On behalf of the community, I’m pleased to announce the release of Spring Security 5.7.0-RC1!

In addition to dependency upgrades, bug fixes, and minor enhancements, the release candidate contains a few noteworthy changes:

• Introduced SecurityContextHolderFilter - Ability to require explicit saving of the SecurityContext

• Added DSL support for Cross Origin Policies headers

• Allow configuring PKCE for confidential clients

• Added SAML 2.0 Login & Single Logout XML support

This release candidate is a good opportunity to give feedback before the actual GA release in mid-May. We look forward to hearing from you.

You can find the complete details in the release notes.