6.2.0-M1
Pre-release
Pre-release
github-actions
released this
17 Jul 21:56
·
3383 commits
to main
since this release
⭐ New Features
- Add meta-annotation support for EnableMethodSecurity #13120
- Add with() method to apply SecurityConfigurerAdapter #13432
- Assert is missing object. It was useless before Spring Framework 6.1 and will not compile on 6.1 #13412
- authorizeHttpRequests should consider GrantedAuthorityDefaults #13215
- Automatically enable .cors() if CorsConfigurationSource bean is present #5011
- Change TestingAuthenticationToken to Accept Collection GrantedAuthorities #12953
- Create NoOpAccessDeniedHandler #13109
- Create NoOpAuthenticationEntryPoint #13107
- Deprecate AbstractConfiguredSecurityBuilder#apply that returns SecurityConfigurerAdapter #13436
- Make class
OidcClientInitiatedLogoutSuccessHandler
extensible #13007 - Optimize Querying of RequestCache -> continue parameter #13489
- Optimize Querying of RequestCache -> continue parameter #13483
- Prepare for Spring Security 6.2 #13416
- Remove LazyCsrfTokenRepository usage #13202
- Replace deprecated methods #13307
- Simplify RequestMatcherDelegatingAuthorizationManager.Builder matcher registration #13110
- Use SecurityContextHolderStrategy in CasAuthenticationFilter #13418
- Using modern Java features #12569
🪲 Bug Fixes
- Docs link leads to wrong section on What's New #13492
- Error message should show underlying Client Authentication method #13499
- Javadoc for AuthorizationFilter#filterErrorDispatch is wrong #13466
- once-per-request="true" does not work in XML configuration #13495
- Unable to Find 'filterProcessingUrl' Method in Spring Security 6.1.1 Saml2LoginConfigurer Configuration #13422
- Unable to Use
hasIpAddress()
Method After Migrating toauthorizeHttpRequests()
in Spring Security 6 #13479 - Usage of deprecated function in JWT documentation #13501
- Use default PathPatternParser instance #13475
🔨 Dependency Upgrades
- Update aspectj-plugin to 6.6.3 #13531
- Update hibernate-core to 6.2.6.Final #13538
- Update htmlunit to 2.70.0 #13535
- Update htmlunit-driver to 2.70.0 #13543
- Update io.projectreactor to 2023.0.0-M1 #13533
- Update jackson-bom to 2.15.2 #13530
- Update jakarta.websocket to 2.1.1 #13534
- Update junit-bom to 5.10.0-RC1 #13541
- Update maven-resolver-provider to 3.9.3 #13536
- Update micrometer-observation to 1.12.0-M1 #13532
- Update org.apache.maven.resolver to 1.9.13 #13537
- Update org.jetbrains.kotlin to 1.9.0 #13539
- Update org.jetbrains.kotlinx to 1.7.2 #13540
- Update org.mockito to 4.11.0 #13542
- Update org.springframework to 6.1.0-M2 #13544
- Update org.springframework.data to 2022.0.8 #13529
- Update org.springframework.data to 2022.0.8 #13523
- Update spring-ldap-core to 3.2.0-M1 #13545
❤️ Contributors
We'd like to thank all the contributors who worked on this release!