⭐ New Features
- Convert to Asciidoctor Tabs #13405
- Mention that authorizeHttpRequests does not support GrantedAuthorityDefaults #13227
- mockOAuth2Login() does not work in collaboration with Spring Cloud Gateway and TokenRelayGatewayFilter #13252
- Use Antora name of security #13329
🪲 Bug Fixes
- Additional filters registered when using Custom DSL #13280
- AffirmativeBased vs. AuthorizationManagers.anyOf(...) documentation #13069
- AuthorizationAnnotationUtils.findUniqueAnnotation broken for synthetic methods #13132
- Clarify that Kotlin DSL needs an import #13101
- Document missing OAuth2LoginAuthenticationFilter set AuthorizationRequestRepository #13191
- Fix Antora Warnings #13292
- Fix code snippets in Authorize HttpServletRequest #11522
- Fix constant value in XContentTypeOptionsServerHttpHeadersWriter #13219
- Fix Documentation Title #13316
- Fix legacy-websocket-configuration cross-reference #12969
- Fix typo in authorization.adoc #13135
- http://www.springframework.org/schema/security/spring-security.xsd returns 404 #13207
- Links between migration docs are out of date #12675
- Proxy Server section is not linked in nav #13322
- RememberMeAuthenticationFilter does not use SecurityContextRepository configured in HttpSecurity #13104
- SAML 2.0 HTTP Redirect Binding query params may appear in any order #12963
- SAML login fails in Internet Explorer 11 #13106
- Spring Security 6 combined with AspectJ weaving of spring-security-aspects executes PreAuthorize twice #13160
🔨 Dependency Upgrades
- Address CVE-2023-1370 #13146
- Update com.nimbusds to 9.43.3 #13374
- Update hsqldb to 2.7.2 #13388
- Update io.projectreactor to 2020.0.33 #13377
- Update io.rsocket to 1.1.4 #13383
- Update io.spring.javaformat to 0.0.39 #13386
- Update junit-bom to 5.9.3 #13391
- Update org.junit.jupiter to 5.9.3 #13393
- Update org.springframework to 5.3.28 #13395
- Update org.springframework.data to 2021.2.13 #13397
- Update reactor-netty to 1.0.33 #13380
❤️ Contributors
We'd like to thank all the contributors who worked on this release!