This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-auth-oauth-client.git
The following commit(s) were added to refs/heads/master by this push:
new 881f98c Add security section to AGENTS.md
881f98c is described below
commit 881f98c11c660a290f57084cc5d991057f5e286d
Author: Robert Munteanu <[email protected]>
AuthorDate: Tue Jun 2 12:47:58 2026 +0200
Add security section to AGENTS.md
---
AGENTS.md | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/AGENTS.md b/AGENTS.md
index 742efef..a3fae48 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -95,3 +95,10 @@ Makefile # Developer convenience targets
(keycloak, sling config
- **`org.apache.sling.jcr.resource` is compile-scope** — it is embedded in the
bundle. Changes to that dependency version affect the bundle size and content.
- **`InMemoryOAuthTokenStore` is not cluster-safe** — use JCR or Redis stores
in any multi-node setup.
- **Spotless index** — `target/spotless-index` is generated; if the build
fails with a Spotless error, run `mvn spotless:apply` rather than editing
format by hand.
+
+# Security
+
+<!-- sling-security-default:start -->
+The threat model for this project is
https://github.com/apache/sling/blob/master/docs/threat-model.md .
+<!-- sling-security-default:end -->
+
