This version is still in development and is not considered stable yet. For the latest stable version, please use Spring Security 6.4.1!spring-doc.cn

What’s New in Spring Security 6.2

Spring Security 6.2 provides a number of new features. Below are the highlights of the release.spring-doc.cn

Configuration

gh-5011 - (docs) Automatically enable .cors() if CorsConfigurationSource bean is presentspring-doc.cn
gh-13204 - (docs) Add AbstractConfiguredSecurityBuilder.with(…) method to apply configurers returning the builderspring-doc.cn
gh-13587 - blog post Simplify configuration of OAuth2 Client component modelspring-doc.cn
gh-13666, gh-13667, gh-13726, gh-13850 - docs Improved CVE-2023-34035 detectionspring-doc.cn

OAuth 2.0/OIDC

gh-7845 - docs Add OIDC Back-channel Logout Supportspring-doc.cn

Messaging

gh-12532 - Add Security Context Propagation Supportspring-doc.cn

Web

gh-12817 - Make Configurable RedirectStrategy status codespring-doc.cn
gh-13988 - Make Configurable HTTP Basic request parsingspring-doc.cn

Documentation

gh-13784 - docs - Update OAuth2 docs landing page with examplesspring-doc.cn
gh-11926 - docs Document how to publish an AuthenticationManager @Bean without WebSecurityConfigurerAdapterspring-doc.cn