Spring Security 3.1.0 Released

[Luke Taylor]

Hi all,

We've finally put out the first GA release of Spring Security 3.1.

There's a summary of changes in the reference manual and you can find more details of the issues which have been addressed in the link to the issue tracker from there.

You can also find more information (such as links to the API docs) on the project website.

Thanks to Rob Winch for his hard work on the project for this release and also in the forum.

cheers,

Luke.

[tunilopez]

Hi Luke,

These are good news.

How can I download the jars manually? Could you send me the links or point me where I should get them if I don't use maven?

Thanks in advance.
Agustin

[tunilopez]

Just found it! Not sure if I didn't see it or you just updated the downloads page.

Anyways, thanks.

[guidow08]

This is great!

Will there also be an OSGi-ready version of 3.1.0.RELEASE in the SpringSource Enterprise Bundle Repository? (at least I did not find one yet)

[cablepuff]

HI awesome for the 3.1.0 release.

I just notice that getAuthentication is depercated on AuthenticationException.

http://static.springsource.org/sprin...Exception.html

getAuthentication()
Deprecated. to avoid potential leaking of sensitive information (e.g. through serialization/remoting).

is their any way or better way of getting the username that attempted to login, so that if his name is not found it would automatically create a token for him (e.g. open id authentication for example).

I am just afraid that this method might be removed in the future, when in certain context it could still be useful.

[knutsiem]

I just noticed that the PreAuthenticatedGrantedAuthoritiesUserDetailsServi ce SPI has changed between 3.0.7 and 3.1.0; createuserDetails now accepts Collection<? extends GrantedAuthority> instead of List<GrantedAuthority>. As the authorities object passed to createuserDetails now is of type Collection instead of List, a createuserDetails in a sub-class that overrode the old version of the method will not be invoked. Potential consequences include strange behavior and ClassCastException around Authentication.getPrincipal().

Relevant commit: https://fisheye.springsource.org/cha...877dc482ec 89

[Andrew Swan]

Hi Luke,

FYI, this page still says that 3.0.7 is the latest release:

http://static.springsource.org/sprin...downloads.html