Hi, Spring fans! In this installment, Josh Long talks to Spring Security engineer Ria Stein. Ria is a new, but impactful, engineer on the Spring Security team working on things like Josh's beloved lambda DSL.

• Eleftheria Stein-Kousathana's page on the Spring team roster
• Ria just published a post on the Spring Security lambda DSL on which she worked. Definitely worth a read!

Overview of Lambda DSL

The release of Spring Security 5.2 includes enhancements to the DSL, which allow HTTP security to be configured using lambdas.

It is important to note that the prior configuration style is still valid and supported. The addition of lambdas is intended to provide more flexibility, but their usage is optional.

You may have seen this style of configuration in the Spring Security documentation or samples. Let us take a look at how a lambda configuration of HTTP security compares to the previous configuration style.

Configuration using lambdas

@EnableWebSecurity
public…

Dear Spring Community,

I am happy to announce the 4.4.2 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia.

Highlights from this release include:

• (Spring Boot), (Eclipse) enhancement: new actions to connect/refresh/disconnect live hover information for running Spring Boot projects now available from the Boot Dashboard menus (context-menu + view toolbar)
• (Spring Boot), (Eclipse) enhancement: Optional link console tab with Boot Dashboard selection (#386)
• (Spring Boot), (VSCode): early version of more detailed progress reporting for live hover information mechanism
• (Concourse) enhancement: various updates
• bugfixes
…

Hi, Spring fans! Welcome to another of This Week in Spring. We've got a lot to cover, so let's get to it!

• Spring Data Moore SR2 and Lovelace SR13 available
• A Bootiful Podcast: RedHat / IBM's Sébastien Blanc on OAuth, KeyCloak, the French riviera, and more
• Spring Cloud Open Service Broker 3.1.0.RC1 Released
• Spring Security OAuth 2.4.0, 2.3.8 Released
• Spring Security OAuth 2.0 Roadmap Update
• Spring Cloud Hoxton.RC2 Released
• My three hour masterclass on all things Reactive Spring from Devoxx Belgium 2019 is now online
• This Month in RabbitMQ: November 2019
• Atos Delivers Faster Cloud Adoption with New SyntBots Accelerators for Pivotal Platform
• A nice post…

On behalf of the community, I am pleased to announce that the Service Release 4 (SR4) of the Spring Cloud Greenwich Release Train is available today. The release can be found in Maven Central. You can check out the Greenwich release notes for more information.

Notable Changes in the Greenwich Release Train

Spring Cloud Greenwich.SR4 is built upon Spring Boot 2.1.10.RELEASE.

Spring Cloud Kubernetes

• Bug Fixes

Spring Cloud Commons

• Bug Fixes

Spring Cloud Openfeign

• Upgraded to OpenFeign 10.4.0
• Bug Fixes

Spring Cloud Contract

• Bug Fixes

Spring Cloud Vault

• Dependency and documentation changes
• Bug Fixes
…

On behalf of the community, I'm pleased to announce the availability of the Spring Data Moore SR2 and Lovelace SR13 service releases.

Both releases fix 66 tickets in total, mostly bugfixes. We decided to ship both versions on short notice to address bugs around auditing and converter registration for a broader range of users, as we've noted an increased number of bug reports in both areas. If you use Spring Data through Spring Boot, you can consume the released artifacts by setting the spring-data-releasetrain.version property to Moore-SR2 or Lovelace-SR13.

Finally, here are links to the…

Hi Spring fans! This week Josh Long (@starbuxman) talks to RedHat / IBM's Sébastien Blanc (@sebi2706) on OAuth, KeyCloak, RivieraDev, the French Riviera, and more.

• Sébastien on Twitter
• KeyCloak
• Sébastien's legendary conference, RivieraDev

Note

See the latest announcement on Announcing the Spring Authorization Server. This post is a follow-up to Next Generation OAuth 2.0 Support with Spring Security

Current State

In the Spring Security 5.x release train, we’ve endeavored to replace and simplify the feature set found in the Spring Security OAuth 2.x legacy project. In the process, we’ve also added numerous new features, including support for OpenID Connect 1.0.

We are pleased to announce that as of the 5.2 release, we are very close to feature parity with the client and resource server legacy support. What remains is quite…

I’m pleased to announce the releases of Spring Security OAuth 2.4.0 and 2.3.8.

Deprecation Notice

The 2.4.0 release officially deprecates all classes. The latest OAuth 2.0 support is provided by Spring Security. See the announcement for further details.

For a complete list of changes, please refer to:

• 2.4.0 changelog

• 2.3.8 changelog

Project Page | GitHub | Documentation | Help