On behalf of the team and everyone who has contributed, I am pleased to announce that the first release candidate of Spring Security 6.4 is available.

This release brings several compelling features including:

• Support for Passkeys
• Support for making access token requests with RestClient
• Improved support for making access token requests with WebClient
• Support for building a ClientRegistration from provided configuration
• AuthorizationManager now returns an AuthorizationResult
• AuthorizationEventPublisher now accepts an AuthorizationResult
• Support for extracting nested authorities via SpEL expressions
• Security Observations are now selectable

And much more!

You can read more about each of these in the What's New section of the 6.4 documentation.