What’s New in Spring Security 7.1

Core

gh-18634 - Added InetAddressMatcher
gh-18960 - Added AllRequiredFactorsAuthorizationManager.anyOf

Web

gh-18755 - Include charset in WWW-Authenticate header
Added ConditionalAuthorizationManager
Added when and withWhen conditions to AuthorizationManagerFactories.multiFactor() for Programmatic MFA
Added MultiFactorCondition.WEBAUTHN_REGISTERED to @EnableMultiFactorAuthentication(when = …) for conditionally requiring MFA for WebAuthn Users
gh-18926 - Add PreFlightRequestFilter Support

OAuth 2.0

gh-18745 - Add RestClientOpaqueTokenIntrospector

WebAuthn

gh-18113 - Publish Authentication Events in WebAuthn