All Versions
57
Latest Version
Avg Release Cycle
47 days
Latest Release
1707 days ago
Changelog History
Page 4
Changelog History
Page 4
-
v5.1.13.RELEASE Changes
October 07, 2020🍱 🐞 Bug Fixes
- 🔒 SpringSecurityCoreVersion.java getSpringVersion() method does not close stream. #9059
⬆️ 🔨 Dependency Upgrades
- 🚀 Update to Spring Boot 2.1.17.RELEASE #9078
- ⚡️ Update to Hibernate Validator 6.0.21 #9077
- ⚡️ Update to org.aspectj 1.9.6 #9076
- ⚡️ Update to GAE 1.9.82 #9075
- ⚡️ Update to Jackson Databind 2.9.10.6 #9074
- ⚡️ Update to Spring Data Lovelace-SR20 #9073
- ⚡️ Update to Spring Framework 5.1.18 #9072
- ⚡️ Update to Reactor Californium-SR21 #9071
-
v5.1.12.RELEASE Changes
August 05, 2020🍱 ⭐ New Features
- ➕ Add logging #8891
- 🔒 Document improvement for configure(WebSecurity web) and configure(HttpSecurity http) #8857
- 🔒 Use Github Actions PR pipeline and remove Travis for 5.1.x #8722
- 🔒 Use Github Actions PR pipeline in 5.1.x #8717
🍱 🐞 Bug Fixes
- 🔒 ServerBearerTokenAuthenticationConverter throws exceptions instead of signalling error #8898
- 🔒 Resolved bearer token has no padding indicators #8839
- 🛠 Fix ProviderManager Javadoc typo #8813
- 🔒 LoginPageGeneratingWebFilter should honor context path #8810
- 🔒 RoleHierarchy is not used by AbstractAuthorizeTag #8681
- 🔒 OAuth2AuthorizationCodeGrantWebFilter should handle OAuth2AuthorizationException #8674
⬆️ 🔨 Dependency Upgrades
- ⚡️ Update to Spring Ldap 2.3.3 #8943
- ⚡️ Update to Hibernate Validator 6.0.20 #8942
- ⚡️ Update to Hibernate Entitymanager 5.3.17 #8941
- ⚡️ Update to Groovy 2.4.20 #8940
- 🚀 Update to Spring Boot 2.1.16.RELEASE #8939
- ⚡️ Update to Google App Engine 1.9.81 #8938
- ⚡️ Update to Jackson Databind 2.9.10.5 #8937
- ⚡️ Update to Project Reactor Californium-SR20 #8936
- ⚡️ Update to Spring Framework 5.1.17 #8935
- ⚡️ Update to Spring Data Lovelace-SR19 #8934
🍱 ❤️ Contributors
🚀 We'd like to thank all the contributors who worked on this release!
-
v5.1.11.RELEASE Changes
June 03, 2020🍱 ⭐ New Features
- 🔒 HTTP Host header attack #8641
🍱 🐞 Bug Fixes
- ✂ Remove unused field 'digester' in Md4PasswordEncoder #8577
- 🔒 ACL : AclImpl.hashCode leads to StackOverflowError #8571
- 🔒 Blocking in WebSessionServerCsrfTokenRepository #8546
- 🛠 Fix AntPathRequestMatcher Javadoc #8528
- 🔒 Document NoOpPasswordEncoder will not be removed #8523
- 🛠 Fix non-standard HTTP method for CsrfWebFilter #8517
⬆️ 🔨 Dependency Upgrades
-
v5.1.10.RELEASE Changes
May 06, 2020🍱 ⭐ New Features
- 🔒 BCryptPasswordEncoder.encode() throws NPE #8347
🍱 🐞 Bug Fixes
- 🛠 Fix Javadoc punctuation #8496
- ➕ Add ROLE_INFRASTRUCTURE to infrastructure beans #8440
- 🔒 SEC-2664: ActiveDirectoryLdapAuthenticationProvider should wrap communication exceptions in InternalAuthenticationServiceException #8431
- 🛠 Fix typo with correct capitalization #8410
- 🔒 Global ServerSecurityContextRepository ignored by logout #8388
- 🛠 Fix example in javadoc of FilterChainProxy #8353
- 🛠 Fix typo in Javadoc of ServerHttpSecurity#hasAuthority #8339
- 🔒 Java Doc of org.springframework.security.config.annotation.web.builders.HttpSecurity contains grammatical errors #8313
⬆️ 🔨 Dependency Upgrades
-
v5.1.9.RELEASE Changes
April 01, 2020🍱 ⭐️ New Features
- 🔒 OAuth2LoginAuthenticationProvider uses OAuth2AuthorizationCodeAuthenticationProvider #8236
- 🔒 SwitchUserFilter vulnerable to CSRF #8224
- 📚 Update Encryptors documentation for standard and stronger #8215
- 📚 Typo 'properites' -> 'properties' in documentation #8100
- 🔒 Typo 'hasPermision()' in GlobalMethodSecurityBeanDefinitionParser.java #8068
- ✂ Remove unwanted code #7949
🍱 🐞 Bug Fixes
- 🔒 HttpServletRequest.logout() not functioning #8242
- 🔒 oauth2Login WebFlux should not auto-redirect for XHR request #8203
- 🔒 Make OAuth2ErrorHttpMessageConverter more resilient #8181
- 🛠 Fix typo in Javadoc of HttpSecurity#csrf() #8135
- 🛠 Fix typo in AntPathRequestMatcher contructor comment #8046
- 🔒 An AuthenticationManager is required. Oauth2ResourceServer + anonymous disable #8043
- 🔒 OAuth2 access token response parsing fails with nested JSON object #8022
- 🔒 OAuth2AuthorizationCodeGrantWebFilter should also match on query parameters #7968
- 🔒 OAuth2AuthorizationCodeGrantFilter should also match on query parameters #7965
⬆️ 🔨 Dependency Upgrades
- ⚡️ Update to httpclient 4.5.12 #8294
- ⚡️ Update to hibernate-validator 6.0.19.Final #8293
- ⚡️ Update to reactive-streams 1.0.3 #8292
- ⚡️ Update to hibernate-core 5.2.18.Final #8291
- ⚡️ Update to groovy 2.4.19 #8290
- ⚡️ Update to unboundid-ldapsdk 4.0.14 #8289
- ⚡️ Update to okhttp 3.12.10 #8288
- ⚡️ Update to mockwebserver 3.12.10 #8287
- ⚡️ Update to org.powermock 2.0.6 #8286
- 🚀 Update to Spring Boot 2.1.13.RELEASE #8285
- ⚡️ Update to GAE 1.9.79 #8284
- ⚡️ Update to Reactor Californium-SR17 #8283
- ⚡️ Update to Spring Data Lovelace-SR16 #8282
- 🚀 Update to Spring Framework 5.1.14.RELEASE #8281
- ⚡️ Update to Jetty 9.4.22.v20191022 #8093
🍱 ❤️ Contributors
🚀 We'd like to thank all the contributors who worked on this release!
-
v5.1.8.RELEASE Changes
February 05, 2020🍱 ⭐️ New Features
- ✂ Remove redundant validation for redirect-uri #7708
- 🔒 WebClient support should get new access token when expired and client_credentials #7685
🍱 🐞 Bug Fixes
- 🔒 Default LDIF file not picked up in LDAP "unboundid" mode #7853
- 🔒 CompositeServerHttpHeadersWriter Should Execute Sequentially #7735
- 🔒 DelegatingServerAuthenticationSuccessHandler Should Execute Sequentially #7730
- 🔒 DelegatingServerLogoutHandler Should Execute Sequentially #7727
- 🔒 WebFlux oauth2Login returns 500 when bad client credentials #7704
⬆️ 🔨 Dependency Upgrades
- ⚡️ Update to Spring Boot 2.1.12 #7923
- ⚡️ Update to org.slf4j 1.7.30 #7922
- ⚡️ Update to org.powermock 2.0.5 #7921
- ⚡️ Update to hibernate-validator 6.0.18.Final #7920
- ⚡️ Update to hibernate-entitymanager 5.3.15.Final #7919
- ⚡️ Update to org.bouncycastle:bcpkix-jdk15on 1.64 #7918
- ⚡️ Update to org.aspectj 1.9.5 #7917
- ⚡️ Update to httpclient 4.5.11 #7916
- ⚡️ Update to com.squareup.okhttp3 3.12.8 #7915
- ⚡️ Update to Jackson 2.9.10 #7914
- ⚡️ Update to Reactor Californium-SR15 #7913
- ⚡️ Update to Spring Data Lovelace SR15 #7912
- ⚡️ Update to Spring Framework 5.1.13 #7911
-
v5.1.7.RELEASE Changes
November 04, 2019🍱 ⭐️ New Features
- 🔒 CookieServerCsrfRepositoryTests should not start domain with a dot #7501
- 🛠 Fix docs typo WebSecurityConfigurationAdapter->WebSecurityConfigurerAdapter #7225
🍱 🐞 Bug Fixes
- 🔒 OAuth2AuthorizationCodeGrantWebFilter should not restrict redirect-uri #7469
- 🔒 RequestContextSubscriber could put null value in Reactor Context #7410
- 🔒 OAuth2AuthorizationRequest not removed from session #7369
- 🔒 InMemoryReactiveClientRegistrationRepository should not use ConcurrentReferenceHashMap #7359
- 🔒 NimbusJwtDecoderJwkSupport only sets 'application/json' Accept header #7340
- 🔒 SEC-2971: Footnotes are messed up in online docs #7326
- 🔒 Confusing example - WebMvcConfigurer vs WebSecurityConfigurerAdapter #7303
- 🔒 OnCommittedResponseWrapper fails on static resources served by Tomcat 8.5 #7297
- 🛠 Fix WebClient Memory Leaks #7294
- 🔒 Ensure filter order is maintained when using springSecurity() along with other filters #7267
- 🔒 SessionAuthenticationStrategy make HttpSecurity.sessionManagement().maximumSessions(1) unavailability #7262
- 🔒 SEC-2980: Possible race condition in SessionRegistryImpl #7226
-
v5.1.6.RELEASE
August 05, 2019 -
v5.1.5.RELEASE
April 02, 2019 -
v5.1.4.RELEASE
February 13, 2019