docs/modules/ROOT/pages/whats-new.adoc

[[new]]
= What's New in Spring Security 7.1

== Web

* https://github.com/spring-projects/spring-security/pull/18634[gh-18634] - Added javadoc:org.springframework.security.web.util.matcher.InetAddressMatcher[]
* https://github.com/spring-projects/spring-security/issues/18755[gh-18755] - Include `charset` in `WWW-Authenticate` header
* Added xref:servlet/authorization/architecture.adoc#authz-conditional-authorization-manager[ConditionalAuthorizationManager]
* Added `when` and `withWhen` conditions to `AuthorizationManagerFactories.multiFactor()` for xref:servlet/authentication/mfa.adoc#programmatic-mfa[Programmatic MFA]
* Added `MultiFactorCondition.WEBAUTHN_REGISTERED` to `@EnableMultiFactorAuthentication(when = ...)` for xref:servlet/authentication/mfa.adoc#mfa-when-webauthn-registered[conditionally requiring MFA for WebAuthn Users]

== OAuth 2.0

* https://github.com/spring-projects/spring-security/issues/18745[gh-18745] - Add RestClientOpaqueTokenIntrospector
Extract subsections for preface 2018-03-05 16:56:47 -06:00			`[[new]]`
Update to 7.1.0-SNAPSHOT 2026-01-09 10:32:03 -06:00			`= What's New in Spring Security 7.1`
Extract subsections for preface 2018-03-05 16:56:47 -06:00
Polish Documentation 2026-03-10 07:43:43 -06:00			`== Web`

Add InetAddressMatcher 2026-02-02 16:01:24 -06:00			`* https://github.com/spring-projects/spring-security/pull/18634[gh-18634] - Added javadoc:org.springframework.security.web.util.matcher.InetAddressMatcher[]`
Polish Documentation 2026-03-10 07:43:43 -06:00			* https://github.com/spring-projects/spring-security/issues/18755[gh-18755] - Include `charset` in `WWW-Authenticate` header
Add ConditionalAuthorizationManager 2026-03-11 11:33:59 -05:00			`* Added xref:servlet/authorization/architecture.adoc#authz-conditional-authorization-manager[ConditionalAuthorizationManager]`
AuthorizationManagerFactories.when 2026-03-11 13:56:04 -05:00			* Added `when` and `withWhen` conditions to `AuthorizationManagerFactories.multiFactor()` for xref:servlet/authentication/mfa.adoc#programmatic-mfa[Programmatic MFA]
Add MultiFactorCondition.WEBAUTHN_REGISTERED 2026-03-13 22:30:19 -05:00			* Added `MultiFactorCondition.WEBAUTHN_REGISTERED` to `@EnableMultiFactorAuthentication(when = ...)` for xref:servlet/authentication/mfa.adoc#mfa-when-webauthn-registered[conditionally requiring MFA for WebAuthn Users]
Add to What's New 2026-03-10 07:51:30 -06:00
			`== OAuth 2.0`

			`* https://github.com/spring-projects/spring-security/issues/18745[gh-18745] - Add RestClientOpaqueTokenIntrospector`