[callout title=Updated Dec 11 2014]Although originally about Spring Security 4.0.0.M2, the blog has been updated to reflect improvements found in Spring Security 4.0 RC1.[/callout]

Introduction

Previously, an application could use Spring Security to perform authentication in a WebSocket application. This worked because the Principal of an HttpServletRequest will be propagated to the WebSocket Session.

The problem is that authorization was limited to handshake. This means that once the connection was made, there was no way to provide any granularity to authorization of the WebSocket application…

I was recently made aware that a public API we were using for one of our guides contained objectionable material. After confirming this, I immediately responded that we would pick another source. Wishing to avoid such an issue in the future, I decided the best solution was to build our own RESTful quote service. So I decided to use the best tools to do so, the Spring stack, and was able to migrate the very next day.

Picking your tools

To kick things off, I made a check list of what I knew would be the right tools for the job of creating a RESTful web service.

• Spring Data JPA - quickly pre-load, fetch, and potentially update content
• Spring MVC - solid REST support since Spring 3
• Spring Boot - create all the needed components with little to no effort
• http://start.spring.io - assemble a project by simply checking the desired items on a form
…

Welcome to another installment of This Week in Spring! It's a few weeks before SpringOne2GX 2014, already! Time sure flies when you're having fun! The beginning of 2015 will mark the 4th year of This Week in Spring, and it's more exciting every week! I'm hoping to see as many of you as possible at SpringOne2GX 2014. This is sure to be an amazing event.

Anyway, with that out of the way, let's get on to this week's roundup!

1. Spring Security lead Rob Winch just announced Spring Security 4.0.0.M2, which

provides a lot of great features, including improved Security-aware testing support, Spring Data integration, support for websocket security, and ties into the nascent Spring Session projet that was derived from the work for this release. Check it out! Rob also announced Spring Security 3.2.5 and 3.1.7…

I'm pleased to announce the release of Spring Security 4.0.0.M2 available in the Spring Milestone repository.

[callout title=SpringOne 2GX 2014 is around the corner]Book your place at SpringOne in Dallas, TX for Sept 8-11 soon. It's simply the best opportunity to find out first hand all that's going on and to provide direct feedback. From 0 to Spring Security 4.0 session will contain detailed information on how to get started with Spring Security and provide a deep dive into the new features found in Spring Security 4. Of course there plenty of other exciting Spring related talks![/callout]

…

On behalf of the team I am pleased to announce the second release candidate of Spring Framework 4.1 is now available from our milestone repository. This release includes over 70 fixes and improvements.

Spring 4.1 is really coming up soon: please try it out and let us know if you run into any issue. We're looking forward to getting in touch via Twitter, StackOverflow or JIRA.

SpringOne 2GX 2014 is around the corner

Book your place at SpringOne in Dallas, TX for Sept 8-11 soon. It's simply the best opportunity to find out first hand all that's going on and to provide direct feedback. There will…

Spring Security 3.2.5 (change log) and 3.1.7 (change log) have been released and are available in Maven Central. Important highlights of this release are:

• This release contains a fix for CVE-2014-3527 which resolves an issue where a malicious CAS Service can impersonate another CAS Service when using proxy tickets.
• This release updates the transitive dependencies of the cas module to cas-client-core which has a fix for CVE-2014-4172. This issue was not in Spring Security itself, but the library in which it depends on.

A special thanks to Scott Battaglia & the rest of the CAS team for…

Welcome to another installment of This Week in Spring. We've got a lot of cool stuff happening and, as you might imagine, the entire team is abuzz in preparation for SpringOne2GX 2014, coming in just a few short weeks! If you haven't registered, now's the time to do so!

1. Spring Security lead and all-around sleepless ninja Rob Winch has just announced that Spring MVC Test HtmlUnit 1.0.0.M2 has been released. This is an awesome release if you're trying to unit test real pages with Spring MVC

• Spring Boot 1.1.5 has just been released. The new release mainly addresses a few issues and is a recommended upgrade for all users.
• I really enjoyed this blog, ¿Qué es Spring Framework?, which tries to explain what the fundamental value of Spring is. Largely, the (Spanish language) article explains that Spring handles the lifecycle for objects in a consistent way. It's easy to plug in various frameworks, software, around the edges when the fundamental life-cycle is handled. I would point out that this post uses Spring…

We are happy to announce the first release candidate of the Spring Data release train Evans. We ship the following modules:

• Spring Data Commons 1.9 RC1 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data JPA 1.7 RC1 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data MongoDB 1.6 RC1 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Neo4j 3.2 RC1 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Solr 1.3 RC1 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Couchbase 1.2 RC1 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Cassandra 1.1 RC1 - Artifacts - JavaDocs - Documentation - Changelog
• Spring Data Elasticsearch 1.1 RC1 - Artifacts - JavaDocs - Documentation - …

We are pleased to announce that Spring Boot 1.1.5 has been released and is available from repo.spring.io and Maven Central.

This release addresses a number of issues and is a recommended upgrade for all Spring Boot users. For a complete list of changes please refer to the issue tracker.

Project Page | GitHub | Issues | Documentation