⭐ New Features
- [ISSUE-11725] Add secondary statusCode messages on error #14743
- Add Authorization Denied Handlers for Method Security #14712
- Add ClientAuthenticationMethod constants tls_client_auth and self_signed_tls_client_auth #14889
- Add reference documentation for Token Exchange #14698
- Add Value-Type Ignore Support #14780
- Allow customization of redirect strategy in
CasAuthenticationEntrypoint#14881 - Create Authorized Proxy of Return Values #14669
- Handle SpEL AuthorizationDeniedExceptions #14882
- Improve logging in AuthenticationWebFilter #14764
- InitializeUserDetailsBeanManagerConfigurer inject PasswordEncoder into DaoAuthenticationProvider constructor #14766
- Provide Password (Compromised) Checking API #7395
- Simplification of creation of OAuth2TokenValidator with JwtValidators defaults. #14832
- Support Certificate-Bound (POP) JWT Access Token Validation #10538
- Support SpEL Returning AuthorizationDecision #14840
- Update reactive OAuth2 docs landing page with examples #14758
🪲 Bug Fixes
- SpaCsrfTokenRequestHandler(Kotlin) documented in csrf-integration-javascript-spa causes NullPointerException #14806
- docs: fix typo in FilterChainProxy #14861
- Fix continueOnError default value in java doc #14871
- ReactiveOAuth2AuthorizedClientManagerConfiguration has been created too early #14900
- Transactional annotation breaks AOT for native image #14866
- Update the documentation of AuthenticationProvider.java #14710
🔨 Dependency Upgrades
- Bump ch.qos.logback:logback-classic from 1.5.3 to 1.5.4 #14875
- Bump ch.qos.logback:logback-classic from 1.5.4 to 1.5.5 #14905
- Bump com.gradle.enterprise from 3.16.2 to 3.17 #14849
- Bump io.micrometer:micrometer-observation from 1.12.4 to 1.12.5 #14868
- Bump io.projectreactor:reactor-bom from 2023.0.4 to 2023.0.5 #14874
- Bump io.spring.ge.conventions from 0.0.15 to 0.0.16 #14820
- Bump io.spring.gradle:spring-security-release-plugin from 1.0.1 to 1.0.2 #14785
- Bump org-aspectj from 1.9.21.2 to 1.9.22 #14800
- Bump org.gretty:gretty from 4.1.2 to 4.1.3 #14776
- Bump org.slf4j:slf4j-api from 2.0.12 to 2.0.13 #14906
- Bump org.springframework.ldap:spring-ldap-core from 3.2.2 to 3.2.3 #14893
- Bump org.springframework:spring-framework-bom from 6.1.5 to 6.1.6 #14892
- Upgrade to Spring Data Bom 2024.0.0-RC1 #14901
❤️ Contributors
Thank you to all the contributors who worked on this release:
@Ali-Hassan33, @CrazyParanoid, @ThomasHagelberg, @dependabot[bot], @erie0210, @jzheaux, @kse-music, @marcusdacoregio, and @youngkih