Spring IO Platform Cairo-RC1

Releases | Andy Wilkinson | March 12, 2018 | ...

It's my pleasure to announce that Spring IO Platform Cairo-RC1 is now available from the Spring milestone repository. The Cairo generation of the Platform builds on top of Spring Framework 5.0 and Spring Boot 2.0 and requires Java 8.

Cairo includes the following projects:

  • AspectJ 1.8.13
  • Reactor Bismuth-SR7
  • Spring AMQP 2.0.2
  • Spring Batch 4.0.0
  • Spring Boot 2.0.0
  • Spring Cloud Connectors 2.0.1
  • Spring Data Kay-SR5
  • Spring Framework 5.0.4
  • Spring HATEOAS 0.24.0
  • Spring Integration 5.0.3
  • Spring Kafka 2.1.4
  • Spring LDAP 2.3.2
  • Spring Plugin 1.2.0
  • Spring REST Docs 2.0.0
  • Spring Retry 1.2.2
  • Spring Security 5.0.3
  • Spring Security JWT 1.0.9
  • Spring Security OAuth 2.2.1
  • Spring Session Apple-SR1
  • Spring Social 1.1.6
  • Spring Social Twitter 1.1.2
  • Spring Web Flow 2.5.0
  • Spring Web Services 3.0.0

Spring Cloud Data Flow 1.4 RC1 released

Releases | Gunnar Hillert | March 12, 2018 | ...

The Spring Cloud Data Flow team is pleased to announce the release of 1.4.0 RC1. Follow the Getting Started guides for Local Server, Cloud Foundry, and Kubernetes.

Following are the release highlights:

Stream Deployment UX

In Skipper mode, we have added a brand new stream deployment builder form to simplify the selection of platform and the properties while deploying a stream. The options include override to the deployment platform and the deployer, application and global properties for the streaming pipeline.

Deployment Properties

Docker Compose for Development

To simplify the getting started experience for the Local Server, we have added the Docker Compose support, which when run as a single command from the CLI, it will automatically provision the latest release of the Local-server along with Apache Kafka for messaging…

Testing auto-configurations with Spring Boot 2.0

Engineering | Madhura Bhave | March 07, 2018 | ...

Auto-configuration is one of the most powerful features of Spring Boot. Tests for auto-configuration classes usually follow the same pattern. Most tests start up an ApplicationContext with the auto-configuration class under test and depending on the test, also load additional configuration to simulate user behavior. The recurrence of this pattern can add a lot of repetition in the code base.

Spring Boot 2.0 provides a suite of new test helpers for easily configuring an ApplicationContext to simulate auto-configuration test scenarios. The following example configures an ApplicationContextRunner to test the UserServiceAutoConfiguration

Spring Batch 3.0.9.RELEASE and 4.0.1.RELEASE are now available

Releases | Mahmoud Ben Hassine | March 07, 2018 | ...

We are pleased to announce the release of Spring Batch 3.0.9.RELEASE and 4.0.1.RELEASE via Maven Central, Github, and the Pivotal download repository.

These two maintenance releases address a number of bug fixes, enhancements and documentation updates. For a complete list of changes, please refer to the change logs for 3.0.9 and 4.0.1. Many thanks to all of those who submitted pull requests that went into these releases.

Please note that the next patch version, 3.0.10.RELEASE, will be the last maintenance release of the 3.x line. We strongly recommend users to migrate to the latest and…

Using Spring Security 5 to integrate with OAuth 2-secured services such as Facebook and GitHub

Engineering | Craig Walls | March 06, 2018 | ...

One of the key features in Spring Security 5 is support for writing applications that integrate with services that are secured with OAuth 2. This includes the ability to sign into an application by way of an external service such as Facebook or GitHub.

But with a little bit of extra code, you can also obtain an OAuth 2 access token that can be used to perform authorized requests against the service’s API.

In this article, we’re going to look at how to develop a Spring Boot application that, using Spring Security 5, integrates with Facebook. You can find the complete code for this article at https://github.com/habuma/facebook-security5

Security issue in Spring Data REST (CVE-2017-8046)

Engineering | Oliver Drotbohm | March 06, 2018 | ...

Last fall, a security vulnerability affecting Spring Data REST was discovered. We patched the affected modules and published a CVE. We've seen some recent news about this that's led to confusion. Here's the scoop:

tl;dr:

  • There was a security vulnerability allowing arbitrary code execution in Spring Data REST up to version 2.6.8 and 3.0.0.
  • This vulnerability has been fixed in the following versions:

-- Spring Data REST 2.6.9 (Ingalls SR9, Oct. 27th, 2017), included in Spring Boot 1.5.9 (Oct, 28th 2017). -- Spring Data REST 3.0.1 (Kay SR1, Oct. 27th 2017), included in Spring Boot 2.0 M6, (Nov…

Spring Security SAML Roadmap

Engineering | Rob Winch | March 05, 2018 | ...

The Spring Security SAML project has been an integral part of the Spring ecosystem since its inception nearly 9 years ago. This critically important project was born through the incredible effort and contributions of Vladimír Schäfer. I’d like to take the time to personally thank Vladimír and our fantastic community for their tireless work. Without all of their efforts, this project would not be what it is today.

Vladimír, our amazing community, and the Spring engineering team are planning to team up to enhance Spring Security SAML to achieve the following primary goals:

  • Ensuring all dependencies are up to date

  • Ensure all Spring Security APIs do not expose any dependency APIs

  • Graduate Spring Security SAML from an extension into Spring Security proper

This Week in Spring - Tuesday March 6th, 2018

Engineering | Josh Long | March 05, 2018 | ...

Hi Spring fans and welcome to another installment of This Week in Spring! As I write this it's early morning Tuesday in Sydney, Australia, where I've been visiting with some of Pivotal's amazing customers, and I'm now preparing for my flight to Dubai, in six short hours, where I'll visit some more of Pivotal's amazing customers. Later this week I'll be in Bangalore, India, for the amazing Agile India conference, and then - early next week on Tuesday - I'll be in Boston, MA for the first SpringOne Tour event. If you're around don't hesitate to say hi, as usual!

This week we've got a lot of…

Spring Cloud Finchley M8 is available

Releases | Spencer Gibb | March 02, 2018 | ...

On behalf of the community, I am pleased to announce that the Milestone 8 (M8) of the Spring Cloud Finchley Release Train is available today. The release can be found in Spring Milestone repository. You can check out the Finchley release notes for more information.

Notable Changes in the Finchley Release Train

Finchley.M8 is compatible with Spring Boot 2.0.0.RELEASE.

Spring Cloud Gateway

Some bug fixes and small configuration enhancements.

Spring Cloud Bus

Fixes for custom remote events.

Spring Cloud Security

Updated to spring-security-oauth2-autoconfigure 2.0.0.RELEASE.

Spring Cloud Config

Support for Gitee

Get the Spring newsletter

Stay connected with the Spring newsletter

Subscribe

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all