v0.0.4

What's Changed

• Upgrade to Spring AI 1.1.0 and MCP 0.15.0
• Authorization-Server: expose underlying Spring Security Authorization Server configuration for configuration beyond MCP-specific needs through McpAuthorizationServerConfigurer#authorizationServer
• MCP-Server: Improve CSRF support for API key servers
• Support Spring AI streaming responses with chatClient.prompt("...").stream().

New Contributors

• @ashakirin made their first contribution in #15

Full Changelog: v0.0.3...v0.0.4

v0.0.3

Improve support for dynamic client registration with Claude Code.

New Contributors

• @imod made their first contribution in #11

Full Changelog: v0.0.2...v0.0.3

v0.0.2

Add support for API keys in MCP servers.

Breaking changes

• Renamed and move the oauth2-based configurer for MCP servers, now in org.springaicommunity.mcp.security.server.config.McpServerOAuth2Configurer#mcpServerOAuth2.

New features

• Support API keys in MCP Servers.

Full Changelog: v0.0.1...v0.0.2

v0.0.1

Initial release!

Features

• Support OAuth2 flows for MCP servers, including RFC8707 Resource Indicators and RFC9728 Protected Resource Metadata.
• Support OAuth2 flows for MCP clients
• Basic support for RFC7591 Dynamic Client Registration in Spring Authorization Server

Full Changelog: https://github.com/spring-ai-community/mcp-security/commits/v0.0.1