What’s New in Spring Security 6.3

Spring Security 6.3 提供了许多新功能。以下是该版本的要点。

Spring Security 6.3 provides a number of new features. Below are the highlights of the release.

General

  • blog post - Added Passive JDK Serialization/Deserialization for Seamless Upgrades

Authorization

  • gh-14596 - docs - Add Programmatic Proxy Support for Method Security

Configuration

CAS

  • gh-14193 - Added support for CAS Gateway Authentication

Crypto

  • gh-14202 - Migrated spring-security-rsa into spring-security-crypto

OAuth2

  • gh-13259 - Customize when UserInfo is called

  • gh-14168 - Introduce Customizable AuthorizationFailureHandler in OAuth2AuthorizationRequestRedirectFilter

  • gh-5199, gh-14701 - Add support for OAuth 2.0 Token Exchange Grant

  • gh-14672 - Customize mapping the OidcUser from OidcUserRequest and OidcUserInfo

Documentation