Skip to content

6.3.0-RC1

Pre-release
Pre-release
Compare
Choose a tag to compare
@spring-builds spring-builds released this 15 Apr 15:49
· 119 commits to main since this release
6.3.0-RC1
52ce49b

⭐ New Features

  • [ISSUE-11725] Add secondary statusCode messages on error #14743
  • Add Authorization Denied Handlers for Method Security #14712
  • Add ClientAuthenticationMethod constants tls_client_auth and self_signed_tls_client_auth #14889
  • Add reference documentation for Token Exchange #14698
  • Add Value-Type Ignore Support #14780
  • Allow customization of redirect strategy in CasAuthenticationEntrypoint #14881
  • Create Authorized Proxy of Return Values #14669
  • Handle SpEL AuthorizationDeniedExceptions #14882
  • Improve logging in AuthenticationWebFilter #14764
  • InitializeUserDetailsBeanManagerConfigurer inject PasswordEncoder into DaoAuthenticationProvider constructor #14766
  • Provide Password (Compromised) Checking API #7395
  • Simplification of creation of OAuth2TokenValidator with JwtValidators defaults. #14832
  • Support Certificate-Bound (POP) JWT Access Token Validation #10538
  • Support SpEL Returning AuthorizationDecision #14840
  • Update reactive OAuth2 docs landing page with examples #14758

🪲 Bug Fixes

  • SpaCsrfTokenRequestHandler(Kotlin) documented in csrf-integration-javascript-spa causes NullPointerException #14806
  • docs: fix typo in FilterChainProxy #14861
  • Fix continueOnError default value in java doc #14871
  • ReactiveOAuth2AuthorizedClientManagerConfiguration has been created too early #14900
  • Transactional annotation breaks AOT for native image #14866
  • Update the documentation of AuthenticationProvider.java #14710

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.3 to 1.5.4 #14875
  • Bump ch.qos.logback:logback-classic from 1.5.4 to 1.5.5 #14905
  • Bump com.gradle.enterprise from 3.16.2 to 3.17 #14849
  • Bump io.micrometer:micrometer-observation from 1.12.4 to 1.12.5 #14868
  • Bump io.projectreactor:reactor-bom from 2023.0.4 to 2023.0.5 #14874
  • Bump io.spring.ge.conventions from 0.0.15 to 0.0.16 #14820
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.1 to 1.0.2 #14785
  • Bump org-aspectj from 1.9.21.2 to 1.9.22 #14800
  • Bump org.gretty:gretty from 4.1.2 to 4.1.3 #14776
  • Bump org.slf4j:slf4j-api from 2.0.12 to 2.0.13 #14906
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.2 to 3.2.3 #14893
  • Bump org.springframework:spring-framework-bom from 6.1.5 to 6.1.6 #14892
  • Upgrade to Spring Data Bom 2024.0.0-RC1 #14901

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Ali-Hassan33, @CrazyParanoid, @ThomasHagelberg, @dependabot[bot], @erie0210, @jzheaux, @kse-music, @marcusdacoregio, and @youngkih

Contributors

jzheaux, marcusdacoregio, and 7 other contributors
Assets 2