From edb6665103e6f2b36cfc3966094dea40c1f2669a Mon Sep 17 00:00:00 2001 From: Josh Cummings Date: Mon, 2 Mar 2020 09:27:42 -0700 Subject: [PATCH] Update What's New Section Fixes gh-8062 --- .../asciidoc/_includes/about/whats-new.adoc | 103 ++++++++++-------- 1 file changed, 58 insertions(+), 45 deletions(-) diff --git a/docs/manual/src/docs/asciidoc/_includes/about/whats-new.adoc b/docs/manual/src/docs/asciidoc/_includes/about/whats-new.adoc index 0e1a3f8a93..340685a0b7 100644 --- a/docs/manual/src/docs/asciidoc/_includes/about/whats-new.adoc +++ b/docs/manual/src/docs/asciidoc/_includes/about/whats-new.adoc @@ -1,61 +1,74 @@ [[new]] -== What's New in Spring Security 5.2 +== What's New in Spring Security 5.3 -Spring Security 5.2 provides a number of new features. +Spring Security 5.3 provides a number of new features. Below are the highlights of the release. +=== Documentation Updates + +We will continue our effort to rewrite the documentation. + +Here's what you'll see in this release: + +* Added <> +* Updated <> +** Rewrote +** Added how things work, including > +* Added <<{gh-samples-url}/boot/kotlin,Kotlin samples>> +* Reskinned +** Added scrolling menu +** Added <> +** Updated styles + === Servlet -* Added https://github.com/spring-projects/spring-security/issues/5557[nested builder] support in HTTP Security DSL +* Added <> * OAuth 2.0 Client -** Introducing https://github.com/spring-projects/spring-security/pull/6845[OAuth2AuthorizedClientManager / OAuth2AuthorizedClientProvider] -** Added https://github.com/spring-projects/spring-security/issues/7122[AuthorizedClientServiceOAuth2AuthorizedClientManager] which is capable of operating outside of a HttpServletRequest context -** Public Client support with https://github.com/spring-projects/spring-security/issues/6446[PKCE] -** Support for https://github.com/spring-projects/spring-security/issues/6003[Resource Owner Password Credentials] grant -** Support for ID Token verification using a https://github.com/spring-projects/spring-security/issues/5465[Symmetric Key] via NimbusJwtDecoder -** Added https://github.com/spring-projects/spring-security/issues/4442[nonce] to OpenID Connect Authentication Request -** OpenID Connect https://github.com/spring-projects/spring-security/issues/5350[RP-Initiated Logout] -** Updated <> +** Added Test support for <>, <>, and <> +** Improved https://github.com/spring-projects/spring-security/pull/7748[customizing the OAuth 2.0 Authorization Request] +** Enhanced https://github.com/spring-projects/spring-security/issues/7842[OIDC logout success handler to support `\{baseUrl\}`] +** Added https://github.com/spring-projects/spring-security/issues/7840[OAuth2Authorization success and failure handlers] +** Added https://github.com/spring-projects/spring-security/issues/5184[XML support] +** Added <> +** Added https://github.com/spring-projects/spring-security/issues/4886[JSON serialization support for OAuth 2.0 tokens] * OAuth 2.0 Resource Server -** Introducing https://github.com/spring-projects/spring-security/issues/5200[Token Introspection] (Opaque Tokens) -** https://github.com/spring-projects/spring-security/issues/5351[Multi-tenancy] support -** Added ExchangeFilterFunction that performs https://github.com/spring-projects/spring-security/issues/5334[Bearer Token propagation] (Token Relay) -** Support for multiple https://github.com/spring-projects/spring-security/issues/6883[JWS algorithms] via NimbusJwtDecoder -** Test support for https://github.com/spring-projects/spring-security/issues/6634[mock JWT] -** Added https://github.com/spring-projects/spring-security/issues/7033[JWE] sample -** Updated <> +** Added support for <> +** Added <> +** Added https://github.com/spring-projects/spring-security/pull/7962[generic claim validator] +** Added https://github.com/spring-projects/spring-security/issues/5185[XML support] +** Improved https://github.com/spring-projects/spring-security/pull/7826[bearer token error handling] for JWT and Opaque Token +* SAML 2.0 +** Added <> configuration +** Added support for https://github.com/spring-projects/spring-security/issues/7711[AuthNRequest signatures] +** Added support for https://github.com/spring-projects/spring-security/pull/7759[AuthNRequest POST binding] === WebFlux -* Added https://github.com/spring-projects/spring-security/issues/7107[nested builder] support in HTTP Security DSL +* Added https://github.com/spring-projects/spring-security/issues/7636[DSL support for custom header writers] * OAuth 2.0 Client -** Introducing https://github.com/spring-projects/spring-security/pull/7116[ReactiveOAuth2AuthorizedClientManager / ReactiveOAuth2AuthorizedClientProvider] -** Public Client support with https://github.com/spring-projects/spring-security/issues/6446[PKCE] -** Support for https://github.com/spring-projects/spring-security/issues/6003[Resource Owner Password Credentials] grant -** Support for ID Token verification using a https://github.com/spring-projects/spring-security/issues/5465[Symmetric Key] via NimbusReactiveJwtDecoder -** Added https://github.com/spring-projects/spring-security/issues/4442[nonce] to OpenID Connect Authentication Request -** OpenID Connect https://github.com/spring-projects/spring-security/issues/5350[RP-Initiated Logout] +** Added Test support for https://github.com/spring-projects/spring-security/issues/7910[OAuth 2.0 Client], https://github.com/spring-projects/spring-security/issues/7828[OAuth 2.0 Login], and https://github.com/spring-projects/spring-security/issues/7680[OIDC Login] +** Enhanced https://github.com/spring-projects/spring-security/issues/7842[OIDC logout success handler to support `\{baseUrl\}`] +** Added https://github.com/spring-projects/spring-security/issues/7699[OAuth2Authorization success and failure handlers] +** Added https://github.com/spring-projects/spring-security/issues/4886[JSON serialization support for OAuth 2.0 tokens] +** Added https://github.com/spring-projects/spring-security/issues/7569[ReactiveOAuth2AuthorizedClientManager integration with AuthorizedClientService] * OAuth 2.0 Resource Server -** Introducing https://github.com/spring-projects/spring-security/issues/6513[Token Introspection] (Opaque Tokens) -** https://github.com/spring-projects/spring-security/issues/6727[Multi-tenancy] support -** Added ExchangeFilterFunction that performs https://github.com/spring-projects/spring-security/issues/7284[Bearer Token propagation] (Token Relay) -** Support for multiple https://github.com/spring-projects/spring-security/issues/6883[JWS algorithms] via NimbusReactiveJwtDecoder -* Support for https://github.com/spring-projects/spring-security/issues/5038[X509] +** Added support for <> +** Added https://github.com/spring-projects/spring-security/issues/7827[test support for Opaque Tokens] +** Improved https://github.com/spring-projects/spring-security/pull/7826[bearer token error handling] for JWT and Opaque Token + +=== RSocket + +* Added support for https://github.com/spring-projects/spring-security/issues/7935[RSocket Authentication extension] === Core -* Introducing <> support -* Introducing https://github.com/spring-projects/spring-security/issues/6019[SAML Service Provider] support -* Introducing https://github.com/spring-projects/spring-security/issues/6722[AuthenticationManagerResolver] -* Introducing https://github.com/spring-projects/spring-security/issues/6506[AuthenticationFilter] -* Introducing https://github.com/spring-projects/spring-security/issues/6546[@CurrentSecurityContext] for method arguments -* Converting https://github.com/spring-projects/spring-security/issues/6494[key material] to Key instances -* Support for https://github.com/spring-projects/spring-security/issues/4187[Clear-Site-Data] header -* Introducing https://github.com/spring-projects/spring-security/issues/6453[CompositeHeaderWriter] -* Added https://spring.io/blog/2019/06/10/announcing-nohttp[nohttp] to build -* https://github.com/spring-projects/spring-security/issues/6774[JDK 12] support -* Support for https://github.com/spring-projects/spring-security/issues/4469[path variables] in message expressions -* Configuration classes are proxy-less and support https://github.com/spring-projects/spring-security/issues/6818[proxyBeanMethods=false] -* Added https://github.com/spring-projects/spring-security/issues/5354[Argon2PasswordEncoder] -* Support upgrading between different https://github.com/spring-projects/spring-security/pull/7042[BCrypt encodings] -* Support upgrading between different https://github.com/spring-projects/spring-security/pull/7057[SCrypt encodings] +* Enhanced Authentication Event Publisher support +** Updated https://github.com/spring-projects/spring-security/pull/7802[configuration support] +** Added https://github.com/spring-projects/spring-security/issues/7825,default event>> and <