Published on Dec 29, 2022
As of today, VMWare is releasing Spring Authorization Server 1.0 two-and-a-half years following its introduction to the Java community.
Based on Spring Security, the Spring Authorization Server project supports the creation of OpenID Connect 1.0 Identity Providers and OAuth 2.1 Authorization Servers. This project replaces the Spring Security OAuth project, which is no longer maintained.
Spring Authorization Server is also based on Spring Framework 6.0 and requires Java 17 as a minimum requirement. As described on the Feature List, the project supports Authorization Grants, Token Format, Client Authentication, and Protocol Endpoints.
The following example application illustrates the basic configuration for a Spring Boot application created with Spring Initializr.
Spring Authorization Server requires several @Bean components, which must be defined in a class annotated with @Configuration in the Developing Your First Application documentation.
In several videos, Spring Authorization Server is explained in depth, for example by Joe Grandja, a core committer on the Spring Security team, who presented Getting Started with Spring Authorization Server at the San Francisco JUG, and Laurentiu Spilca, the author of Spring Security in Action, who presented Implementing an OAuth 2 authorization server with Spring Security at Spring I/O.
Projects are released in accordance with the VMware Tanzu Open Source Software Support Policy, which means major releases are supported for a period of three years. Additionally, VMware offers commercial support 24 hours a day, 7 days a week.
There is more information available in the Getting Started guide, the Reference documentation, and the examples on GitHub.
