Richard Salač

chore: prevent ApimlLogger from throwing IllegalArgumentException

1

# Description ApimlLogger could throw IllegalArgumentException when provided with invalid arguments. This has been fixed. ## Type of change Please delete options that are not relevant. - [ ] fix:...

chore: zaas-client support multiple set-cookie headers

1

# Description Zaas-client could get the token only if it was present in the first set-cookie header. This is now improved to support multiple headers. ## Type of change Please...

**Describe the bug** This is a complementary issue to https://github.com/zowe/api-layer/issues/3007 There is the mapping between SAF errors and http return codes with one specific handling for error 8/16/28 mapped to...

**Describe the bug** When integration test **org.zowe.apiml.integration.zaas.ZosmfTokensTest.WhenGeneratingZosmfTokens_returnValidZosmfToken#givenX509Certificate** is executed in negative scenario - with a client certificate that is trusted, but not mapped to a user, a NPE occurs resulting...

Improve personal access token validation endpoint error message when caching service is off

1

**Describe the bug** When caching service is down and personal access token validation endpoint is called, the returned error message says it is because of HttpClientErrorException.MethodNotAllowed, which is not the...

**Describe the bug** APIML v2.18 When login using client certificate authentication fails because of the certificate is not mapped to any user, the response code is 400. This should be...

fix: verifyCertificates configuration being ignored

1

# Description Mark Ackert reported on Dec 17 2025: I took the latest APIML build today and ran my AT-TLS against it with modulith disabled. Things are looking better, however...