Resolution</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">A custom Spring security provider configured in <strong>Resource Owner Security Provider</strong> now receives the HTTP request headers when it authenticates a resource owner with the <strong>Supported Grant Types</strong> value <code>RESOURCE_OWNER_PASSWORD_CREDENTIALS</code>. Previously, that provider did not receive the request headers. A provider that already sets Spring authentication details keeps those details.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-15615692</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">The module no longer uses the Atlassian-forked <code>spring-security</code> library. The <code>spring-security</code> library is now version 5.8.16-spring-security-5.8.19. The <code>spring-framework</code> library is now version 5.3.39-spring-framework-5.3.45 and is shaded into the module’s Mule plugin.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-23993430</p></td>
</tr>
</tbody>
</table>

## [](#1-2-3)1.2.3

**July 21, 2026**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue Resolution</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><div class="content"><div class="paragraph">
<p>These libraries are upgraded to address reported security vulnerabilities:</p>
</div>
<div class="ulist">
<ul>
<li>
<p>The <code>log4j</code> library is upgraded to version 2.26.1 to address CVE-2026-34478.</p>
</li>
<li>
<p>The <code>spring-security</code> library is upgraded to version 5.8.17-atlassian-1.</p>
</li>
<li>
<p>The <code>spring-framework</code> library is upgraded to version 5.3.39-spring-framework-5.3.49.</p>
</li>
<li>
<p>The <code>commons-io</code> library is upgraded to version 2.22.0.</p>
</li>
<li>
<p>The <code>commons-text</code> library is upgraded to version 1.15.0.</p>
</li>
<li>
<p>The <code>gson</code> library is upgraded to version 2.14.0.</p>
</li>
<li>
<p>The <code>apache-velocity</code> library is upgraded to version 2.4.1.</p>
</li>
</ul>
</div></div></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-23274319</p></td>
</tr>
</tbody>
</table>

## [](#1-2-2)1.2.2

**January 26, 2026**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue Resolution</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><div class="content"><div class="paragraph">
<p>These libraries are upgraded to address reported security vulnerabilities:</p>
</div>
<div class="ulist">
<ul>
<li>
<p>The <code>commons-collections</code> library is migrated to <code>commons-collections4</code> version 4.5.0 to address sonatype-2024-3350.</p>
</li>
<li>
<p>The <code>commons-lang3</code> library is upgraded to version 3.20.0 to address CVE-2025-48924, and the <code>commons-lang</code> library version 2.6 is excluded to address CVE-2025-48924.</p>
</li>
<li>
<p>The <code>commons-io</code> library is added at version 2.21.0 to override the outdated version in <code>mule-service-http</code> to address CVE-2024-47554.</p>
</li>
<li>
<p>The <code>gson</code> library is upgraded to version 2.13.2 to address CVE-2025-53864.</p>
</li>
<li>
<p>The <code>log4j</code> library is upgraded to version 2.25.3 to address CVE-2025-68161.</p>
</li>
<li>
<p>The <code>spring-core</code> library is upgraded to version 6.2.11 to address CVE-2025-41242 and CVE-2025-41249.</p>
</li>
<li>
<p>The <code>muleHttpConnectorVersion</code> library is upgraded to version 1.10.6.</p>
</li>
</ul>
</div></div></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-20358376</p></td>
</tr>
</tbody>
</table>

## [](#1-2-1)1.2.1

**September 11, 2025**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue Resolution</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">The Spring framework is upgraded to version 5.3.39-spring-framework-5.3.45 to address reported security vulnerabilities.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-18704894</p></td>
</tr>
</tbody>
</table>

## [](#1-2-0)1.2.0

**March 26, 2025**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue Resolution</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">This release includes general security fixes.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-16889148</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">The log4j dependency is upgraded to version 2.17.1 to address reported security vulnerabilities.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-16889148</p></td>
</tr>
</tbody>
</table>

## [](#1-1-0)1.1.0

**May 14, 2024**

### What’s New

This release includes only non-user-impacting changes.

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">OpenJDK</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">8, 11, and 17</p></td>
</tr>
</tbody>
</table>

## [](#1-0-13)1.0.13

**March 8, 2024**

### What’s New

- This connector is now compatible with Java 17.

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">OpenJDK</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">8, 11, and 17</p></td>
</tr>
</tbody>
</table>

## [](#1-0-12)1.0.12

**June 14, 2023**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue Resolution</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Improved the performance of the <strong>Validate</strong> operation.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-13101424</p></td>
</tr>
</tbody>
</table>

## [](#1-0-11)1.0.11

**June 12, 2023**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue Resolution</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Upgraded internal dependencies.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-13568991</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Refactored code to improve security.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-13145661</p></td>
</tr>
</tbody>
</table>

## [](#1-0-10)1.0.10

**October 18, 2022**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Upgraded internal dependencies.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-11639029</p></td>
</tr>
</tbody>
</table>

## [](#1-0-9)1.0.9

**August 23, 2022**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Upgraded internal dependencies.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">W-11577652</p></td>
</tr>
</tbody>
</table>

## [](#1-0-8)1.0.8

**December 16, 2021**

### Compatibility

<table class="tableblock frame-all grid-all fit-content spread">
<colgroup>
<col>
<col>
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Software</th>
<th class="tableblock halign-left valign-top">Version</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

### Fixed Issues

<table class="tableblock frame-all grid-all" style="width: 70%;">
<colgroup>
<col style="width: 66.6666%;">
<col style="width: 33.3334%;">
</colgroup>
<thead>
<tr>
<th class="tableblock halign-left valign-top">Issue</th>
<th class="tableblock halign-left valign-top">ID</th>
</tr>
</thead>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Fixed inconsistencies in OAuth2 token expiry time.</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">OPM-31</p></td>
</tr>
</tbody>
</table>

## [](#1-0-7)1.0.7

**September 24, 2021**

### [](#fixed-issues-11)Fixed Issues

- Added debug logs in the connector to troubleshoot properly. (OPM-29)

## [](#1-0-6)1.0.6

**February 18, 2021**

### [](#fixed-issues-12)Fixed Issues

- Fixed an issue that prevented LDAP authentication. (OPM-20)
- Fixed the `Already exists a listener matching that path and methods` error that occurred when restarting an application using the OAuth2 Provider Module. (OPM-21)
- Fixed the `Provider already registered` error that occurred when starting a stopped application when using the OAuth2 Provider Module. (OPM-22)

## [](#1-0-5)1.0.5

**September 15, 2019**

### [](#fixed-issues-13)Fixed Issues

- `ClassCastException` was incorrectly thrown in an error scenario. This has been replaced by `OAuth2ProviderSecurityException`. (MULE-17445)

## [](#1-0-4)1.0.4

**August 13, 2019**

### [](#fixed-issues-14)Fixed Issues

- HTTP updated to version 1.5.6. (MULE-17254)
- Upgraded commons-io to version 2.6. (MULE-16582)

### [](#compatibility-13)Compatibility

The OAuth2 Provider Module is compatible with:

<table class="tableblock frame-all grid-all stretch">
<colgroup>
<col style="width: 50%;">
<col style="width: 50%;">
</colgroup>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Application or Service</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">Version</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

## [](#1-0-3)1.0.3

**January 23, 2019**

### [](#fixed-issues-15)Fixed Issues

- HTTP request parameters are validated twice. (EE-6529)
- Missing default login page files. (EE-6528)

### [](#compatibility-14)Compatibility

The OAuth2 Provider Module is compatible with:

<table class="tableblock frame-all grid-all stretch">
<colgroup>
<col style="width: 50%;">
<col style="width: 50%;">
</colgroup>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Application/Service</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">Version</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

## [](#1-0-2)1.0.2

**January 21, 2019**

### [](#fixed-issues-16)Fixed Issues

The OAuth2 Provider Module is compatible with:

<table class="tableblock frame-all grid-all stretch">
<colgroup>
<col style="width: 50%;">
<col style="width: 50%;">
</colgroup>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Application/Service</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">Version</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

## [](#1-0-1)1.0.1

**January 8, 2019**

### [](#fixed-issues-17)Fixed Issues

- Token response content-type header is not application/json (EE-6224)
- ClientCredential grants inconsistent error codes. This broke compatibility, so use system property: `mule.oauth.provider.oldErrors=true` if wanting to get the previous error codes. (EE-6521)
- `clientSecurityProvider` is no longer mandatory. (EE-6488)
- Static login page is now being exported. (EE-6519)

### [](#compatibility-15)Compatibility

The OAuth2 Provider Module is compatible with:

<table class="tableblock frame-all grid-all stretch">
<colgroup>
<col style="width: 50%;">
<col style="width: 50%;">
</colgroup>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Application/Service</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">Version</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

## [](#1-0-0)1.0.0

**June 15, 2018**

### [](#compatibility-16)Compatibility

The OAuth2 Provider Module is compatible with:

<table class="tableblock frame-all grid-all stretch">
<colgroup>
<col style="width: 50%;">
<col style="width: 50%;">
</colgroup>
<tbody>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Application/Service</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">Version</p></td>
</tr>
<tr>
<td class="tableblock halign-left valign-top"><p class="tableblock">Mule</p></td>
<td class="tableblock halign-left valign-top"><p class="tableblock">4.1.1 and later</p></td>
</tr>
</tbody>
</table>

## [](#see-also)See Also

- [Salesforce Help](https://help.salesforce.com)
- [MuleSoft Services](https://www.mulesoft.com/support-and-services)
- [Known Issues](https://help.salesforce.com/s/issues)