⭐ New Features
- Add hash-based Content-Security-Policy for SAML post pages #11631
- Allow customization of redirect strategy #11387
- Receive AuthnRequest Id and Response InResponseTo in Saml2AuthenticationRequestRepository #11468
- Set permissions for GitHub actions #11367
🪲 Bug Fixes
- "Well-Know" should be "Well-Known" #11613
- Add Deprecated annotation to WebSecurity#securityInterceptor #11634
- RequestRejectedHandler does not reliable prevent Internal Server Error #11645
- Spring Security SAML fails in Chrome because of favicon request #11657
❤️ Contributors
We'd like to thank all the contributors who worked on this release!