Spring Security ninja Joe Grandja just announced Spring Security OAuth 2.1.0 and 2.0.13. This release includes new features supporting JSON Web Signature (JWS) verification using JSON Web Key (JWK). This feature provides support for authorization servers and have implemented key rollover/rotation.