spring-projects/spring-security 5.2.4.RELEASE

on GitHub

⭐ New Features

• SAML Authentication Provider assertions #8495
• BCryptPasswordEncoder.encode() throws NPE #8346

🪲 Bug Fixes

• Fix Javadoc punctuation #8494
• Add ROLE_INFRASTRUCTURE to infrastructure beans #8438
• SEC-2664: ActiveDirectoryLdapAuthenticationProvider should wrap communication exceptions in InternalAuthenticationServiceException #8430
• OAuth2 Resource Server docs not in sync - authorityPrefix can't be set to "" #8426
• Fix typo with correct capitalization #8409
• Global ServerSecurityContextRepository ignored by logout #8386
• Fix example in javadoc of FilterChainProxy #8352
• Fix typo in Javadoc of ServerHttpSecurity#hasAuthority #8338
• Java Doc of org.springframework.security.config.annotation.web.builders.HttpSecurity contains grammatical errors #8312

🔨 Dependency Upgrades

• Update to Byte Buddy 1.9.16 #8481
• Upgrade to embedded Apache Tomcat 9.0.34 #8469
• Update RSocket to 1.0.0-RC7 #8468
• Update to GAE 1.9.80 #8467
• Update to Jackson 2.10.4 #8466
• Update to org.powermock 2.0.7 #8465
• Update to Reactor Dysprosium-SR7 #8464
• Update to Spring Framework 5.2.6.RELEASE #8463
• Update to Spring Data Moore-SR7 #8462