Spring WS, Security fixes; Boot reactive backoff

♥

Spring WS X.509 and fault handling, Security's configurable success handlers, and Boot's reactive resource server backoff ship.

181 commits 53 PRs merged 7 briefings covered

← previous week spring-projects wire →

What shipped: Spring WS resolves two interceptor issues: fault detection now handles each interceptor independently [1], and X.509 common name extraction correctly handles names that end the subject DN [2]. The same project documents what happens when WS-Security validation is skipped [3]. Spring Security makes authentication success handlers configurable in the Resource Server DSL for both standard and reactive setups, including the Kotlin DSL [4][5][6]. Spring Boot's reactive resource server now backs off when custom security is present, and several integration race conditions received fixes [7][8][9].

Why it matters: The Spring WS common name change is breaking: if your X.509 certificates have the common name as the final part of the subject DN, extraction behavior has changed, and you should verify your authentication logic. Similarly, the documentation on skipping WS-Security validation clarifies a previously ambiguous path—check whether your configuration relies on that behavior. The new Spring Security success handler config lets you tailor post-login redirects or actions without custom filters, simplifying reactive resource servers [4].

Also: Spring Data Elasticsearch fixes nanosecond date formatting [10], spring-tools handles concatenated strings when extracting values from JDT AST nodes [11][12], Spring Ldap removes Shibboleth repository [13], Spring Integration clears a NIO selector race and local directory creation race [9][8], and several maintenance bumps land across Spring Batch extensions and Spring AI [14][15][16][17].

References

[1] Determine whether the response is a fault for each interceptor ↗ spring-projects/spring-ws
[2] Extract the common name when it ends the subject DN ↗ spring-projects/spring-ws
[3] Document the effect of skipping WS-Security validation ↗ spring-projects/spring-ws
[4] Make authenticationSuccessHandler Configurable in Resource Server DSL ↗ spring-projects/spring-security
[5] Add authenticationSuccessHandler to Reactive Resource Server DSL ↗ spring-projects/spring-security
[6] Add authenticationSuccessHandler to Reactive Resource Server Kotlin DSL ↗ spring-projects/spring-security
[7] GH-11261: Turn the Python service activator test back on ↗ spring-projects/spring-integration
[8] GH-11277: Fix local directory creation race in remote file GET ↗ spring-projects/spring-integration
[9] GH-11269: Clear active flag before closing client NIO selector ↗ spring-projects/spring-integration
[10] Fix formatting of DateFormat.strict_date_optional_time_nanos. ↗ spring-projects/spring-data-elasticsearch
[11] GH-1486: deal with concatenated strings when extracting values from JDT AST nodes ↗ spring-projects/spring-tools
[12] formatting ↗ spring-projects/spring-tools
[13] Remove Shibboleth Repository ↗ spring-projects/spring-ldap
[14] Remove unused `archunit-junit5` ↗ spring-projects/spring-batch-extensions
[15] Bump `wiremock-spring-boot` from 4.2.0 to 4.2.2 ↗ spring-projects/spring-batch-extensions
[16] Update Maven plugins ↗ spring-projects/spring-batch-extensions
[17] Close the resource stream in `TextReader` ↗ spring-projects/spring-ai

$ ls spring-projects/week/ # the briefings behind this review

Mon Aug 31 Spring data elasticsearch fixes nanosecond date formatting Tue Sep 1 Spring WS fixes interceptor fault handling, X.509 common name extraction Wed Sep 2 Spring Security adds configurable auth success handlers Thu Sep 3 Mongo sequence increments exit transactions, Moments gains finer granularity Fri Sep 4 AMQP channel exhaustion and frame_max fixes, security race condition closed Sat Sep 5 Spring Boot reactive resource server backs off with custom security Sun Sep 6 Spring Framework fixes duplicate key code lookup

← previous week spring-projects wire →