spring-projects/spring-security 5.3.13.RELEASE

on GitHub

🪲 Bug Fixes

• Reactive resource server tests failing #10660
• Gretty samples fail when using logback 1.2.9 #10643
• StaticServerHttpHeadersWriter should work with case-insensitive header names #10584
• Invalid_request failures in JwtTokenValidators are always turned into invalid_token errors #10563
• MissingCsrfTokenException message is misleading when not storing the CSRF tokens in the session #10533
• Multi-tenancy Documentation - com.nimbusds.jwt.proc.JWTProcessor does not have a setJWTClaimSetJWSKeySelector method #10522
• Multi-tenancy Documentation - JwtDecoder sample has multiple errors #10518
• Oauth2 Resource Server will not retry on first failure with Multi-tenancy #10486

🔨 Dependency Upgrades

• Update to AspectJ 1.9.7 #10645
• Update to Google App Engine 1.9.93 #10644