We are please to announce the release of Spring Security 4.0.0.RC2.
We were very keen on doing a GA release, but due to community feedback we decided that another RC was necessary. Ultimately, this release resolved nearly 50 tickets.
A summary of changes can be seen below:
- Support for enforcing Same Origin for WebSocket connections
- Refinements in WebSocket Configuration (SEC-2827 SEC-2833 SEC-2853 )
- More intuitive HTTP Response Headers Configuration (SEC-2846)
Assuming everything goes smoothly, the plan is to do a GA release in approximately two weeks. In the meantime, make sure to try everything out and give us feedback!