Welcome back to another installment of This Week in Spring.

     We're in December, folks. I just can't believe that it's already December. 

Um, OK, ignore me.
Just astonished. Let's get into the roundup because there is a lot of new content this week.

1. Did you miss SpringOne? Well, that's a shame. You missed out on a lot. However, don't fret, our friends at InfoQ are riding to the rescue with a steady stream of videos from the different talks at SpringOne2GX. The first two talks on the docket? The opening keynote with SpringSource CTO Adrian Colyer, SpringOne 2Gx Keynote - Spring, Yesterday, Today and Tomorrow.

   		On day two, <a href= "http://www.springsource.org/node/3322">Ben Alex lead the SpringOne 2GX technical keynote</a>, a procession of 
   		  demonstrations and thought provoking insights into next generation application development with Spring and on the cloud.
   		
   		 </LI> 
   		
   		
   		<LI> <a href = "http://www.twitter.com/ramnivas">Ramnivas Laddad</a>, all around great guy and one of the brilliant, mad…

We're pleased to an announce the GA release of Spring Security 3.1

The release is available from the Spring Community Downloads area and jars are available from Maven central repository. See the project website for more information.

There's a high level summary of changes in the What's New? section of the reference manual and a full list of changes can be found in the issue tracker.

Download | Reference Manual | FAQ

Dear Spring Community,

I am pleased to announce that Spring Data MongoDB 1.0 RC1 is now available!

The primary goal of the Spring Data project is to provide a familiar and consistent Spring-based programming model for new datastores while retaining store-specific features and capabilities. The Spring Data MongoDB project provides integration with the MongoDB document database. Key functional areas are a POJO centric model for interacting with a MongoDB DBCollection and easily writing a Repository style data access layer.

This is primarily a bug fix release as we move quickly to GA but a few…

In this video Jared Rosoff from 10gen and Thomas Risberg from SpringSource show what the combination of MongoDB and Cloud Foundry has to offer to Spring developers. They develop a sample application combining MongoDB and the Spring Data project, and show how to build and deploy it to the cloud. After 60 minutes, you too will be ready to develop and deploy to the cloud your own Spring applications that use MongoDB.

Be sure to thumbs up the presentation if you find it useful and subscribe to the SpringSourceDev channel to receive updates about all the latest presentation recordings and screencasts.

Dear Spring Community,

I'd like to announce the release of Spring Data JPA 1.0.2.RELEASE. The release includes the following improvements and fixes:

• Fixed query creation for Comparable values (DATAJPA-99)
• Fixed alias detection when entity name contained number (DATAJPA-110)
• SimpleJpaRepository's deleteAll() does not call em.clear() anymore (DATAJPA-111)
• Upgraded to Querydsl 2.2.5 (DATAJPA-102, DATAJPA-115)
• Fixed auditor mappings in AbstractAuditable (DATAJPA-120)
• Consolidate Expression creation for property references and sort orders (DATAJPA-103)
• Fixed dependency injection in QueryDslRepositorySupport (DATAJPA-113)

Downloads | JavaDocs | Reference Documentation | Changelog

To learn more about the project, visit the Spring Data JPA Page. Looking forward to your feedback on the forum or in the issue tracker.

It's been a while since the last Countdown blog post, but the release of 2.0.0.RC3 gives me a good reason to write another. In the last post, I focused on database migration and how we are standardising on the new Database Migration Plugin. I'll be continuing on the theme of persistence here and introducing several great new features, particularly around querying.

Miscellaneous

Let's start with some of the minor improvements. First, abstract domain classes are now treated as most people would expect: an abstract base domain class results in a table for it and its subclasses. For example, consider the…

Following on from yesterday's video, InfoQ has just published the video from the Technical Keynote at SpringOne 2GX 2011 with Ben Alex. Ben discusses in detail the forces that are driving change into enterprise development and provides an overview of the research that Spring engineers are doing to define the next generation of applications. Ben is joined on stage by numerous Spring experts:

• Keith Donald & Jeremy Grelle demonstrate how to use Spring based REST services with PhoneGap to produce iPhone and Android applications
• Craig Walls & Roy Clarkson discuss social media integration with modern web applications
• Graeme Rocher & James Tyrell demonstrate off line operation in an HTML 5 app using an in browser database
• Tim Fox discusses the rise of asynchronous programming models on the server

A shareable version of Technical Keynote slides are also available on our SpringOne 2GX 2011 Keynote Presentations page.

Many thanks to InfoQ for coming to Chicago to record so many of the fantastic SpringOne 2GX presentations.

Welcome back to another installment of This Week in Spring. There's a lot to talk about this week as well as a bevy of new releases, so let's get right to it!

1. Chris Beams has announced the latest and greatest release of Spring 3.1, RC2. This is the intended final release so get the bits and try it out soon. For a tour of what's what in Spring 3.1, check out the release notes and the Spring 3.1 blog series

 <LI> 
	The steady march to Spring Integration 2.1 GA continues. This week, <A href= "http://www.springsource.org/node/3315">Spring Integration 2.1 RC1  was  released</a>.  
There are a lot of new features in  Spring Integration 2.1, including support for GemFire, RabbitMQ, MongoDB, and much, much, more.  For the full details, <a href="https://jira.springsource.org/secure/ReleaseNote.jspa?projectId=10121&version=12341">see the release notes</a>.  </LI>
 <LI>   
<A href ="http://www.springsource.com/developer/sts">SpringSource Tool Suite</A> lead Martin Lippert has announced the <a href="http…

In this short article we look at Cross Site Request Forgery in the context of OAuth2, looking at possible attacks and how they can be countered when OAuth2 is being used to protect web resources.

OAuth2 is a protocol enabling a Client application, often a web application, to act on behalf of a User, but with the User’s permission. The actions a Client is allowed to perform are carried out on a Resource Server (another web application or web service), and the User approves the actions by telling an Authorization Server that he trusts the Client to do what it is asking. Common examples of Authorization Servers on the internet are Facebook and Google, both of which also provide Resource Servers (the Graph API in the case…