Spring Security 4.2 Released

Spring Security 4.2가 릴리즈 되었습니다.

https://spring.io/blog/2016/11/10/spring-security-4-2-0-released

---

Web Improvements

# Jackson Support 추가되었습니다.

// ... use ObjectMapper as normally ...
SecurityContext context = new SecurityContextImpl();
// ...
String json = mapper.writeValueAsString(context);

# Referrer Policy 추가되었습니다.

<http>
	<!-- ... -->

	<headers>
		<referrer-policy policy="same-origin" />
	</headers>
</http>

# @AuthenticationPrincipal 추가되었습니다.

<mvc:annotation-driven>
		<mvc:argument-resolvers>
				<bean class="org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver" />
		</mvc:argument-resolvers>
</mvc:annotation-driven>

@RequestMapping("/messages/inbox")
public ModelAndView findMessagesForUser(@AuthenticationPrincipal CustomUser customUser) {

	// .. find messages for this user and return them ...
}

# ForwardedHeaderFilter 추가되었습니다.

# CompositeLogoutHandler 추가되었습니다.

# RequestAttributeAuthenticationFilter 추가되었습니다.

---

Configuration Improvements

# ConcurrentSessionControlAuthenticationStrategy 사용 시 unlimited sessions 이 추가되었습니다.

<concurrency-control max-sessions="-1" />

기타 등등... 개선 되었네요