spring-security 3

• Roles changed, but the old ones kept working for 30 minutes: putting a permission version in the JWT Nov 3, 2026
• Why I rolled back refresh token rotation after one day Sep 4, 2026
• Spring Boot 2.7 to 3.3 and Java 11 to 21, in two steps Jun 12, 2024