Skip to content

6.2.0-M1

Pre-release
Pre-release
Compare
Choose a tag to compare
@github-actions github-actions released this 17 Jul 21:56
· 3383 commits to main since this release

⭐ New Features

  • Add meta-annotation support for EnableMethodSecurity #13120
  • Add with() method to apply SecurityConfigurerAdapter #13432
  • Assert is missing object. It was useless before Spring Framework 6.1 and will not compile on 6.1 #13412
  • authorizeHttpRequests should consider GrantedAuthorityDefaults #13215
  • Automatically enable .cors() if CorsConfigurationSource bean is present #5011
  • Change TestingAuthenticationToken to Accept Collection GrantedAuthorities #12953
  • Create NoOpAccessDeniedHandler #13109
  • Create NoOpAuthenticationEntryPoint #13107
  • Deprecate AbstractConfiguredSecurityBuilder#apply that returns SecurityConfigurerAdapter #13436
  • Make class OidcClientInitiatedLogoutSuccessHandler extensible #13007
  • Optimize Querying of RequestCache -> continue parameter #13489
  • Optimize Querying of RequestCache -> continue parameter #13483
  • Prepare for Spring Security 6.2 #13416
  • Remove LazyCsrfTokenRepository usage #13202
  • Replace deprecated methods #13307
  • Simplify RequestMatcherDelegatingAuthorizationManager.Builder matcher registration #13110
  • Use SecurityContextHolderStrategy in CasAuthenticationFilter #13418
  • Using modern Java features #12569

🪲 Bug Fixes

  • Docs link leads to wrong section on What's New #13492
  • Error message should show underlying Client Authentication method #13499
  • Javadoc for AuthorizationFilter#filterErrorDispatch is wrong #13466
  • once-per-request="true" does not work in XML configuration #13495
  • Unable to Find 'filterProcessingUrl' Method in Spring Security 6.1.1 Saml2LoginConfigurer Configuration #13422
  • Unable to Use hasIpAddress() Method After Migrating to authorizeHttpRequests() in Spring Security 6 #13479
  • Usage of deprecated function in JWT documentation #13501
  • Use default PathPatternParser instance #13475

🔨 Dependency Upgrades

  • Update aspectj-plugin to 6.6.3 #13531
  • Update hibernate-core to 6.2.6.Final #13538
  • Update htmlunit to 2.70.0 #13535
  • Update htmlunit-driver to 2.70.0 #13543
  • Update io.projectreactor to 2023.0.0-M1 #13533
  • Update jackson-bom to 2.15.2 #13530
  • Update jakarta.websocket to 2.1.1 #13534
  • Update junit-bom to 5.10.0-RC1 #13541
  • Update maven-resolver-provider to 3.9.3 #13536
  • Update micrometer-observation to 1.12.0-M1 #13532
  • Update org.apache.maven.resolver to 1.9.13 #13537
  • Update org.jetbrains.kotlin to 1.9.0 #13539
  • Update org.jetbrains.kotlinx to 1.7.2 #13540
  • Update org.mockito to 4.11.0 #13542
  • Update org.springframework to 6.1.0-M2 #13544
  • Update org.springframework.data to 2022.0.8 #13529
  • Update org.springframework.data to 2022.0.8 #13523
  • Update spring-ldap-core to 3.2.0-M1 #13545

❤️ Contributors

We'd like to thank all the contributors who worked on this release!