RepoJournal
Spring @spring-projects
97 wires and counting

$ follow Spring

Keep up with Spring in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-02
stories 48
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Spring Security adds configurable auth success handlers

By RepoJournal · Filed · About Spring

Burak Kalaycı iain-henderson Josh Cummings Phillip Webb Artem Bilan Pratap Chandra Deo dlwldn30
10 people shipped this
Burak Kalaycı @kalayciburak 3 cited iain-henderson @iain-henderson 2 cited Josh Cummings @jzheaux 2 cited Phillip Webb @philwebb 1 cited Artem Bilan @artembilan 1 cited Pratap Chandra Deo @Pratapchandradeo 1 cited dlwldn30 @dlwldn30 1 cited dependabot @dependabot Andy Wilkinson @wilkinsona Robert Gurol @robert-gurol-ps

Spring Security's OAuth2 Resource Server now supports configurable authentication success handlers, and Spring Integration fixes several concurrency issues.

Spring Security's OAuth2ResourceServerSpec lacked a configurable ServerAuthenticationSuccessHandler; this addition corrects that oversight [1], and the reactive Kotlin DSL adds the same authenticationSuccessHandler option [2][3], with What's New updated [4]. Spring Integration fixes a race in remote file GET where generateLocalDirectory() used a non-atomic exists()/mkdirs() sequence; concurrent messages resolving to the same not-yet-existing local directory could fail [5]. It also modifies the NIO client selector to clear the active flag before closing, so a normal stop does not log ClosedSelectorException at ERROR [6]. A Python service activator test, previously disabled because Graal Python crashed when printing a Java Date, is turned back on after the GraalVM update to 25.3.4.1 includes the fix; the GraalVM upgrade from 25.2.4 is included [7]. Tests were updated to drop guessed separator counts in path assertions, a fix that was wrong on Linux/macOS [8]. In Spring AMQP, the default container factory bean name is now applied before RabbitListenerConfigurer instances run, so configurers can override it; previously, afterSingletonsInstantiated overwrote a configurer-set name [9][10]. Spring Boot refactors internal version handling by dropping LibraryVersion and introducing LinkedVersion [11].

Action items

References

  1. [1] Make authenticationSuccessHandler Configurable in Resource Server DSL ↗ spring-projects/spring-security
  2. [2] Add authenticationSuccessHandler to Reactive Resource Server Kotlin DSL ↗ spring-projects/spring-security
  3. [3] Add authenticationSuccessHandler to Reactive Resource Server DSL ↗ spring-projects/spring-security
  4. [4] Update What's New ↗ spring-projects/spring-security
  5. [5] GH-11277: Fix local directory creation race in remote file GET ↗ spring-projects/spring-integration
  6. [6] GH-11269: Clear active flag before closing client NIO selector ↗ spring-projects/spring-integration
  7. [7] GH-11261: Turn the Python service activator test back on ↗ spring-projects/spring-integration
  8. [8] GH-11277: Drop guessed separator counts from path assertions ↗ spring-projects/spring-integration
  9. [9] GH-3604: Apply default container factory name before configurers ↗ spring-projects/spring-amqp
  10. [10] GH-3604: Apply default container factory name before configurers ↗ spring-projects/spring-amqp
  11. [11] Drop `LibraryVersion` and introduce `LinkedVersion` ↗ spring-projects/spring-boot

$ ls spring-projects/reviews/ # the step-back reads

the week in review Spring WS, Security fixes; Boot reactive backoff the month in review Spring standardizes release trains while security patches and batch fixes surface
Topics: Java Full archive →

Quick answers

What shipped in Spring on September 2, 2026?
Spring Security's OAuth2 Resource Server now supports configurable authentication success handlers, and Spring Integration fixes several concurrency issues. In total, 36 commits and 12 pull requests landed.
Who contributed to Spring on September 2, 2026?
10 developers shipped this update, including dependabot, Phillip Webb, Andy Wilkinson, iain-henderson, Josh Cummings, Robert Gurol, Artem Bilan, and Pratap Chandra Deo, and 2 more.
What were the notable Spring updates?
Make authenticationSuccessHandler Configurable in Resource Server DSL, Add authenticationSuccessHandler to Reactive Resource Server Kotlin DSL, and Add authenticationSuccessHandler to Reactive Resource Server DSL.
♥

$ log @spring-projects --recent

Spring Kafka fixes multi-value header loss with JSON types 3 shipped Spring Framework fixes duplicate key code lookup 10 shipped Spring Boot reactive resource server backs off with custom security 56 shipped AMQP channel exhaustion and frame_max fixes, security race condition closed 53 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.