The following items are related to the configuration of Spring Security:
- #3956: Central configuration of the default role prefix. See the issue for details
- #4102: Custom default configuration in WebSecurityConfigurerAdapter
- #3899: concurrency-control@max-sessions supports unlimited sessions.
- #4097: intercept-url@request-matcher-ref adds more powerful request matching support to the XML namespace
- #3990: Support for constructing RoleHierarchy from Map (such as YML).
- #4062: Custom cookiePath to CookieCsrfTokenRepository.
- #3794: Allowing the configuration of InvalidSessionStrategy on SessionManagementConfigurer
- #4020: Fixing exposed beans for defaultMethodExpressionHandler can prevent Method Security ...