spring-security/docs/modules/ROOT/pages/whats-new.adoc

[[new]]
= What's New in Spring Security 5.6

Spring Security 5.6 provides a number of new features.
Below are the highlights of the release.

[[whats-new-servlet]]
=== Servlet
* Core

** Introduced https://github.com/spring-projects/spring-security/issues/10226[`SecurityContextChangedListener`]

* Configuration

** Introduced https://github.com/spring-projects/spring-security/pull/9630[`AuthorizationManager`] for method security

* SAML 2.0 Service Provider

** Added https://github.com/spring-projects/spring-security/pull/9483[SAML 2.0 Single Logout Support]
** Added https://github.com/spring-projects/spring-security/pull/10060[Saml2AuthenticationRequestRepository]
** Added https://github.com/spring-projects/spring-security/issues/9486[`RelyingPartyRegistrationResolver`]
** Improved ``Saml2LoginConfigurer``'s handling of https://github.com/spring-projects/spring-security/issues/10268[`Saml2AuthenticationTokenConverter`]


* OAuth 2.0 Login

** Added https://github.com/spring-projects/spring-security/pull/10041[`Converter` for `Authentication` result]

* OAuth 2.0 Client

** Improved https://github.com/spring-projects/spring-security/pull/9791[client credentials] encoding
** Improved https://github.com/spring-projects/spring-security/pull/9779[access token response] parsing
** Added https://github.com/spring-projects/spring-security/pull/10155[custom grant types support] for authorization requests

* Testing

** Added support to https://github.com/spring-projects/spring-security/pull/9737[propagate the TestSecurityContextHolder to SecurityContextHolder]

[[whats-new-webflux]]
=== WebFlux

** Improved https://github.com/spring-projects/spring-security/pull/9791[client credentials] encoding
** Added https://github.com/spring-projects/spring-security/pull/10131[custom headers support] for access token requests
Extract subsections for preface Issue: gh-2567 2018-03-05 16:56:47 -06:00			`[[new]]`
Remove include servlet/saml2/index.adoc 2021-07-30 13:52:15 -05:00			`= What's New in Spring Security 5.6`
Extract subsections for preface Issue: gh-2567 2018-03-05 16:56:47 -06:00
Polish AuthorizationManager Method Security - Removed consolidated pointcut advisor in favor of each interceptor being an advisor. This allows Spring AOP to do more of the heavy lifting of selecting the set of interceptors that applies - Created new method context for after interceptors instead of modifying existing one - Added documentation - Added XML support - Added AuthorizationInterceptorsOrder to simplify interceptor ordering - Adjusted annotation lookup to comply with JSR-250 spec - Adjusted annotation lookup to exhaustively search for duplicate annotations - Separated into three @Configuration classes, one for each set of authorization annotations Issue gh-9289 2021-04-07 15:33:47 -06:00			`Spring Security 5.6 provides a number of new features.`
Extract subsections for preface Issue: gh-2567 2018-03-05 16:56:47 -06:00			`Below are the highlights of the release.`

Specify Section Ids in What's New Issue gh-8062 2020-03-04 11:01:59 -07:00			`[[whats-new-servlet]]`
Separate Servlet and WebFlux Feature Lists Issue: gh-5857 2018-09-18 10:14:40 -06:00			`=== Servlet`
Update What's New in 5.6 2021-09-20 09:09:45 -06:00			`* Core`

			** Introduced https://github.com/spring-projects/spring-security/issues/10226[`SecurityContextChangedListener`]

Add Configuration section to What's New Closes gh-9588 2021-04-09 15:27:40 +02:00			`* Configuration`

Polish AuthorizationManager Method Security - Removed consolidated pointcut advisor in favor of each interceptor being an advisor. This allows Spring AOP to do more of the heavy lifting of selecting the set of interceptors that applies - Created new method context for after interceptors instead of modifying existing one - Added documentation - Added XML support - Added AuthorizationInterceptorsOrder to simplify interceptor ordering - Adjusted annotation lookup to comply with JSR-250 spec - Adjusted annotation lookup to exhaustively search for duplicate annotations - Separated into three @Configuration classes, one for each set of authorization annotations Issue gh-9289 2021-04-07 15:33:47 -06:00			** Introduced https://github.com/spring-projects/spring-security/pull/9630[`AuthorizationManager`] for method security
Update What's New section Adds the SAML 2.0 Single Logout Support and the new Saml2AuthenticationRequestRepository 2021-09-17 13:57:23 -03:00
			`* SAML 2.0 Service Provider`

			`** Added https://github.com/spring-projects/spring-security/pull/9483[SAML 2.0 Single Logout Support]`
Update What's New for 5.6 2021-09-17 10:44:51 -05:00			`** Added https://github.com/spring-projects/spring-security/pull/10060[Saml2AuthenticationRequestRepository]`
Update What's New in 5.6 2021-09-20 09:09:45 -06:00			** Added https://github.com/spring-projects/spring-security/issues/9486[`RelyingPartyRegistrationResolver`]
			** Improved ``Saml2LoginConfigurer``'s handling of https://github.com/spring-projects/spring-security/issues/10268[`Saml2AuthenticationTokenConverter`]

Update What's New for 5.6 2021-09-17 10:44:51 -05:00
			`* OAuth 2.0 Login`

			** Added https://github.com/spring-projects/spring-security/pull/10041[`Converter` for `Authentication` result]

			`* OAuth 2.0 Client`

			`** Improved https://github.com/spring-projects/spring-security/pull/9791[client credentials] encoding`
			`** Improved https://github.com/spring-projects/spring-security/pull/9779[access token response] parsing`
			`** Added https://github.com/spring-projects/spring-security/pull/10155[custom grant types support] for authorization requests`

Update What's New in 5.6 2021-09-20 12:18:27 -03:00			`* Testing`

			`** Added support to https://github.com/spring-projects/spring-security/pull/9737[propagate the TestSecurityContextHolder to SecurityContextHolder]`

Update What's New for 5.6 2021-09-17 10:44:51 -05:00			`[[whats-new-webflux]]`
			`=== WebFlux`

			`** Improved https://github.com/spring-projects/spring-security/pull/9791[client credentials] encoding`
			`** Added https://github.com/spring-projects/spring-security/pull/10131[custom headers support] for access token requests`