GitHub-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Browse Source

Update What's New Section 

Fixes gh-8062
pull/8084/head
Josh Cummings 6 years ago
parent
b42f0f50ab
commit
edb6665103
No known key found for this signature in database
GPG Key ID: 49EF60DD7FF83443
1 changed files with 58 additions and 45 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 103
      docs/manual/src/docs/asciidoc/_includes/about/whats-new.adoc

103
docs/manual/src/docs/asciidoc/_includes/about/whats-new.adoc
Unescape View File

@ -1,61 +1,74 @@
[[new]] [[new]]
== What's New in Spring Security 5.2 == What's New in Spring Security 5.3
Spring Security 5.2 provides a number of new features. Spring Security 5.3 provides a number of new features.
Below are the highlights of the release. Below are the highlights of the release.
=== Documentation Updates
We will continue our effort to rewrite the documentation.
Here's what you'll see in this release:
* Added <<servlet-architecture,Servlet Security: The Big Picture>>
* Updated <<servlet-authentication,Servlet Authentication>>
** Rewrote
** Added how things work, including <servlet-delegatingfilterproxy-figure,diagrams>>
* Added <<{gh-samples-url}/boot/kotlin,Kotlin samples>>
* Reskinned
** Added scrolling menu
** Added <<servlet-authentication-userdetailsservice,toggle>>
** Updated styles
=== Servlet === Servlet
* Added https://github.com/spring-projects/spring-security/issues/5557[nested builder] support in HTTP Security DSL * Added <<kotlin-config-httpsecurity,Kotlin DSL>>
* OAuth 2.0 Client * OAuth 2.0 Client
** Introducing https://github.com/spring-projects/spring-security/pull/6845[OAuth2AuthorizedClientManager / OAuth2AuthorizedClientProvider] ** Added Test support for <<testing-oauth2-client,OAuth 2.0 Client>>, <<testing-oauth2-login,OAuth 2.0 Login>>, and <<testing-oidc-login,OIDC Login>>
** Added https://github.com/spring-projects/spring-security/issues/7122[AuthorizedClientServiceOAuth2AuthorizedClientManager] which is capable of operating outside of a HttpServletRequest context ** Improved https://github.com/spring-projects/spring-security/pull/7748[customizing the OAuth 2.0 Authorization Request]
** Public Client support with https://github.com/spring-projects/spring-security/issues/6446[PKCE] ** Enhanced https://github.com/spring-projects/spring-security/issues/7842[OIDC logout success handler to support `\{baseUrl\}`]
** Support for https://github.com/spring-projects/spring-security/issues/6003[Resource Owner Password Credentials] grant ** Added https://github.com/spring-projects/spring-security/issues/7840[OAuth2Authorization success and failure handlers]
** Support for ID Token verification using a https://github.com/spring-projects/spring-security/issues/5465[Symmetric Key] via NimbusJwtDecoder ** Added https://github.com/spring-projects/spring-security/issues/5184[XML support]
** Added https://github.com/spring-projects/spring-security/issues/4442[nonce] to OpenID Connect Authentication Request ** Added <<dbschema-oauth2-client,JDBC support for storing OAuth 2.0 tokens>>
** OpenID Connect https://github.com/spring-projects/spring-security/issues/5350[RP-Initiated Logout] ** Added https://github.com/spring-projects/spring-security/issues/4886[JSON serialization support for OAuth 2.0 tokens]
** Updated <<oauth2client, documentation>>
* OAuth 2.0 Resource Server * OAuth 2.0 Resource Server
** Introducing https://github.com/spring-projects/spring-security/issues/5200[Token Introspection] (Opaque Tokens) ** Added support for <<oauth2resourceserver-multitenancy,multiple issuers>>
** https://github.com/spring-projects/spring-security/issues/5351[Multi-tenancy] support ** Added <<testing-opaque-token,test support for Opaque Tokens>>
** Added ExchangeFilterFunction that performs https://github.com/spring-projects/spring-security/issues/5334[Bearer Token propagation] (Token Relay) ** Added https://github.com/spring-projects/spring-security/pull/7962[generic claim validator]
** Support for multiple https://github.com/spring-projects/spring-security/issues/6883[JWS algorithms] via NimbusJwtDecoder ** Added https://github.com/spring-projects/spring-security/issues/5185[XML support]
** Test support for https://github.com/spring-projects/spring-security/issues/6634[mock JWT] ** Improved https://github.com/spring-projects/spring-security/pull/7826[bearer token error handling] for JWT and Opaque Token
** Added https://github.com/spring-projects/spring-security/issues/7033[JWE] sample * SAML 2.0
** Updated <<oauth2resourceserver, documentation>> ** Added <<servlet-saml2-opensamlauthenticationprovider-authenticationmanager,AuthenticationManager>> configuration
** Added support for https://github.com/spring-projects/spring-security/issues/7711[AuthNRequest signatures]
** Added support for https://github.com/spring-projects/spring-security/pull/7759[AuthNRequest POST binding]
=== WebFlux === WebFlux
* Added https://github.com/spring-projects/spring-security/issues/7107[nested builder] support in HTTP Security DSL * Added https://github.com/spring-projects/spring-security/issues/7636[DSL support for custom header writers]
* OAuth 2.0 Client * OAuth 2.0 Client
** Introducing https://github.com/spring-projects/spring-security/pull/7116[ReactiveOAuth2AuthorizedClientManager / ReactiveOAuth2AuthorizedClientProvider] ** Added Test support for https://github.com/spring-projects/spring-security/issues/7910[OAuth 2.0 Client], https://github.com/spring-projects/spring-security/issues/7828[OAuth 2.0 Login], and https://github.com/spring-projects/spring-security/issues/7680[OIDC Login]
** Public Client support with https://github.com/spring-projects/spring-security/issues/6446[PKCE] ** Enhanced https://github.com/spring-projects/spring-security/issues/7842[OIDC logout success handler to support `\{baseUrl\}`]
** Support for https://github.com/spring-projects/spring-security/issues/6003[Resource Owner Password Credentials] grant ** Added https://github.com/spring-projects/spring-security/issues/7699[OAuth2Authorization success and failure handlers]
** Support for ID Token verification using a https://github.com/spring-projects/spring-security/issues/5465[Symmetric Key] via NimbusReactiveJwtDecoder ** Added https://github.com/spring-projects/spring-security/issues/4886[JSON serialization support for OAuth 2.0 tokens]
** Added https://github.com/spring-projects/spring-security/issues/4442[nonce] to OpenID Connect Authentication Request ** Added https://github.com/spring-projects/spring-security/issues/7569[ReactiveOAuth2AuthorizedClientManager integration with AuthorizedClientService]
** OpenID Connect https://github.com/spring-projects/spring-security/issues/5350[RP-Initiated Logout]
* OAuth 2.0 Resource Server * OAuth 2.0 Resource Server
** Introducing https://github.com/spring-projects/spring-security/issues/6513[Token Introspection] (Opaque Tokens) ** Added support for <<webflux-oauth2resourceserver-multitenancy,multiple issuers>>
** https://github.com/spring-projects/spring-security/issues/6727[Multi-tenancy] support ** Added https://github.com/spring-projects/spring-security/issues/7827[test support for Opaque Tokens]
** Added ExchangeFilterFunction that performs https://github.com/spring-projects/spring-security/issues/7284[Bearer Token propagation] (Token Relay) ** Improved https://github.com/spring-projects/spring-security/pull/7826[bearer token error handling] for JWT and Opaque Token
** Support for multiple https://github.com/spring-projects/spring-security/issues/6883[JWS algorithms] via NimbusReactiveJwtDecoder
* Support for https://github.com/spring-projects/spring-security/issues/5038[X509] === RSocket
* Added support for https://github.com/spring-projects/spring-security/issues/7935[RSocket Authentication extension]
=== Core === Core
* Introducing <<rsocket,RSocket>> support * Enhanced Authentication Event Publisher support
* Introducing https://github.com/spring-projects/spring-security/issues/6019[SAML Service Provider] support ** Updated https://github.com/spring-projects/spring-security/pull/7802[configuration support]
* Introducing https://github.com/spring-projects/spring-security/issues/6722[AuthenticationManagerResolver] ** Added https://github.com/spring-projects/spring-security/issues/7825,default event>> and <<https://github.com/spring-projects/spring-security/issues/7824[`Map`-based] exception mapping
* Introducing https://github.com/spring-projects/spring-security/issues/6506[AuthenticationFilter] * Improved https://github.com/spring-projects/spring-security/issues/7891[integration with Spring Data]
* Introducing https://github.com/spring-projects/spring-security/issues/6546[@CurrentSecurityContext] for method arguments * Added support to https://github.com/spring-projects/spring-security/issues/7661[BCrypt to hash byte arrays]
* Converting https://github.com/spring-projects/spring-security/issues/6494[key material] to Key instances
* Support for https://github.com/spring-projects/spring-security/issues/4187[Clear-Site-Data] header === Build
* Introducing https://github.com/spring-projects/spring-security/issues/6453[CompositeHeaderWriter]
* Added https://spring.io/blog/2019/06/10/announcing-nohttp[nohttp] to build * Changed build to https://github.com/spring-projects/spring-security/issues/7788[use version ranges]
* https://github.com/spring-projects/spring-security/issues/6774[JDK 12] support * Removed https://github.com/spring-projects/spring-security/issues/4939[dependency on Groovy]
* Support for https://github.com/spring-projects/spring-security/issues/4469[path variables] in message expressions
* Configuration classes are proxy-less and support https://github.com/spring-projects/spring-security/issues/6818[proxyBeanMethods=false]
* Added https://github.com/spring-projects/spring-security/issues/5354[Argon2PasswordEncoder]
* Support upgrading between different https://github.com/spring-projects/spring-security/pull/7042[BCrypt encodings]
* Support upgrading between different https://github.com/spring-projects/spring-security/pull/7057[SCrypt encodings]

Write Preview
Loading…
Cancel
Save