Spring Security 3.2.0.RC1 Released (08/2013)

Engineering | Rob Winch | August 19, 2013 | ...

Spring Security 3.2.0.RC1 is now available from the SpringSource repository at http://repo.springsource.org. See here for a quick tutorial on resolving these artifacts via Maven.

This release includes tons of updates and fixes. The highlights include:

  • Polishing of Spring Security Java Configuration
  • Uses content negotiation to determine how to prompt user for authentication when multiple authentication mechanisms (i.e. HTTP Basic and Form login) enabled
  • AbstractSecurityWebApplicationInitializer allows registering Java Configuration directly
  • A number of bugs fixed
  • CSRF protection and automatic integration with Spring Web MVC jsp tags
  • Automatic cache control support
  • Defence against Clickjacking attacks
  • HTTP Strict Transport Security support to reduce Man in the Middle attacks
  • Samples include pom.xml so they can be imported as Maven projects
  • MediaTypeRequestMatcher for matching on requests with content negotiation
  • Over ten java configuration samples have been integrated into the samples directory
  • Three new guides that walk users through samples and provide detailed instructions on how to do specific tasks. More of these guides will follow in coming releases
  • Refer to Spring Security 3.2.0.RC1 preview for more details about this release.

    SpringOne2GX

    To learn about all the new features within Spring Security 3.2 attend my Getting Started with Spring Security 3.2 presentation at SpringOne2GX September 9-12, 2013. If you haven't already gotten your tickets, do so now before its too late!

    Changelog | Download | Reference Manual | Guides | FAQ

    This Week in Spring - Aug 13th, 2013

    Engineering | Josh Long | August 14, 2013 | ...

    Welcome back to another installment of This Week in Spring. As usual, we've got a lot to cover, so let's get to it!

    1. The How to do in Java blog has a nice post on how to setup Siteminder pre-authentication using Spring Security 3.
    2. Another great SpringOne2GX 2013 session's just been added to the SpringOne2GX 2013 lineup, Real Time Analytics with Spring. This talk introduces one use case for Project Reactor, a foundation for asynchronous applications on the JVM.
    3. Andy Clement has just cut a new release of AspectJ, 1.8.0.M1, which will be used in Spring 4 and support Java 8. It is available through the SpringSource Maven repository as 1.8.0.M1. It is also in today's release of AJDT for Eclipse 4.3.
    4. The GoPivotal blog has an in-depth look at Apache Tomcat 8. Definitely worth a look!
    5. Eberhard Wolff has put together a very nice video on using the recently announced Spring Boot. Nice job, Eberhard! (as usual)
    6. Our pal Petri Kainulainen has written a very cool post on unit testing Spring MVC REST APIs.
    7. The Being Java Guys blog has a code-heavy post on how to do file uploads with Spring MVC. Nice job!
    8. This post from the Matthew's Thoughts! blog explains a simple Spring REST starter project that demonstrates how to use regular Spring Security to add a username and password-based authentication with a Spring MVC-powered REST service.
    9. The Code with Zen Mind blog has a nice series on building and testing Spring MVC applications. The first post introduces how to setup a test-driven project. The second post demonstrates how to do refactoring and how to introduce new test cases. The third post demonstrates how to use the tests established in the first two posts to survice a major refactoring (the implementation of the service under test changes). Really insightful!
    10. This post from the public static void blog() blog introduces how Spring's logging layering works. The post is in what Google Translate insists is Slovak, however, the translation was pretty good and - if we're honest - the diagrams are quite explanatory by themselves! Good stuff. Take a look, and - if possible - a read.
    11. The 1.5 version of the Cloud Foundry integration for Eclipse, which supports pushing applications to Pivotal Cloud Foundry organizations and spaces, using new Cloud Foundry services, and incrementally updating applications from Spring Tool Suite. The new integration may be installed from the STS dashboard or using the update site in the Help > Install New Software menu.

    Spring XD 1.0 Milestone 2 Released

    Releases | Mark Pollack | August 14, 2013 | ...

    Today we are pleased to announce the 1.0 M2 release of Spring XD (download)  Spring XD is a unified, distributed, and extensible system for data ingestion, real time analytics, batch processing, and data export.  The project’s goal is to simplify the development of big data applications.

    The second milestone release of Spring XD introduces several new features that make it even easier to ingest and process real-time streams of data as well as orchestrate Hadoop based batch jobs.  In this blog post we will cover

    • Shell
    • New sources, sinks and transports
    • DSL improvements
    • Batch Jobs

    Shell

    The most noticeable new feature is the introduction of the interactive shell.  The shell provides you an easy way to create new streams and jobs, view metrics, interact with Hadoop, and more.  As an introduction to the shell I will redo some of the examples from the M1 blog post.

    Start…

    SpringSource Training Schedule: September 2013

    News | Mark Baars | August 09, 2013 | ...

    If you are a Java developer looking to increase your Spring knowledge, Spring Training by Pivotal is the place to start. We are providing several Spring trainings across the globe closely connected to your needs as a professional developer. This month we provide the new 4-day Groovy & Grails class in Boston, MA. SpringSource has also started offering new Hibernate with Spring Classes in the Bay Area, Germany, London (GB) and the United States (Online Courses)

    The complete Spring training schedule for September, 2013 can be found below:

    Step 1: Core Spring

    Americas

    Asia Pacific

    Europe, Middle East & Africa

    Step 2: Spring Web / Enterprise Integration with Spring / Hibernate with Spring

    Americas

    Asia Pacific

    Europe, Middle East & Africa

    If you cannot find a professional training near you, you can always request an onsite SpringSource training

    This Week in Spring - Aug 6th, 2013

    Engineering | Josh Long | August 07, 2013 | ...

    Welcome back to another installment of This Week in Spring. On August 1, I celebrated my third year at SpringSource. I continue to enjoy the ride of my life and a huge part of that is my interaction with you, the most amazing community ever. Thanks for that, folks.

    Have you booked your tickets for SpringOne2GX? This year's show is a special one. In my work as the Spring Developer Advocate, I speak at many conferences all around the world. Ask any developer with a pulse, and they'll confirm that big data (and Hadoop), reactive web applications, REST, mobile application development, and cloud computing are sizzling hot topics today. Pivotal, and Spring, support today's developers, and SpringOne2GX's agenda represents in my estimation the perfect blend of content for today's developers. Check out the agenda. We've just recently added talks on big data, and REST service security with OAuth. This will be our first show under Pivotal, and it's the only place where you can talk to the developers working on the technologies you care about both at SpringSource and in the community. As you know, we've just announced our Cloud Foundry conference, Platform, and SpringOne2GX full pass ticket holders may register for that show - which is at the same venue as SpringOne2GX just two days earlier - for free! If I had to pay for just one show a year, this would be that show. Hurry the early bird rate expires this friday!

    1. Major news: Phil Webb and Dr. David Syer have just announced Spring Boot, which simplifies Spring application development. Spring Boot provides an opinionated layer on top of Spring and in so doing makes it dead simple to get an application up and running with a minimum of fuss. Seriously, this stuff will blow your mind. Do not read any further until you've read this short and sweet post! Give it a go and be sure to let us know about your experiences!
    2. Spring Framework 3.2.4 maintenance release is now available, with an important security fix for SpringOXM..
    3. Spring Data Redis-lead and ninja Jennifer Hickey just announced the availability of two Spring Data releases. Spring Data Redis 1.1, M2, featuring a lot of new features, including enhanced data pipelining, Redis 2.6 scripting, and more. Spring Data Redis 1.0.6 is also available, and features bug fixes and smaller improvements.
    4. Spring Mobile and Android lead Roy Clarkson just announced Spring Mobile 1.1.0.RC1, which features improvements to device detection and view resolution in Spring Mobile. Roy also announced a new cut of the stable line of Spring Mobile, 1.0.2, which features similar improvements, some backported.
    5. Spring Data ninja Oliver Gierke has just announced that the final release candidate for Spring Data Babbage is now available. This release is named for Charles Babbage. This release features support for the MongoDB Aggregation Framework and improved the execution of polymorphic queries, support to use SpEL expressions in manually defined queries with JPA, improved handling of entities using @IdClass, a countBy(..) method for Neo4j repositories, and much more.
    6. The replay for the webinars Functional Programming without Lamba and Spring with Cucumber for Automation are now available online. Be sure to check them out!
    7. A few weeks ago, our friend Johnathan Mark Smith put together a video introducing how to use Spring Data MongoDB and Java configuration. Check it out! And, if you're doing awesome videos, feel free to share. I'd love to post them on This Week in Spring, too!
    8. I smiled when I saw a tweet by the Reactor project lead Jonathan Brisbin in which he says, "Processor throughput: 90M ops/sec on a laptop. 1 thread + @LMAX Disruptor. Not #fastdata, #uberfastdata" and then links to a test case in the code. Needless to say, Reactor is going to shake things up big time! (And, of course, we'll have more content on Reactor at SpringOne2GX.
    9. The latest release of Tomcat, Apache Tomcat 8.0.0-RC1 (alpha), is now available! There are a lot of new features. Notably, Tomcat 8 will be the first Tomcat to support JSR 356, web sockets. This is the perfect compliment to Spring 4's recently announced web socket support.
    10. Mohan Srihari Kantipudi has put together a nice post on Spring's basic REST capabilities
    11. I liked Gregor Riegler's post on Spring Loaded, the best kept secret in open source. Spring Loaded is a Java agent that lets you reload code as you're working on it (no need to redeploy!). This is a very cool post and I hope you'll consider using Spring Loaded, too.

    Spring Mobile 1.0.2 Released

    Releases | Roy Clarkson | August 06, 2013 | ...

    Dear Spring Community,

    We are happy to announce the release of Spring Mobile 1.0.2! Spring Mobile provides extensions to Spring MVC that aid in the development of cross-platform mobile web applications. This release includes the following:

    • Firefox OS now detected as mobile device
    • Kindle devices are now detected as tablets
    • Kindle Fire devices are detected as tablet if they are in Silk Desktop mode or Android WebView, and as mobile when in Silk Mobile mode
    • Additional bug fixes and improvements

    See the changelog and reference manual for more information.

    To retrieve the software, download the release distribution, or add the maven artifacts to your project. Sample apps are available to help you get started. If you are building a mobile web app, we encourage you try Spring Mobile 1.0.2 and collaborate with us on the next iteration of the project.

    Spring Mobile 1.1.0.RC1 Released

    Releases | Roy Clarkson | August 06, 2013 | ...

    Dear Spring Community,

    We are happy to announce the release of Spring Mobile 1.1.0.RC1! Spring Mobile provides extensions to Spring MVC that aid in the development of cross-platform mobile web applications. This release includes the following:

    • Firefox OS now detected as mobile device
    • Corrected an issue with redirects and forwards when using LiteDeviceDelegatingViewResolver
    • Additional bug fixes and improvements

    See the changelog and reference manual for more information.

    To retrieve the software, download the release distribution, or add the maven artifacts to your project. Sample apps are available to help you get started. If you are building a mobile web app, we encourage you try Spring Mobile 1.1.0.RC1 and collaborate with us on the next iteration of the project.

    Spring Data Redis 1.1 M2 and 1.0.6 Released

    Releases | Jennifer Hickey | August 06, 2013 | ...

    Dear Spring Community,

    I am pleased to announce the second milestone release of Spring Data Redis 1.1!

    Downloads | JavaDocs | Reference Documentation | Changelog

    Highlights include:

    • Significant enhancements to pipelining functionality
    • Data type conversion and deserialization of Redis transaction results
    • High level support for Redis 2.6 scripting through RedisTemplate
    • Modified API for adding or removing multiple List, Set, and Hash elements in one call
    • Support for using RedisTemplate without serialization

    There is also a new GA release, Spring Data Redis 1.0.6!

    Downloads | JavaDocs | Reference Documentation | Changelog

    Spring Data Redis 1.0.6 is a maintenance release containing a few bug fixes and minor enhancements. See the Changelog for more information.

    For more information about Spring Data Redis please see the home page for a live sample and webinar recording.

    We look forward to your feedback on the forum or in the issue tracker. We hope to see you at the upcoming SpringOne conference in Santa Clara, CA. Checkout the schedule

    Spring Boot – Simplifying Spring for Everyone

    Engineering | Phil Webb | August 06, 2013 | ...

    (This blog post was written jointly by Phil Webb and Dave Syer).

    We are pleased to announce the first milestone release of a new project called Spring Boot.

    Spring Boot aims to make it easy to create Spring-powered, production-grade applications and services with minimum fuss. It takes an opinionated view of the Spring platform so that new and existing users can quickly get to the bits they need. You can use it to create stand-alone Java applications that can be started using 'java -jar' or more traditional WAR deployments. We also provide a command line tool that runs 'spring scripts'.

    The…

    Get the Spring newsletter

    Stay connected with the Spring newsletter

    Subscribe

    Get ahead

    VMware offers training and certification to turbo-charge your progress.

    Learn more

    Get support

    Tanzu Spring offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

    Learn more

    Upcoming events

    Check out all the upcoming events in the Spring community.

    View all