In May 2020, we announced that the Spring Security OAuth (legacy) project will reach end-of-life in May 2022. The same end-of-life timeline applies to the Spring Boot 2 auto-configuration project.

We are now 6 months away from the EOL date, and the currently supported version branch is 2.5.x, which is limited to security fixes only.

We recently announced the release of Spring Authorization Server 0.2.0, which is the first officially supported production-ready version backed by our new support policy.

We encourage users to migrate their applications to Spring Authorization Server 0.2.0, as it is a direct replacement for the OAuth 2.0 Authorization Server support provided by Spring Security OAuth (legacy).