We are excited to announce that we’ve started preparing for Spring Authorization Server 1.0 with plans to release the GA version in November 2022. It has been just over two years since we initially announced this new project, and we have come a long way since its initial development. The project has a full feature set, and the APIs have stabilized and matured over this time. A lot of effort and care was put into this project to ensure that it can grow and adapt over the next few years.
Spring Authorization Server 1.0 will be based on Spring Security 6.0, which will be based off of Spring Framework 6.0 and will require a minimum of JDK 17 at runtime, as well as a minimum of Tomcat 10 or Jetty 11 (for Jakarta EE 9 compatibility). This major release will inherit the VMware Tanzu OSS support policy. Commercial support, which offers an extended support period, is also available from VMware.
In addition to Spring Authorization Server 1.0, we will also release Spring Authorization Server 0.4.0, which will continue to be based on Spring Security 5.x and Java 8. The 0.4.x branch will continue to use its own support policy.
Over the next couple of months, we will focus on fine-tuning the public APIs and enhancing the configuration model to allow for easier configuration and greater extensibility. We will also make some minor API changes, resulting in breaking changes, which may require updates to consuming applications.
The release schedule has been set for 1.0.0 and 0.4.0. We would appreciate any feedback as we continue to add improvements to Spring Authorization Server and track towards its first major release planned for this Nov 2022.
On behalf of the team, I would like to thank everyone who has contributed and helped grow this project. We have great momentum heading into the next phase and are really looking forward to building on this momentum and gaining wider adoption within the community. We hope to continue to work together and ultimately establish Spring Authorization Server as the de facto framework for OAuth2 Authorization Server support on the Java platform.