This Week in Spring: Spring Security OAuth, Releases, Cloud, and More

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week, I’m in Toronto, Canada, where I’ve been speaking to customers and at a meetup, then it’s off to St. Petersburg, Russia, for the epic Joker conf 2018. As usual, we’ve got a ton to cover, so let’s get to it!

• Check out this new version of the legendary Spring Petclinic, based on the new Spring Data JDBC
• Spring Security OAuth 2.3.4, 2.2.3, 2.1.3, 2.0.16 has been released.
• Rossen Stoyanchev has just announced the publication and resolution for two CVEs affecting Spring — READ THIS!
• Spring Boot 2.0.6 is out!
• Spring Session Apple SR6 has been released.
• Spring Security 5.1.1, 5.0.9, and 4.2.9 have been released.
• Spring Boot 1.5.17 is out!
• There are some nice posts here for our Spanish readers.
• Spring Data Lovelace SR1, Kay SR11, and Ingalls SR16 were released.
• Spring Framework 5.1.1, 5.0.10 and 4.3.20 are available now!
• Juergen Hoeller, Pivotal—Current and Future State of Java, SpringOne Platform 2018
• This is a nice whitepaper by Uli Homann, a distinguished architect at Microsoft, and Josh McKenty, Vice President and Field CTO at Pivotal, on cloud flexibility.
• Check out this tweet on CVE reports for the Spring framework and Spring Security OAuth.
• Jakub Pilimon put together a nice look at how Spring supports CQRS.
• Wow! The Spring Boot project has almost 500 contributors!
• I love Richard Seroter’s recent series on all the things you may not have been aware that Cloud Foundry could run.
• Thymeleaf Spring Security integration 3.0.3 (with Spring Security 5 + WebFlux support)
• Are you interested in presenting? Bruno Souza, a legend in his own right, and I had a discussion on how to help people present. It’s a bit meta. I hope it’s useful. I would love to be made irrelevant :) The more people out there helping disseminate good, sound technology practice, the better! Want to give a talk? Do it! You know I’m always happy to support such initiatives, right? My DM’s are open!
• Want to build upon the stack being used to power one of the largest e-commerce engines on the planet, Alibaba? They’re using Spring Cloud! They’ve even adapted and open-sourced their proprietary infrastructure into a project called Nacos, which they introduce here!
• There’s also some really compelling new stuff in store for Flyway in the new Spring Boot! Check it out!
• Whew! Some good stuff coming to Spring Cloud Contract via this massive PR to Rest Assured submitted by the Spring Cloud Contract ninja Olga Maciaszek-Sharma.
• This is a nice Spanish post on building CRUD and REST applications with Kotlin and Spring Boot.
• I did an interview that has been translated into Russian — check it out!
• There is a ton of Spring-related content to come out of this Microsoft Ignite 2018 event — check it out!
• The Livelessons videos that Spring Security lead, Rob Winch, and I put together are coming soon! Check this page on Oct 25, 2018.
• Christoph Nahr has put together a nice post that, while not strictly speaking about Spring, will certainly serve the Spring user quite well — it looks at what’s been removed in Java 11 (which, of course, you are already using, right?)
• The Okta Developer blog features a new post on build a mobile app with React Native and Spring Boot — check it out!
• This isn’t, strictly speaking, a Spring-related post, but it’s interesting — how to build Java runtime for non-modular applications using jlink in Java 9+.
• This post on projections with Spring Data JPA is quite handy and thoughtful. Check it out!
• Want to learn about reactive programming? Check out the code and slides to Rob Winch’s epic Intro to Reactive Programming!