Authentication Features

[jzheaux]

This issue is a theme for the Spring Security 6.2 release. Issues that relate to this will be added below.

SAML 2.0

• 🌟 Allow retrieving username from SAML Assertion Attributes #12136
• 🌟 Provide extendend SAML logging (like SAMLDefaultLogger) #11592
• 🌟 Validate asserting party metadata signature #12116

Local Authentication

• ✨ Support WebAuthn #5238
• ✨ Support phc Password Storage #9833

Session Management

• 🌟 Add Max Session to WebFlux #6192
• ✨ Enable support for persistent sessions when using SessionRegistryImpl #8368
• ✨ SessionRegistry is not informed when using session-fixation-protection=changeSessionId #10242
• ✨ SessionRegistryImpl returns principal from expired session #4243

---

Labels:

• 🪲 Bug
• 🌟 Enhancement
• ✨ Enhancement (nice-to-have)

[maradanasai]

Hi @marcusdacoregio Any progress on this?

[marcusdacoregio]

Hi @maradanasai, what specific issue you are asking about? You can track the progress in each individual issue by checking the assigned milestone, the discussion etc

[sumeetpri]

Any information on when this will be available ?#12116