Spring Security 5.0.0.RC1 Released
On behalf of the community, I’m pleased to announce the release of Spring Security 5.0.0.RC1. This release resolves 150+ issues. Below are the highlights of this release:
-
WebFlux Security Highlights
-
OAuth 2.0 Highlights
-
Core Highlights
ReactiveSecurityContextHolder
Previously, Spring Security used the ServerWebExchange.getPrincipal()
as the source of truth for who was authenticated. The authenticated user was copied to Reactor’s Context to support method security which used the Reactor Context as it’s source of…