Skip to content

Commit edb6665

Browse files
jzheauxjzheaux
committed
Update What's New Section
Fixes gh-8062
1 parent b42f0f5 commit edb6665

File tree

1 file changed

+58
-45
lines changed

1 file changed

+58
-45
lines changed

‎docs/manual/src/docs/asciidoc/_includes/about/whats-new.adoc

Lines changed: 58 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -1,61 +1,74 @@
11
[[new]]
2-
== What's New in Spring Security 5.2
2+
== What's New in Spring Security 5.3
33

4-
Spring Security 5.2 provides a number of new features.
4+
Spring Security 5.3 provides a number of new features.
55
Below are the highlights of the release.
66

7+
=== Documentation Updates
8+
9+
We will continue our effort to rewrite the documentation.
10+
11+
Here's what you'll see in this release:
12+
13+
* Added <<servlet-architecture,Servlet Security: The Big Picture>>
14+
* Updated <<servlet-authentication,Servlet Authentication>>
15+
** Rewrote
16+
** Added how things work, including <servlet-delegatingfilterproxy-figure,diagrams>>
17+
* Added <<{gh-samples-url}/boot/kotlin,Kotlin samples>>
18+
* Reskinned
19+
** Added scrolling menu
20+
** Added <<servlet-authentication-userdetailsservice,toggle>>
21+
** Updated styles
22+
723
=== Servlet
824

9-
* Added https://github.com/spring-projects/spring-security/issues/5557[nested builder] support in HTTP Security DSL
25+
* Added <<kotlin-config-httpsecurity,Kotlin DSL>>
1026
* OAuth 2.0 Client
11-
** Introducing https://github.com/spring-projects/spring-security/pull/6845[OAuth2AuthorizedClientManager / OAuth2AuthorizedClientProvider]
12-
** Added https://github.com/spring-projects/spring-security/issues/7122[AuthorizedClientServiceOAuth2AuthorizedClientManager] which is capable of operating outside of a HttpServletRequest context
13-
** Public Client support with https://github.com/spring-projects/spring-security/issues/6446[PKCE]
14-
** Support for https://github.com/spring-projects/spring-security/issues/6003[Resource Owner Password Credentials] grant
15-
** Support for ID Token verification using a https://github.com/spring-projects/spring-security/issues/5465[Symmetric Key] via NimbusJwtDecoder
16-
** Added https://github.com/spring-projects/spring-security/issues/4442[nonce] to OpenID Connect Authentication Request
17-
** OpenID Connect https://github.com/spring-projects/spring-security/issues/5350[RP-Initiated Logout]
18-
** Updated <<oauth2client, documentation>>
27+
** Added Test support for <<testing-oauth2-client,OAuth 2.0 Client>>, <<testing-oauth2-login,OAuth 2.0 Login>>, and <<testing-oidc-login,OIDC Login>>
28+
** Improved https://github.com/spring-projects/spring-security/pull/7748[customizing the OAuth 2.0 Authorization Request]
29+
** Enhanced https://github.com/spring-projects/spring-security/issues/7842[OIDC logout success handler to support `\{baseUrl\}`]
30+
** Added https://github.com/spring-projects/spring-security/issues/7840[OAuth2Authorization success and failure handlers]
31+
** Added https://github.com/spring-projects/spring-security/issues/5184[XML support]
32+
** Added <<dbschema-oauth2-client,JDBC support for storing OAuth 2.0 tokens>>
33+
** Added https://github.com/spring-projects/spring-security/issues/4886[JSON serialization support for OAuth 2.0 tokens]
1934
* OAuth 2.0 Resource Server
20-
** Introducing https://github.com/spring-projects/spring-security/issues/5200[Token Introspection] (Opaque Tokens)
21-
** https://github.com/spring-projects/spring-security/issues/5351[Multi-tenancy] support
22-
** Added ExchangeFilterFunction that performs https://github.com/spring-projects/spring-security/issues/5334[Bearer Token propagation] (Token Relay)
23-
** Support for multiple https://github.com/spring-projects/spring-security/issues/6883[JWS algorithms] via NimbusJwtDecoder
24-
** Test support for https://github.com/spring-projects/spring-security/issues/6634[mock JWT]
25-
** Added https://github.com/spring-projects/spring-security/issues/7033[JWE] sample
26-
** Updated <<oauth2resourceserver, documentation>>
35+
** Added support for <<oauth2resourceserver-multitenancy,multiple issuers>>
36+
** Added <<testing-opaque-token,test support for Opaque Tokens>>
37+
** Added https://github.com/spring-projects/spring-security/pull/7962[generic claim validator]
38+
** Added https://github.com/spring-projects/spring-security/issues/5185[XML support]
39+
** Improved https://github.com/spring-projects/spring-security/pull/7826[bearer token error handling] for JWT and Opaque Token
40+
* SAML 2.0
41+
** Added <<servlet-saml2-opensamlauthenticationprovider-authenticationmanager,AuthenticationManager>> configuration
42+
** Added support for https://github.com/spring-projects/spring-security/issues/7711[AuthNRequest signatures]
43+
** Added support for https://github.com/spring-projects/spring-security/pull/7759[AuthNRequest POST binding]
2744

2845
=== WebFlux
2946

30-
* Added https://github.com/spring-projects/spring-security/issues/7107[nested builder] support in HTTP Security DSL
47+
* Added https://github.com/spring-projects/spring-security/issues/7636[DSL support for custom header writers]
3148
* OAuth 2.0 Client
32-
** Introducing https://github.com/spring-projects/spring-security/pull/7116[ReactiveOAuth2AuthorizedClientManager / ReactiveOAuth2AuthorizedClientProvider]
33-
** Public Client support with https://github.com/spring-projects/spring-security/issues/6446[PKCE]
34-
** Support for https://github.com/spring-projects/spring-security/issues/6003[Resource Owner Password Credentials] grant
35-
** Support for ID Token verification using a https://github.com/spring-projects/spring-security/issues/5465[Symmetric Key] via NimbusReactiveJwtDecoder
36-
** Added https://github.com/spring-projects/spring-security/issues/4442[nonce] to OpenID Connect Authentication Request
37-
** OpenID Connect https://github.com/spring-projects/spring-security/issues/5350[RP-Initiated Logout]
49+
** Added Test support for https://github.com/spring-projects/spring-security/issues/7910[OAuth 2.0 Client], https://github.com/spring-projects/spring-security/issues/7828[OAuth 2.0 Login], and https://github.com/spring-projects/spring-security/issues/7680[OIDC Login]
50+
** Enhanced https://github.com/spring-projects/spring-security/issues/7842[OIDC logout success handler to support `\{baseUrl\}`]
51+
** Added https://github.com/spring-projects/spring-security/issues/7699[OAuth2Authorization success and failure handlers]
52+
** Added https://github.com/spring-projects/spring-security/issues/4886[JSON serialization support for OAuth 2.0 tokens]
53+
** Added https://github.com/spring-projects/spring-security/issues/7569[ReactiveOAuth2AuthorizedClientManager integration with AuthorizedClientService]
3854
* OAuth 2.0 Resource Server
39-
** Introducing https://github.com/spring-projects/spring-security/issues/6513[Token Introspection] (Opaque Tokens)
40-
** https://github.com/spring-projects/spring-security/issues/6727[Multi-tenancy] support
41-
** Added ExchangeFilterFunction that performs https://github.com/spring-projects/spring-security/issues/7284[Bearer Token propagation] (Token Relay)
42-
** Support for multiple https://github.com/spring-projects/spring-security/issues/6883[JWS algorithms] via NimbusReactiveJwtDecoder
43-
* Support for https://github.com/spring-projects/spring-security/issues/5038[X509]
55+
** Added support for <<webflux-oauth2resourceserver-multitenancy,multiple issuers>>
56+
** Added https://github.com/spring-projects/spring-security/issues/7827[test support for Opaque Tokens]
57+
** Improved https://github.com/spring-projects/spring-security/pull/7826[bearer token error handling] for JWT and Opaque Token
58+
59+
=== RSocket
60+
61+
* Added support for https://github.com/spring-projects/spring-security/issues/7935[RSocket Authentication extension]
4462

4563
=== Core
4664

47-
* Introducing <<rsocket,RSocket>> support
48-
* Introducing https://github.com/spring-projects/spring-security/issues/6019[SAML Service Provider] support
49-
* Introducing https://github.com/spring-projects/spring-security/issues/6722[AuthenticationManagerResolver]
50-
* Introducing https://github.com/spring-projects/spring-security/issues/6506[AuthenticationFilter]
51-
* Introducing https://github.com/spring-projects/spring-security/issues/6546[@CurrentSecurityContext] for method arguments
52-
* Converting https://github.com/spring-projects/spring-security/issues/6494[key material] to Key instances
53-
* Support for https://github.com/spring-projects/spring-security/issues/4187[Clear-Site-Data] header
54-
* Introducing https://github.com/spring-projects/spring-security/issues/6453[CompositeHeaderWriter]
55-
* Added https://spring.io/blog/2019/06/10/announcing-nohttp[nohttp] to build
56-
* https://github.com/spring-projects/spring-security/issues/6774[JDK 12] support
57-
* Support for https://github.com/spring-projects/spring-security/issues/4469[path variables] in message expressions
58-
* Configuration classes are proxy-less and support https://github.com/spring-projects/spring-security/issues/6818[proxyBeanMethods=false]
59-
* Added https://github.com/spring-projects/spring-security/issues/5354[Argon2PasswordEncoder]
60-
* Support upgrading between different https://github.com/spring-projects/spring-security/pull/7042[BCrypt encodings]
61-
* Support upgrading between different https://github.com/spring-projects/spring-security/pull/7057[SCrypt encodings]
65+
* Enhanced Authentication Event Publisher support
66+
** Updated https://github.com/spring-projects/spring-security/pull/7802[configuration support]
67+
** Added https://github.com/spring-projects/spring-security/issues/7825,default event>> and <<https://github.com/spring-projects/spring-security/issues/7824[`Map`-based] exception mapping
68+
* Improved https://github.com/spring-projects/spring-security/issues/7891[integration with Spring Data]
69+
* Added support to https://github.com/spring-projects/spring-security/issues/7661[BCrypt to hash byte arrays]
70+
71+
=== Build
72+
73+
* Changed build to https://github.com/spring-projects/spring-security/issues/7788[use version ranges]
74+
* Removed https://github.com/spring-projects/spring-security/issues/4939[dependency on Groovy]

0 commit comments

Comments
 (0)