Hi Spring fans and welcome to another installment of This Week in Spring! I just returned from a month of travel on Saturday, and on Sunday I was off to Denver, CO, for the epic SpringOne Tour Denver show. Now, I'm off to begin a 10 day tour of Kyiv, Ukraine (JEEConf); Dublin, Ireland and Belfast, Northern Ireland; and Barcelona, Spain (Spring I/O). I hope to see you around! (@starbuxman)

We've got a ton of good stuff to look at today so let's get to it!

• Check out this Micrometer extravaganza webinar from Micrometer lead Jon Schneider
• I love this new guide on building Spring Boot applications with Kotlin
• Do you want to generate Spring REST Docs from Spring Cloud Contract DSLs? Check out how to specify a proper base class here
• Brian McClain has a nice post on speeding software development using build pipelines and Concourse CI
• Christoph Stroble has debuted transaction support in Spring Data MongoDB's reactive module. Take a look!
• Spring Security lead Rob Winch has also debuted the new reactive Spring Security OAuth support in 5.1.0.M1…

On behalf of the community I’m pleased to announce the release of Spring Securiity 5.1.0.M1. This release resolves over 80 tickets. The highlights can be seen below:

• Spring Security OAuth2 Client Support for WebFlux. See the sample for how to use it.

• Numerous other enhancements to WebFlux Support

• Added OAuth2ClientArgumentResolver

• Implementation of the Authorization Code Grant. See the sample for how to use it.

Feedback Please

If you have feedback on this release, I encourage you to reach out via StackOverflow, GitHub Issues, or via the comments section. You can also ping me @rob_winch , Joe @joe_grandja, or Josh @jzheaux…

For 2 years, we have introduced Kotlin support in Spring projects (Framework, Boot, Data) and published various blog posts, sample projects, slides and documentation. Today, we are publishing an opinionated tutorial intended to summarize in a single place how to build a Spring Boot web application in Kotlin leveraging these features and following best practices: https://spring.io/guides/tutorials/spring-boot-kotlin/

Topics covered are:

• How to create a Spring Boot 2 project in Kotlin
• Understanding the build configuration
• Testing with JUnit 5: integration tests, @WebMvcTest + mocking
• Persistence with JPA and data classes
• Creating your own extensions
• Rendering web pages with Mustache
• HTTP API with @RestController
• Configuration properties
…

I am pleased to announce that Spring IO Platform Cairo-SR1 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring Boot 2.0.2
• Spring Data Kay SR7
• Spring Framework 5.0.6
• Spring Kafka 2.1.6
• Spring Integration 5.0.5
• Spring Security 5.0.5
• Spring Session Apple SR2

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

I am pleased to announce that Spring IO Platform Brussels-SR10 is now available from both repo.spring.io and Maven Central.

This maintenance release upgrades the versions of a number of the projects in the Platform:

• Spring Boot 1.5.13
• Spring Data Ingalls SR12
• Spring Framework 4.3.17
• Spring Integration 4.3.16
• Spring Security 4.2.6
• Spring Security OAuth 2.0.15

The versions of a number of third-party dependencies have also been updated.

Project Page | GitHub | Issues | Documentation

The Spring Cloud Data Flow team is pleased to announce the release of 1.5.0 RC1. Follow the Getting Started guides for Local Server, Cloud Foundry, and Kubernetes.

Here are the highlights:

General Improvements

• Switch to Hikari connection pool and restructure code to use fewer connections.

• Several bug fixes in underling deployer libraries.

Dashboard

• Editing a created/deployed stream is now possible from the Stream Builder. The application and deployment properties can be edited and re-deployed. The App version can be switched, too.

• A new paginator component is added to all the list page. Switching from a list of 20, 30, 50, or 100 items per page is possible. This further simplifies the bulk operation workflows.

• Introduction of end-to-end testing via Selenium and SauceLabs.

…

The following CVEs have been published today:

• CVE-2018-1257 for Spring Framework 5.0.6, 4.3.17.
• CVE-2018-1258 for Spring Security 5.0.5.
• CVE-2018-1259 for Spring Data Ingalls SR12, Kay SR7.
• CVE-2018-1260 for Spring Security OAuth 2.3.3, 2.2.2, 2.1.2, 2.0.15.
• CVE-2018-1261 for Spring Integration “Zip” extension 1.0.1.

Please, review the information in the CVE reports and upgrade immediately.

Spring Boot Users: Spring Boot 2.0.2 and 1.5.13, released earlier today, contain the fixes for the above vulnerabilities.

speaker: Josh Long

Hi Spring fans! In this installment we'll look at the new OAuth client support in Spring Security 5.

On behalf of the team and the community, I am pleased to announce that Spring Boot 2.0.2 is now available from repo.spring.io and Maven Central.

Spring Boot 2.0.2 includes over 80 fixes, improvements, and dependency updates. Thanks to everyone that has contributed with issue reports and pull requests. Please note that a number of the upgraded dependencies contain fixes for various security vulnerabilities. Please see this blog post for further details.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter…