1.1.7

🔨 Dependency Upgrades

• Update to Spring Framework 6.0.19 #1587
• Update to Spring Security 6.1.9 #1588

1.3.0-M3

⭐ New Features

• Add PKI Mutual-TLS client authentication method #1558
• Explain the importance of requireProofKey #1545
• Implement OAuth 2.0 Token Exchange #1525
• Update gradle to 8.6 #1535

🔨 Dependency Upgrades

• Update Enterprise Gradle #1548
• Update to assertj-core 3.25.3 #1574
• Update to jackson-bom 2.17.0 #1572
• Update to json-path 2.9.0 #1575
• Update to junit-jupiter 5.10.2 #1573
• Update to Spring Framework 6.1.5 #1567
• Update to Spring Security 6.3.0-M3 #1562

❤️ Contributors

Thank you to all the contributors who worked on this release:

@qeeqez and @weltonrodrigo

1.2.3

🔨 Dependency Upgrades

• Update to jackson-bom 2.16.2 #1570
• Update to junit-jupiter 5.10.2 #1571
• Update to Spring Framework 6.1.5 #1568
• Update to Spring Security 6.2.3 #1569

1.1.6

🔨 Dependency Upgrades

• Update to jackson-bom 2.15.4 #1566
• Update to Spring Framework 6.0.18 #1564
• Update to Spring Security 6.1.8 #1565

1.3.0-M2

⭐ New Features

• Add ability to customize the access token response #1429

❤️ Contributors

Thank you to all the contributors who worked on this release:

@ddubson

1.2.2

🪲 Bug Fixes

• Update application.yml in Getting Started guide #1521

🔨 Dependency Upgrades

• Update to Spring Boot 3.2.2 #1528
• Update to spring-security-release-plugin 1.0.1 #1493

❤️ Contributors

Thank you to all the contributors who worked on this release:

@rozagerardo

1.1.5

🪲 Bug Fixes

• Update application.yml in Getting Started guide #1519

🔨 Dependency Upgrades

• Update to spring-security-release-plugin 1.0.1 #1491

❤️ Contributors

Thank you to all the contributors who worked on this release:

@rozagerardo

1.3.0-M1

⭐ New Features

• Allow configurable scope validation strategy in OAuth2ClientCredentialsAuthenticationProvider #1377
• Improve logging #1467
• Support multi-tenancy using the path component for issuer #1342

🔨 Dependency Upgrades

• Update to assertj-core 3.25.1 #1513
• Update to jackson-bom 2.16.1 #1512
• Update to Spring Framework 6.1.3 #1510
• Update to Spring Security 6.3.0-M1 #1511
• Update to spring-security-release-plugin 1.0.1 #1494

❤️ Contributors

Thank you to all the contributors who worked on this release:

@adamleantech and @leshalv

1.2.1

🪲 Bug Fixes

• Expired ID tokens are rejected at the authorization server on an RP-initiated logout #1474

🔨 Dependency Upgrades

• Update to nimbus-jose-jwt 9.37.3 #1484
• Update to Spring Framework 6.1.2 #1482
• Update to Spring Security 6.2.1 #1483

1.1.4

⭐ New Features

• Remove org.webjars dependencies from demo-authorizationserver sample #1445

🪲 Bug Fixes

• Default timeout should be set when fetching JWKSet for private_key_jwt #1439
• Expired ID tokens are rejected at the authorization server on an RP-initiated logout #1440
• Fix tests for OAuth2 Authorization Server Metadata Endpoint #1421
• Fix tests for OIDC Provider Configuration Endpoint #1418
• Issuer should not support path component #1437

🔨 Dependency Upgrades

• Update to Spring Framework 6.0.15 #1480
• Update to Spring Security 6.1.6 #1481