⭐ New Features

  • Apply default settings for public client type #656
  • Decompose OAuth2ClientAuthenticationProvider #655
  • Optimize InMemoryOAuth2AuthorizationService #654
  • Federated Identity sample #641
  • Use OAuth2TokenGenerator for OAuth2AuthorizationCode #639
  • Add OAuth2TokenGenerator implementation for OAuth2RefreshToken #638
  • Allow Token Introspection to be customized #630
  • Introduce OAuth2TokenGenerator #628
  • Add Assert.notNull() for AuthenticationProvider additions #530
  • Support opaque access tokens #500
  • Allow Token Introspection to be customized #493
  • Seperate JWT Token generation #414
  • Add a login with Google Authorization Server Sample #106

🐞 Bug Fixes

  • Dynamic client registration should not generate client_secret for private_key_jwt #657
  • /.well-known/openid-configuration endpoint Expected @transient Authentication #632

🔨 Dependency Upgrades

  • Update to Reactor 2020.0.16 #661
  • Update to Spring Security 5.5.5 #660
  • Update to Spring Framework 5.3.16 #659
  • Update to Spring Boot 2.5.10 #658

❤️ Contributors

We’d like to thank all the contributors who worked on this release!

Reference https://github.com/spring-projects/spring-authorization-server/releases/tag/0.2.3