7.2.x

Issues

• Update snapshots to Spring Framework 7.+

  in: buildtype: enhancement
  spring-projects/spring-security#19026 · Filter by author jgrandja opened on Apr 2, 2026 · 7.2.x
  1

• Deprecate usages of RestTemplate and Provide Alternative (e.g. RestClient)

  in: webtype: enhancement
  spring-projects/spring-security#19027 · Filter by author jgrandja opened on Apr 2, 2026 · 7.2.x
  4

• Add Kotlin DSL for OAuth Authorization Server configuration

  in: oauth2type: enhancement
  Unread
  spring-projects/spring-security#18150·mehrdadbozorgmehr opened Nov 7, 2025 · Updated Aug 30, 2026
  9

  

• Null safety via JSpecify spring-security-config

  in: configtype: enhancement
  spring-projects/spring-security#18399 · Filter by author rwinch opened on Jan 7, 2026 · 7.2.x
  

• Add request validator for refresh token grant

  in: oauth2type: enhancement
  Unread
  spring-projects/spring-security#18098·therepanic opened Oct 22, 2025 · Updated Jul 10, 2026
  3

  

• Add ID token support for token exchange

  in: oauth2type: enhancement
  Unread
  spring-projects/spring-security#19076·bkoragan opened Apr 15, 2026 · Updated Jul 15, 2026
  6

  

• Migrate JDBC PersistentToken Support

  type: enhancement
  spring-projects/spring-security#18982 · Filter by author jzheaux opened on Mar 25, 2026 · 7.2.x
  6

• Null safety via JSpecify

  type: enhancementtype: theme
  spring-projects/spring-security#16882 · Filter by author rwinch opened on Apr 4, 2025 · 7.2.x
  

• Conditional MFA

  type: enhancement
  spring-projects/spring-security#18924 · Filter by author rwinch opened on Mar 17, 2026 · 7.2.x
  

• Support Disabling MFA when the User has a Specified Authority

  status: waiting-for-triagetype: enhancement
  spring-projects/spring-security#18925 · Filter by author rwinch opened on Mar 17, 2026 · 7.2.x
  2

• Consider Exposing WebAuthnRegisteredPredicate

  status: waiting-for-triagetype: enhancement
  spring-projects/spring-security#18961 · Filter by author rwinch opened on Mar 20, 2026 · 7.2.x

• Add Support for User Specific Factors

  status: waiting-for-triagetype: enhancement
  spring-projects/spring-security#18962 · Filter by author rwinch opened on Mar 20, 2026 · 7.2.x
  1

  

• Provide ability to customize HTTP client in ClientRegistrations and JwtDecoders

  in: oauth2type: enhancement
  Unread
  spring-projects/spring-security#19553·evgeniycheban opened Aug 17, 2026 · Updated Aug 18, 2026
  

• Support nonce-based Content Security Policy

  in: webtype: enhancement
  Unread
  spring-projects/spring-security#18499·ziqin opened Jan 14, 2026 · Updated Sep 25, 2026
  72