[KarstenSchnitter]

Summary

Removes the publicly known user / secret credentials from the deployable Spring Boot sample application.

Changes

• Removes hard-coded credentials from Java configuration and application.yml.
• Uses Spring Boot’s generated password for local development.
• Prints generated local credentials in a readable development-only banner.
• Requires Basic-auth credentials as CF manifest variables.
• Activates the cloud profile in both CF manifests to suppress the local credential banner.
• Updates the README and curl examples.
• Adds regression tests ensuring the former credentials cannot authenticate.
• Updates the default manifest to sap_java_buildpack_jakarta.

Verification

• mvn -pl sample-spring-boot test
  • 5 tests passed.
• Manually verified on Cloud Foundry:
  • Deployment fails before staging when credential variables are missing.
  • Deployment succeeds when credentials are supplied.
  • Supplied credentials authenticate successfully.
  • Generated credentials are not written to CF logs.

[Felix-Griesau-SAP]

🦔