whats-new.md

# What’s New in Spring Security 5.6

Spring Security 5.6 provides a number of new features.
Below are the highlights of the release.

* All new [Antora](https://antora.org/) based [documentation](https://docs.spring.io/spring-security/).

## Servlet

* Core

  * Introduced [`SecurityContextChangedListener`](https://github.com/spring-projects/spring-security/issues/10226)

  * Improved [Method Security Logging](https://github.com/spring-projects/spring-security/pull/10279)

* Configuration

  * Introduced [`AuthorizationManager`](https://github.com/spring-projects/spring-security/pull/9630) for method security

* SAML 2.0 Service Provider

  * Added [SAML 2.0 Single Logout Support](servlet/saml2/logout.html)

  * Added [Saml2AuthenticationRequestRepository](servlet/saml2/login/authentication-requests.html#servlet-saml2login-store-authn-request)

  * Added [`RelyingPartyRegistrationResolver`](servlet/saml2/login/overview.html#servlet-saml2login-rpr-relyingpartyregistrationresolver)

  * Improved `Saml2LoginConfigurer`'s handling of [`Saml2AuthenticationTokenConverter`](https://github.com/spring-projects/spring-security/issues/10268)

* OAuth 2.0 Login

  * Added [`Converter` for `Authentication` result](https://github.com/spring-projects/spring-security/pull/10041)

* OAuth 2.0 Client

  * Improved [Client Credentials encoding](https://github.com/spring-projects/spring-security/pull/9791)

  * Improved [Access Token Response parsing](https://github.com/spring-projects/spring-security/pull/9779)

  * Added [custom grant types support](https://github.com/spring-projects/spring-security/pull/10155) for Authorization Requests

  * Introduced [JwtEncoder](https://github.com/spring-projects/spring-security/pull/9208)

* Testing

  * Added support to [propagate the TestSecurityContextHolder to SecurityContextHolder](https://github.com/spring-projects/spring-security/pull/9737)

## WebFlux

* OAuth 2.0 Login

  * Improved [Reactive OAuth 2.0 Login Documentation](reactive/oauth2/login/index.html)

* OAuth 2.0 Client

  * Improved [Client Credentials encoding](https://github.com/spring-projects/spring-security/pull/9791)

  * Added [custom headers support](https://github.com/spring-projects/spring-security/pull/10131) for Access Token Requests

  * Added [custom response parsing](https://github.com/spring-projects/spring-security/pull/10269) for Access Token Requests

  * Added [jwt-bearer Grant Type support](https://github.com/spring-projects/spring-security/pull/10327) for Access Token Requests

  * Added [JWT Client Authentication support](https://github.com/spring-projects/spring-security/pull/10336) for Access Token Requests

  * Improved [Reactive OAuth 2.0 Client Documentation](reactive/oauth2/client/index.html)

[Community](community.html)[Getting Spring Security](getting-spring-security.html)