For the latest stable version, please use Spring Security 6.4.1!spring-doc.cn

What’s New in Spring Security 5.8

Spring Security 5.8 provides a number of new features. Below are the highlights of the release.spring-doc.cn

Core

gh-11493 - AuthorizationManager supports SpELspring-doc.cn
Additional XML support for AuthorizationManagerspring-doc.cn
gh-11393 - Additional DSL support for AuthorizationManagerspring-doc.cn
Additional XML Support for `AuthorizationManagerspring-doc.cn
gh-11304 - AuthorizationManager supports RoleHierarchyspring-doc.cn
gh-11076 - AuthorizationManager supports WebSocketsspring-doc.cn
gh-11326 - AuthorizationManager supports AspectJspring-doc.cn
gh-4841, gh-9401 - ReactiveAuthorizationManager supports method securityspring-doc.cn
gh-11625 - Support AuthorizationManager compositionspring-doc.cn

gh-10973 - SecurityContextHolderStrategy can be published as a @Beanspring-doc.cn

gh-11590 - Deprecate Resource Owner Password Grantspring-doc.cn
gh-11383 - Add baseScheme, baseHost, basePort and basePath to the post_logout_redirect_urispring-doc.cn
gh-11661 - Add OpaqueTokenAuthenticationConverterspring-doc.cn
gh-11232 - ClientRegistrations#rest defines 30s connect and read timeoutsspring-doc.cn
gh-11638 - Refresh remote JWK when unknown KID error occursspring-doc.cn

gh-11286 - Support configuring multiple relying party logout bindingsspring-doc.cn
gh-11065 - Allow custom relay state for AuthnRequestsspring-doc.cn
gh-11468 - Simplify AuthnRequest#id accessspring-doc.cn

gh-11073 - Add DelegatingServerHttpHeadersWriterspring-doc.cn
gh-4001 - Add servlet support for CSRF BREACH protectionspring-doc.cn
gh-11959 - Add reactive support for CSRF BREACH protectionspring-doc.cn
gh-11464 - Remember Me supports SHA256 algorithmspring-doc.cn
gh-11908 - Make X-Xss-Protection header value configurable in ServerHttpSecurityspring-doc.cn
gh-11347 - Simplify Java Configuration RequestMatcher Usagespring-doc.cn
gh-9159 - Add securityMatcher as an alias on requestMatcher in HttpSecurityspring-doc.cn
gh-11952 - Add csrfTokenRequestResolver to CsrfDslspring-doc.cn
gh-11916 - HttpSecurityConfiguration picks up ContentNegotiationStrategy beanspring-doc.cn
gh-11971 - Additional support for AuthorizationFilter running for all dispatcher typesspring-doc.cn