whats-new.adoc 1.8 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243
  1. [[new]]
  2. = What's New in Spring Security 5.6
  3. Spring Security 5.6 provides a number of new features.
  4. Below are the highlights of the release.
  5. [[whats-new-servlet]]
  6. === Servlet
  7. * Core
  8. ** Introduced https://github.com/spring-projects/spring-security/issues/10226[`SecurityContextChangedListener`]
  9. * Configuration
  10. ** Introduced https://github.com/spring-projects/spring-security/pull/9630[`AuthorizationManager`] for method security
  11. * SAML 2.0 Service Provider
  12. ** Added https://github.com/spring-projects/spring-security/pull/9483[SAML 2.0 Single Logout Support]
  13. ** Added https://github.com/spring-projects/spring-security/pull/10060[Saml2AuthenticationRequestRepository]
  14. ** Added https://github.com/spring-projects/spring-security/issues/9486[`RelyingPartyRegistrationResolver`]
  15. ** Improved ``Saml2LoginConfigurer``'s handling of https://github.com/spring-projects/spring-security/issues/10268[`Saml2AuthenticationTokenConverter`]
  16. * OAuth 2.0 Login
  17. ** Added https://github.com/spring-projects/spring-security/pull/10041[`Converter` for `Authentication` result]
  18. * OAuth 2.0 Client
  19. ** Improved https://github.com/spring-projects/spring-security/pull/9791[client credentials] encoding
  20. ** Improved https://github.com/spring-projects/spring-security/pull/9779[access token response] parsing
  21. ** Added https://github.com/spring-projects/spring-security/pull/10155[custom grant types support] for authorization requests
  22. * Testing
  23. ** Added support to https://github.com/spring-projects/spring-security/pull/9737[propagate the TestSecurityContextHolder to SecurityContextHolder]
  24. [[whats-new-webflux]]
  25. === WebFlux
  26. ** Improved https://github.com/spring-projects/spring-security/pull/9791[client credentials] encoding
  27. ** Added https://github.com/spring-projects/spring-security/pull/10131[custom headers support] for access token requests