New in Spring Security 7: MFA, OAuth2 and more by Daniel Garnier @ Spring I/O 2026

This talk covers the enhancements introduced in Spring Security 7, highlighting the long-awaited multi-factor authentication feature and its implications for user security. The speaker presents in-depth demonstrations of the new MFA APIs and explores significant OAuth2 improvements designed for modern authorization flows, including AI agent integrations through the Model Context Protocol. Additionally, the session discusses various quality-of-life changes, new default settings, and the impact on existing projects, along with migration strategies from version 6.