On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.4.

The 1.4 release contains a few noteworthy new features:

• Simplified configuring authorization server using HttpSecurity.with() (gh-1725)
• Support for OpenID Connect 1.0 prompt=none parameter (gh-501)
• Ability to customize validation of OpenID Connect 1.0 RP-Initiated Logout Requests (gh-1723)
• Ability to customize success handling of OpenID Connect 1.0 RP-Initiated Logout Requests (gh-1244)
• Added How-to guide demonstrating how to implement the core services with Redis
…

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.4.0-RC1, 1.3.3 and 1.2.7.

See the 1.4.0-RC1, 1.3.3 and 1.2.7 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.4.0-M2.

See the 1.4.0-M2 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.4.0-M1, 1.3.2 and 1.2.6.

See the 1.4.0-M1, 1.3.2 and 1.2.6 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.3.1 and 1.2.5.

See the 1.3.1 and 1.2.5 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.3.

The 1.3 release contains a few noteworthy new features:

• RFC 8705 OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens (gh-101)
• RFC 8693 OAuth 2.0 Token Exchange (gh-1525)
• Multitenancy support (gh-1342) -- see the guide How-to: Implement Multitenancy

See the 1.3 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become…

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.3.0-RC1, 1.2.4 and 1.1.7.

See the 1.3.0-RC1, 1.2.4 and 1.1.7 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.2.3, 1.1.6 and 1.0.6.

The releases address CVE-2024-22258 for PKCE Downgrade in Spring Authorization Server.

Tanzu Spring Runtime

Commercial customers using Spring Boot 2.7 or 3.0 can make use of the new Spring Boot Hotfix release mechanism, providing versions 2.7.20.2 and 3.0.15.2. Spring Boot Hotfix releases are timely releases that patch dependency management to use the latest Spring artifacts when a CVE fix is released. The hotfix versions released…

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.2.2 and 1.1.5.

See the 1.2.2 and 1.1.5 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.3.0-M2.

See the release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board