|
This version is still in development and is not considered stable yet. For the latest stable version, please use Spring Security 7.1.1! |
What’s New in Spring Security 7.2
Authentication
-
gh-17655 - Make One-Time Token account status checks opt-in
Web
-
Since Spring Framework’s
HttpMethod#valueOfnow normalizes casing,StrictServerWebExchangeFirewallno longer detects a non-canonical-case HTTP method (for example,getinstead ofGET) as a distinct value; such requests are processed as the canonical method instead of being rejected. Applications with a customizedServerExchangeRejectedHandlershould be aware it is no longer invoked for this case.
