Spring Security 6.3 – What’s New

Date: 2024-09-16

Spring Security 6.3 boasts significant improvements, including safer JDK serialization handling, preventing accidental exposure of sensitive data. Authorization is enhanced with simplified @PreAuthorize and @PostAuthorize annotations using SPEL for dynamic security rules. The release adds compromised password checking capabilities, integrating with services like HaveIBeenPwned. Finally, OAuth 2.0 support is expanded with Token Exchange (RFC 8693) for streamlined microservice communication. These features enhance security, developer experience, and performance.

Read more: https://www.javacodegeeks.com/spring-security-6-3-whats-new.html