6.1.1

版本发布时间: 2023-06-19 23:58:48

spring-projects/spring-security最新发布版本:6.2.0-RC2(2023-10-17 06:00:14)

:star: New Features

Add initial Native section to reference docs #13236
Align Resource Server documentation with Boot's capabilities #13239
Convert to Asciidoctor Tabs #13407
Document How to Handle Method Security in Native Image #13237
Improve javadoc about deprecation of .and() and non-Customizer methods #13273
Make eclipse/vscode project import work #13284
Mention that authorizeHttpRequests does not support GrantedAuthorityDefaults #13229
mockOAuth2Login() does not work in collaboration with Spring Cloud Gateway and TokenRelayGatewayFilter #13254
Use Antora name of security #13331

Additional filters registered when using Custom DSL #13282
AOT Fails to proxy #13369
CasAuthenticationFilter.successfulAuthentication missing call to securityContextRepository.saveContext #13243
DefaultAuthorizationCodeTokenResponseClient.getTokenResponse(OAuth2AuthorizationCodeGrantRequest) can return null #13223
Deprecated hint on BasicAuthenticationFilter #13279
Document missing OAuth2LoginAuthenticationFilter set AuthorizationRequestRepository #13193
Fix Antora Warnings #13294
Fix constant value in XContentTypeOptionsServerHttpHeadersWriter #13221
Fix Documentation Title #13318
Fix legacy-websocket-configuration cross-reference #13206
Fix type on method-security.adoc #13212
http://www.springframework.org/schema/security/spring-security.xsd returns 404 #13209
Migration to EnableMethodSecurity break Transactional on custom PermissionEvaluator #13218
No longer maintained net.sourceforge.nekohtml with known security issues #13287
Provide meaningful error when invalid client-authentication-method is provided #13309
Proxy Server section is not linked in nav #13324
Use consistent list of micrometer tags in web observation handler #13190
UserBuilder does not allow authorities to be overridden #13290

We'd like to thank all the contributors who worked on this release!