Joe Grandja

Joe Grandja

Joe Grandja is a core committer on the Spring Security team. He has been leading the efforts in building the next generation of OAuth2 and OpenID Connect support in Spring Security and Spring Authorization Server.

With over 25 years of industry experience, Joe has been a Solution Architect, a Software Engineer, a Team Lead, and a Consultant. His past experience has been mainly focused in the Financial Services sector in the Toronto, Canada, area. He has designed, built, and delivered enterprise grade banking applications and platforms in the Personal and Commercial and Brokerage and Investing divisions. He has worked closely with the InfoSec teams within banks to ensure security and regulatory compliance.

Blog posts by Joe Grandja

Spring Authorization Server 1.4.0-RC1, 1.3.3 and 1.2.7 available now

Releases | October 23, 2024 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.4.0-RC1, 1.3.3 and 1.2.7.

See the 1.4.0-RC1, 1.3.3 and 1.2.7 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

Spring Authorization Server 1.4.0-M2 available now

Releases | September 17, 2024 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.4.0-M2.

See the 1.4.0-M2 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

Spring Authorization Server 1.4.0-M1, 1.3.2 and 1.2.6 available now

Releases | August 20, 2024 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.4.0-M1, 1.3.2 and 1.2.6.

See the 1.4.0-M1, 1.3.2 and 1.2.6 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

Spring Authorization Server 1.3.1 and 1.2.5 available now

Releases | June 19, 2024 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.3.1 and 1.2.5.

See the 1.3.1 and 1.2.5 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

Spring Authorization Server 1.3 goes GA

Releases | May 22, 2024 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the release of Spring Authorization Server 1.3.

The 1.3 release contains a few noteworthy new features:

See the 1.3 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become…

Spring Authorization Server 1.3.0-RC1, 1.2.4 and 1.1.7 available now

Releases | April 16, 2024 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the releases of Spring Authorization Server 1.3.0-RC1, 1.2.4 and 1.1.7.

See the 1.3.0-RC1, 1.2.4 and 1.1.7 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

Spring Authorization Server 1.2.3, 1.1.6 and 1.0.6 Available Now Including Fixes for CVE-2024-22258

Releases | March 19, 2024 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.2.3, 1.1.6 and 1.0.6.

The releases address CVE-2024-22258 for PKCE Downgrade in Spring Authorization Server.

Tanzu Spring Runtime

Commercial customers using Spring Boot 2.7 or 3.0 can make use of the new Spring Boot Hotfix release mechanism, providing versions 2.7.20.2 and 3.0.15.2. Spring Boot Hotfix releases are timely releases that patch dependency management to use the latest Spring artifacts when a CVE fix is released. The hotfix versions released…

Spring Authorization Server 1.2.2 and 1.1.5 available now

Releases | February 21, 2024 | ...

On behalf of the team and everyone who has contributed, it is my pleasure to announce the general availability of Spring Authorization Server 1.2.2 and 1.1.5.

See the 1.2.2 and 1.1.5 release notes for complete details.

To get started using Spring Authorization Server, see the Getting Started chapter of the reference documentation and the samples to become familiar with setup and configuration.

Project Page | GitHub Issues | Project Board

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all