totp dependency is now optional

CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## [13.1.0]
+- The `totp-spring-boot-starter` dependency is now optional
+- If using the MFA functionality, add the dependency to your project
+
+## [13.0.1] - 2024-09-25
+- Codacy finding fixed
+
+## [13.0.0] - 2024-09-24
+- Upgrade to Spring Boot 3.3.4
+- Moved to Java 21
+- Internal code maintainability fixes
+
 ## [12.3.0] - 2023-12-07
 - Upgrade to Spring Boot 3.2.0
 - Made the AuthenticationManager in the WebSecurityAutoConfig conditional.

README.md

@@ -44,7 +44,7 @@ Spring boot autoconfig for spring security in a REST environment
     <dependency>
         <groupId>nl.42</groupId>
         <artifactId>rest-secure-spring-boot-starter</artifactId>
-        <version>13.0.0</version>
+        <version>13.1.0</version>
     </dependency>
     <dependency>
         <groupId>org.springframework.boot</groupId>
@@ -58,6 +58,12 @@ Spring boot autoconfig for spring security in a REST environment
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-security</artifactId>
     </dependency>
+    <!-- only add this dependency if using MFA -->
+    <dependency>
+        <groupId>dev.samstevens.totp</groupId>
+        <artifactId>totp-spring-boot-starter</artifactId>
+        <version>1.7.1</version>
+    </dependency>
 </dependencies>
 ```
 

pom.xml

@@ -96,6 +96,7 @@
             <groupId>dev.samstevens.totp</groupId>
             <artifactId>totp-spring-boot-starter</artifactId>
             <version>${totp-spring-boot-starter.version}</version>
+            <optional>true</optional>
         </dependency>
         <dependency>
             <groupId>org.projectlombok</groupId>