3. What’s New in Spring Security 5.2

3. What’s New in Spring Security 5.2
Prev	Part I. Preface	Next

3. What’s New in Spring Security 5.2

Spring Security 5.2 provides a number of new features. Below are the highlights of the release.

3.1 Servlet

Added nested builder support in HTTP Security DSL
OAuth 2.0 Client
- Introducing OAuth2AuthorizedClientManager / OAuth2AuthorizedClientProvider
- Added AuthorizedClientServiceOAuth2AuthorizedClientManager which is capable of operating outside of a HttpServletRequest context
- Public Client support with PKCE
- Support for Resource Owner Password Credentials grant
- Support for ID Token verification using a Symmetric Key via NimbusJwtDecoder
- Added nonce to OpenID Connect Authentication Request
- OpenID Connect RP-Initiated Logout
- Updated documentation
OAuth 2.0 Resource Server
- Introducing Token Introspection (Opaque Tokens)
- Multi-tenancy support
- Added ExchangeFilterFunction that performs Bearer Token propagation (Token Relay)
- Support for multiple JWS algorithms via NimbusJwtDecoder
- Test support for mock JWT
- Added JWE sample
- Updated documentation

3.2 WebFlux

Added nested builder support in HTTP Security DSL
OAuth 2.0 Client
- Introducing ReactiveOAuth2AuthorizedClientManager / ReactiveOAuth2AuthorizedClientProvider
- Public Client support with PKCE
- Support for Resource Owner Password Credentials grant
- Support for ID Token verification using a Symmetric Key via NimbusReactiveJwtDecoder
- Added nonce to OpenID Connect Authentication Request
- OpenID Connect RP-Initiated Logout
OAuth 2.0 Resource Server
- Introducing Token Introspection (Opaque Tokens)
- Multi-tenancy support
- Added ExchangeFilterFunction that performs Bearer Token propagation (Token Relay)
- Support for multiple JWS algorithms via NimbusReactiveJwtDecoder
Support for X509

3.3 Core

Introducing RSocket support
Introducing SAML Service Provider support
Introducing AuthenticationManagerResolver
Introducing AuthenticationFilter
Introducing @CurrentSecurityContext for method arguments
Converting key material to Key instances
Support for Clear-Site-Data header
Introducing CompositeHeaderWriter
Added nohttp to build
JDK 12 support
Support for path variables in message expressions
Configuration classes are proxy-less and support proxyBeanMethods=false
Added Argon2PasswordEncoder
Support upgrading between different BCrypt encodings
Support upgrading between different SCrypt encodings

Prev	Up	Next
2. Spring Security Community	Home	4. Getting Spring Security