Rob Winch
Rob Winch is employed by VMware as the project lead of security related projects within Spring. He is also a committer on the core Spring Framework and co-author for Spring Security LiveLessons and a Spring Security book. In the past he has worked in the health care industry, bioinformatics research, high performance computing, and as a web consultant. When he is not sitting in front of a computer he enjoys cycling with his friends.
Spring Session 1.3.4 Released
This post was authored by Vedran Pavić
On behalf of the community I’m pleased to announce the release of Spring Session 1.3.4.RELEASE. This maintenance release contains several bug fixes and performance improvements. You can find the complete details of the release in the changelog.
Project Page | Documentation | Issues | Gitter | Stack Overflow
Spring Session Bean GA Released
This post was authored by Vedran Pavić
On behalf of the community, I’m pleased to announce the general availability of Spring Session BOM Bean. This is the first release based on Spring Session 2.1 and can be easily consumed with freshly released Spring Boot 2.1. Please read on for the highlights of the release.
Same-Site Cookie support for HttpSession integration
Same-Site Cookie is another mechanism that helps developers to protect from Cross-Site Request Forgery. Our DefaultCookieSerializer has been enhanced to support adding SameSite attribute to session cookie produced by Spring Session. The SameSite attribute is enabled by default with value Lax and is customizable using DefaultCookieSerializer#setSameSite…
Spring Security 5.1.1, 5.0.9, and 4.2.9 Released
On behalf of the community, I am pleased to announce that Spring Security 5.1.1 (changelog) Spring Security 5.0.9 (changelog) and 4.2.9 (changelog) have been released. The releases primarily deliver bug fixes and dependency version updates along with some minor improvements. The releases will be found in the upcoming Spring Boot maintenance releases coming this week.
Spring Session Apple SR6 Released
On behalf of the community, I am pleased to announce that Spring Session Apple SR6 is released. The release includes Spring Session 2.0.8.RELEASE (changelog).
Spring Session BOM Bean-RC1 Released
This post was authored by Vedran Pavić
On behalf of the community, I’m pleased to announce the release of Spring Session BOM Bean-RC1. This release is based on Spring Session 2.1.0.RC1 which resolves a total of 13 issues. Please read on for the highlights of the release.
Support for Java 11
Spring Session now supports Java 11, while the required version of course stays at Java 8. Our CI pipeline has been enhanced so that the project is now continuously verified against Java 8, 10 and 11.
Dependency Upgrades
Spring Session 2.1.0.RC1 builds on the following latest and greatest releases of key…
Spring Session Bean-M1 and Apple-SR4 Released
This post was authored by Vedran Pavić
On behalf of the community I’m pleased to announce the releases of Spring Session BOM Bean-M1 and Apple-SR4. Spring Boot users will be happy to learn that these release were picked up in recent 2.1.0.M1 and 2.0.4.RELEASE releases of Spring Boot, respectively.
Spring Session Bean-M1
The Bean-M1 is first milestone release that is based on Spring Session 2.1.0.M1.
The following table provides an overview of all the included modules and their respective versions:
Module
Version
Spring Session Core
2.1.0.M1
Spring Session Data GemFire
2.0.3.RELEASE
Spring…
Spring Security 5.1.0.M2 Released
On behalf of the community I am pleased to announce the release of Spring Security 5.1.0.M2. This release comes with 100+ tickets closed.
As always we look forward to hearing your feedback! You can find the highlights below:
OAuth2
OAuth2 Resource Server
Basic support for OAuth2 Resource Servers has been added. See oauth2resourceserver
Authorization Code Flow
User’s can now obtain an access token using the OAuth 2.0 Authorization Code grant. See the authcodegrant sample.
WebClient and OAuth2 Support
There is now built in support for OAuth2 and WebClient support. The support allows:
-
Adding the access token to the request
-
Automatic refreshing of the access token when it expires
-
Resolving the access token to use
…
Spring Session Apple SR3 Released
This post was authored by Vedran Pavić
On behalf of the community I’m pleased to announce the release of Spring Session BOM Apple-SR3. This release includes an update of Spring Session core modules (which include Data Redis, Hazelcast and JDBC) to 2.0.4.RELEASE.
The following table provides an overview of all the included modules and their respective versions:
Module
Version
Spring Session Core
2.0.4.RELEASE
Spring Session Data GemFire
2.0.2.RELEASE
Spring Session Data Geode
2.0.2.RELEASE
Spring Session Data MongoDB
2.0.2.RELEASE
Spring Session Data Redis
2.0.4.RELEASE
Spring Session Hazelcast
…Spring Security 5.0.6 and 4.2.7 Released
On behalf of the community, I am pleased to announce that the Spring Security 5.0.6 (changelog) and 4.2.7 (changelog) have been released. The releases primarily delivers bug fixes and dependency version updates along with some minor improvements. The releases will be found in the upcoming Spring Boot maintenance releases coming later this week.