github spring-projects/spring-security 5.2.1.RELEASE

latest releases: 6.4.1, 5.7.14, 5.8.16...
5 years ago

⭐ New Features

  • Fix variable reference in sample code #7571
  • spring-security-saml2-service-provider impossible to use different format of assertionConsumerServiceUrlTemplate #7565
  • Add Resource Server Multi-tenancy Documentation #7532
  • Update SAML sample to use boot auto config #7521
  • Add Reactive CSRF Documentation #6487

🪲 Bug Fixes

  • Restore Removed Throws Clauses #7580
  • CsrfWebFilter should handle multipart/form-data #7576
  • Make saveAuthorizedClient save the authorized client #7551
  • DefaultReactiveOAuth2AuthorizedClientManager.saveAuthorizedClient does not save authorized client #7546
  • throws Exception was removed from WebSecurityConfigurerAdapter#configure(WebSecurity) #7541
  • SAML2 Provider SubjectConfirmation validation failure #7514
  • SAML2 Provider AuthNRequest Hardcoded Protocol Binding #7513
  • Clock skew to check access token expiration has wrong sign #7511

🔨 Dependency Upgrades

  • Upgrade to Spring Boot 2.2.0.RELEASE #7566

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Don't miss a new spring-security release

NewReleases is sending notifications on new releases.