3226 Commits

Author	SHA1	Message	Date
Josh Cummings	5ae1b73bae	Fix Cyclic Bean Dependency ... Closes gh-17484	2025-07-07 10:32:56 -06:00
Tran Ngoc Nhan	d8043dc8a7	Remove PrePostTemplateDefaults ... Closes gh-17296 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-07-03 15:47:27 -06:00
Tran Ngoc Nhan	21036c94b4	Remove Nimbus(Reactive)OpaqueTokenIntrospector ... Closes gh-17302 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-07-03 15:41:57 -06:00
Tran Ngoc Nhan	519ae241f4	Fix Mock for Spring(Reactive)OpaqueTokenIntrospector ... Issue gh-17302 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-07-03 15:41:57 -06:00
Tran Ngoc Nhan	9312fb7004	Remove Deprecated AuthorizationDecision Elements ... Closes gh-17299 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-07-03 14:32:49 -06:00
Josh Cummings	d3e9e3138d	Remove AntPath and MvcRequestMatcher ... Closes gh-16886 Closes gh-16887	2025-07-03 13:37:50 -06:00
Josh Cummings	919ae1d636	Use PathPatternRequestMatcher in oauth2 ... Issue gh-16887	2025-07-03 13:37:49 -06:00
Josh Cummings	7da352129c	Use PathPatternRequestMatcher in saml2 ... Issue gh-16887	2025-07-03 13:37:48 -06:00
Josh Cummings	3e53cc2c4a	Use PathPatternRequestMatcher in config ... This commit changes the config module to use PathPatternRequestMatcher in favor of MvcRequestMatcher and AntPathRequestMatcher. This allows removing several HandlerMappingIntrospector support classes as well which were in place to support MvcRequestMatcher. Issue gh-16886 Issue gh-16887	2025-07-03 13:37:47 -06:00
Josh Cummings	98686a5139	Standardize Mock Request Paths ... Closes gh-17449	2025-07-03 13:37:47 -06:00
Josh Cummings	d5f986f733	Deprecate createMvcMatchers ... Issue gh-16631	2025-07-03 13:37:46 -06:00
Tran Ngoc Nhan	4d524b1fe1	Remove RelyingPartyRegistration Deprecations ... Closes gh-17309 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-07-03 13:15:44 -06:00
Soumik Sarker	526f8a6200	Removed deprecated class BearerTokenAuthenticationToken ... Issue gh-17309 Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>	2025-07-03 12:44:06 -06:00
Soumik Sarker	edb7a642c7	Removed deprecated class ObjectPostProcessor ... Issue gh-17309 Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>	2025-07-03 12:44:06 -06:00
Joe Grandja	e869bcdfa3	Remove deprecated implementations of OAuth2AccessTokenResponseClient ... Closes gh-16909	2025-07-03 14:23:23 -04:00
Joe Grandja	cfe38957d7	Remove Resource Owner Password Credentials grant ... Closes gh-17446	2025-07-03 14:23:23 -04:00
Kevin Yue	7de4217469	Don't cache WebSocket request ... PR gh-16741 Signed-off-by: Kevin Yue <yuezk001@gmail.com>	2025-06-27 15:47:05 -05:00
Rob Winch	00ead7f24d	Update to Kotlin 2.2	2025-06-26 17:29:12 -05:00
Tran Ngoc Nhan	e686ac6b11	Remove AbstractSecurityWebSocketMessageBrokerConfigurer ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-06-24 12:56:05 -06:00
Tran Ngoc Nhan	a74ce06dae	Remove JwtIssuer(Reactive)AuthenticationManagerResolver deprecations ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-06-24 12:33:00 -06:00
Josh Cummings	08cbdb4640	Merge remote-tracking branch 'origin/6.5.x'	2025-06-20 14:43:25 -06:00
Josh Cummings	9f88ef83eb	Polish Post-Processor Test ... Issue gh-17175 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2025-06-20 14:41:58 -06:00
Maciej Kowalski	46283b3452	Relax ObjectPostProcessor Type Constraints ... Closes gh-17175 Signed-off-by: Maciej Kowalski <f.kowal@gmail.com>	2025-06-20 14:41:58 -06:00
Josh Cummings	a4c338f8a5	Format authorizeExchange Blocks ... This commit formats authorizeExchange blocks to use a common variable name and ensure the variable and reference are on the same line. Issue gh-13067	2025-06-20 10:46:52 -06:00
Josh Cummings	da6c7b8759	Format Lambda Usage ... This commit updates Lambda DSL usage to favor having the variable and reference on the same line Issue gh-13067	2025-06-20 10:46:52 -06:00
Josh Cummings	777447e1d9	Format authorizeHttpRequests Blocks ... This commit formats authorizeHttpRequests blocks to use the same parameter name and places the reference on the same line as the parameter. Issue gh-13067	2025-06-20 10:46:51 -06:00
Josh Cummings	cf6b52d6f7	Format authorizeRequests Blocks ... This commit changes all auhorizeRequests declarations to use the same variable name and declare the lambda parameter and reference on the same line. Issue gh-13067	2025-06-20 10:46:51 -06:00
Josh Cummings	5dd40a7f10	Remove ServerHttpSecurity and() DSL Methods ... This commit removes all and() DSL methods with the exception of featurePolicy, which will be removed as a whole at another time. Closes gh-13067	2025-06-20 10:46:43 -06:00
Josh Cummings	f789abc87f	Use ServerHttpSecurity Lambda DSL in JavaDoc ... Issue gh-13067	2025-06-20 10:41:32 -06:00
Josh Cummings	461f00ed38	Use ServerHttpSecurity Lambda DSL in Config ... Issue gh-13067	2025-06-20 10:41:31 -06:00
Josh Cummings	9fcfacf283	Use ServerHttpSecurity Lambda DSL in Tests ... Issue gh-13067	2025-06-20 10:41:31 -06:00
Josh Cummings	1a7b1fcc7c	Remove HttpSecurity and() DSL Methods ... This commit removes all and() methods that have been deprecated in the HttpSecurity DSL with the exception of featurePolicy, which will be removed when that feature is removed. Note that since featurePolicy does not have a lambda equivalent, the and support needs to remain for the moment. Issue gh-13067	2025-06-20 10:41:31 -06:00
Josh Cummings	45a1447e9b	Use HttpSecurity Lambda DSL in JavaDoc ... Issue gh-13067	2025-06-20 10:41:30 -06:00
Josh Cummings	1435e0f3d3	Use HttpSecurity Lambda DSL in Config Tests ... Issue gh-13067	2025-06-20 10:41:30 -06:00
Josh Cummings	6ddb964c61	Remove ApacheDS Support ... Closes gh-13852	2025-06-19 11:55:34 -06:00
Josh Cummings	42e24aa53c	Fix Formatting	2025-06-17 16:55:22 -06:00
evga7	06ed6ef342	Simplify Csrf Processor Decision Logic ... Replaces repeated if-else string comparisons with a Set.contains() check for known WebSocket handshake handler class names in MessageSecurityPostProcessor. Improves readability and maintainability without changing behavior. Signed-off-by: Wonpyo Hong <evga7@naver.com>	2025-06-17 16:55:22 -06:00
Tran Ngoc Nhan	c2c84c4243	Update HttpSecurity javadoc ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-06-17 13:31:24 -05:00
Evgeniy Cheban	b0cecb37d2	Replace deprecated #check calls with #authorize ... Closes gh-16936 Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>	2025-06-12 11:11:49 -06:00
Rob Winch	7bf2730a53	Add x509@principal-extractor-ref ... Enables customizing the X500PrincipalExtractor	2025-06-12 12:09:20 -05:00
Rob Winch	88ed4a5ccf	Use principalExtractor reference instead of properties	2025-06-12 12:09:20 -05:00
Max Batischev	aba437d469	Add Support SubjectX500PrincipalExtractor ... Closes gh-16980 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-06-12 12:09:20 -05:00
Josh Cummings	9b724377ce	Rework Saml2 Authentication Statement ... This commit separates the authentication principal, the assertion details, and the relying party tenant into separate components. This allows the principal to be completely decoupled from how Spring Security triggers and processes SLO. Specifically, it adds Saml2AssertionAuthentication, a new authentication implementation that allows an Object principal and a Saml2ResponseAssertionAccessor credential. It also moves the relying party registration id from Saml2AuthenticatedPrincipal to Saml2AssertionAuthentication. As such, Saml2AuthenticatedPrincipal is now deprecated in favor of placing its assertion components in Saml2ResponseAssertionAccessor and the relying party registration id in Saml2AssertionAuthentication. Closes gh-10820	2025-06-10 17:21:03 -06:00
Christian Schuster	36c7b91fb9	SAML 2.0 Single Logout Uses Saml2AuthenticationInfo ... This allows SLO to be triggered without the authentication principal needing to implement a given interface. Issue gh-10820	2025-06-10 17:21:03 -06:00
Josh Cummings	aa3135169d	Polish Documentation ... Closes gh-14635	2025-06-09 16:49:36 -06:00
Liviu Gheorghe	3ddf201d66	Updated Copyrights ... Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com>	2025-06-09 16:45:24 -06:00
1livv	edfd7b9b43	Addressed review comments ... Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com>	2025-06-09 16:45:24 -06:00
1livv	358f6c96b5	Update config tests ... Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com>	2025-06-09 16:45:24 -06:00
Joe Grandja	2e913d2af9	Merge branch '6.5.x'	2025-06-05 16:22:35 -04:00
Joe Grandja	dab989d7c3	Fix NPE with DPoP tokenAuthenticationManager ... Closes gh-17172	2025-06-05 16:06:55 -04:00
Josh Cummings	c8b843c4c5	Merge branch '6.5.x'	2025-06-05 12:36:53 -06:00
damable-nuvolex	3b12e758d3	Fix inconsistent constructor declaration ... Closes gh-16325 Signed-off-by: damable-nuvolex <damable@nuvolex.com>	2025-06-05 12:36:27 -06:00
damable-nuvolex	a0c5504eca	Fix inconsistent constructor declaration ... Closes gh-16325 Signed-off-by: damable-nuvolex <damable@nuvolex.com>	2025-06-05 12:34:35 -06:00
Josh Cummings	eaab42a73c	Polish BearerTokenAuthenticationConverter Support ... - Moved to BearerTokenAuthenticationFilter constructor to align with AuthenticationFilter - Undeprecated BearerTokenResolver to reduce number of migration scenarios - Updated to 7.0 schema - Added migration docs Issue gh-14750	2025-06-04 18:17:17 -06:00
Max Batischev	4967f3feee	Add Support BearerTokenAuthenticationConverter ... Closes gh-14750 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-06-04 18:17:17 -06:00
Josh Cummings	3f0326d3f1	Merge remote-tracking branch 'origin/6.5.x'	2025-06-04 12:49:12 -06:00
Evgeniy Cheban	33ae1711a7	Set Precedence Order for Spring MVC TargetVisitor ... Closes gh-17185 Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>	2025-06-04 12:47:36 -06:00
Josh Cummings	195f933438	Allow Default Ordering for TargetVisitor ... In tests, we want to both test that functionality works and also demonstrate common or expected usage, where possible. It is likely incorrect to use @Order(0) for a target visitor as this states that it should take precedence over all Spring Security visitors defined at a lower precedence. Also, it appears this may have been added this way because of a mock visitor that appears to be unused by any tests. Further, when an application has multiple visitors, they should use the TargetVisitor.of method to publish one bean with the order determined by the order of the method parameters instead of having two separate beans. This commit removes the @Order(0) annotation and also the mock visitor, deferring to the natural ordering afforded by the framework. Issue gh-15994	2025-06-02 13:41:21 -06:00
Evgeniy Cheban	fd4f06a66e	Support Spring Data container types for AuthorizeReturnObject ... Closes gh-15994 Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>	2025-05-29 17:05:27 -06:00
Josh Cummings	6d3b54df21	Change Type Validation Default ... NimbusJwtDecoder and NimbusReactiveJwtDecoder now use Spring Security's JwtTypeValidator by default instead of Nimbus's type validator. Closes gh-17181	2025-05-28 16:11:13 -06:00
Yanming Zhou	42790403da	Use SpringReactiveOpaqueTokenIntrospector ... Now that NimbusReactiveOpaqueTokenIntrospector is deprecated, this commit changes the Spring Security default to now use SpringReactiveOpaqueTokenIntrospector. Issue gh-15988 Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	2025-05-27 14:25:31 -06:00
Josh Cummings	596449d882	Polish ... Issue gh-14149	2025-05-27 11:44:33 -06:00
Felix Hagemans	1a4de49977	Create CsrfCustomizer for SPA configuration ... Closes gh-14149 Signed-off-by: Felix Hagemans <felixhagemans@gmail.com>	2025-05-27 11:44:33 -06:00
Josh Cummings	52394c1f07	Propagate Any AccessDeniedException ... Any time a response handler throws an exception, we want to propagate an underlying AccessDeniedException if their is one. Issue gh-16058	2025-05-23 15:18:01 -06:00
Evgeniy Cheban	fae61b9426	Propagate AccessDeniedException for Authorized Objects Returned from a Controller ... Closes gh-16058 Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>	2025-05-23 15:18:01 -06:00
dae won	8612e952fe	Make AuthorizationProxyFactory#proxy Generic ... Closes gh-16706 Signed-off-by: dae won <eodnjs01477@gmail.com>	2025-05-23 14:48:11 -06:00
Max Batischev	f4b8e2421a	Add Support Credentialless COEP Header ... Closes gh-16991 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-05-23 14:45:59 -06:00
Josh Cummings	97923ebfaf	Merge branch '6.5.x'	2025-05-21 16:47:45 -06:00
Josh Cummings	4bf03bde5b	Merge branch '6.4.x' into 6.5.x	2025-05-21 16:47:25 -06:00
Josh Cummings	3186e8df84	Merge remote-tracking branch 'origin/6.3.x' into 6.4.x	2025-05-21 16:46:54 -06:00
Andrey Litvitski	4048b2bd7d	Use `HttpStatus` in BackChannel Logout Filters ... Closes gh-17125 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	2025-05-21 16:45:46 -06:00
Tran Ngoc Nhan	a511171309	Add test and update javadoc for CommonOAuth2Provider ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-05-13 12:45:38 -06:00
Joe Grandja	44303d2c80	Polish gh-17080	2025-05-13 14:36:44 -04:00
Joe Grandja	a265ac6ae7	Polish gh-17080	2025-05-13 14:35:23 -04:00
Joe Grandja	ba7be9c8b9	Merge branch '6.5.x'	2025-05-09 16:14:34 -04:00
Joe Grandja	e3c39f02bc	Add documentation for DPoP support ... Closes gh-17072	2025-05-09 16:02:14 -04:00
Rob Winch	693a5beb24	Format CommonOAuth2Provider	2025-05-07 14:55:04 -05:00
kiruthiga1793	23e7c9eeaa	Add Twitter/X to CommonOAuth2Provider ... Signed-off-by: kiruthiga1793 <pkiruthiga93@gmail.com>	2025-05-07 11:24:29 -05:00
Rob Winch	506a801f29	Merge branch '6.5.x' ... - WebAuthnConfigurer Code Cleanup Closes gh-17063	2025-05-06 15:22:36 -05:00
Max Batischev	66e614cb0b	WebAuthnConfigurer Code Cleanup ... Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-05-06 15:20:08 -05:00
Max Batischev	421fcaee12	Add Assertions To WebAuthnConfigurer ... Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-05-06 15:20:08 -05:00
Rob Winch	b453840c0a	HttpHeaders no longer a MultiValueMap ... Closes gh-17060	2025-05-06 13:27:13 -05:00
Rob Winch	3976e7d456	BodyInserters.fromObject -> fromProducer ... Closes gh-17055	2025-05-06 13:26:16 -05:00
Rob Winch	b467c47ed5	ClientRequest.method->create ... ClientRequest.method was deprecated in favor of the create method Closes gh-17054	2025-05-06 13:26:15 -05:00
Rob Winch	11105a5c51	UriComponentsBuilder.fromHttpUrl->fromUriString ... The fromHttpUrl method is deprecated and replaced with fromUriString Closes gh-	2025-05-06 13:26:15 -05:00
Rob Winch	38a9aa1da9	Remove Deprecated PathMatchConfigurer usage ... Closes gh-17052	2025-05-06 13:26:15 -05:00
Rob Winch	222faae1cb	Add junit-jupiter-engine ... This fixes some of the compatability problems that can happen with newer versions of junit	2025-05-06 13:26:15 -05:00
Rob Winch	5abbcecccc	Update to 7.0.0-SNAPSHOT ... Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	2025-05-06 13:26:14 -05:00
Josh Cummings	1a9f62dce4	Merge branch '6.4.x'	2025-05-05 16:00:59 -06:00
Josh Cummings	0220e471bb	Move Serialization Samples ... To make SpringSecurityCoreVersionSerializableTests more manageable, this commit moves the sample class constructions to a separate file. In this way, the tests file only changes when serialization tests are added. When classes are introduced, they can be added to SerializationSamples, separating the two concerns	2025-05-05 15:51:10 -06:00
Josh Cummings	12a18c3792	Polish Serialization Tests ... If Instancio fails to instatiate the class sample, it will now also delete the serialized sample file. Otherwise, it will leave a zero-byte file on the filesystem, confusing future test runs	2025-05-05 15:39:33 -06:00
Josh Cummings	d04f7071c2	Add Missing Serialization Samples ... Closes gh-17038	2025-05-05 15:34:24 -06:00
Josh Cummings	8726e547d5	Add Serialization Samples for 6.5 ... Issue gh-16221	2025-05-05 15:31:51 -06:00
Josh Cummings	2949b5d5a4	Regenerate Incorrect Serialization Files ... Given that these classes each have a consistent serialization UID across minor versions, but that the 6.5.x serialized version is using a different UID, these serialized files were likely generated in error. As such, this commit replaces the serialized files with correct ones. Issue gh-16432	2025-05-05 15:30:15 -06:00
Josh Cummings	34a9f57aa6	Merge branch '6.4.x'	2025-05-05 15:29:44 -06:00
Josh Cummings	c3c2bcd6b7	Ignore Serialization in Test Components ... Since we don't need to ensure the serializability of test components across versions, we can ignore missing version UIDs when those test components aren't about testing Java serialization. Issue gh-17038	2025-05-05 15:09:50 -06:00
Josh Cummings	39fdceab59	Add Missing Serializable Samples ... Issue gh-17038	2025-05-05 15:09:50 -06:00
Josh Cummings	65d53beff8	Polish Serialization Tests ... - Error when public, non-ignored, serializable file is missing a sample - Provide mechanism for creating an InstancioApi from scratch Issue gh-17038	2025-05-05 15:09:49 -06:00
Josh Cummings	34afa64c0c	Add Current-Version Deserialization Test ... We should test that serialized files from the current minor version can be deserialized. This ensures that serializations remain deserializable in patch releases. Issue gh-3737	2025-05-05 15:09:43 -06:00
Josh Cummings	f44ab7afdf	Update Deprecated Security Usage	2025-04-23 14:16:29 -06:00
Max Batischev	4a12382d2b	Remove unused classes ... Remove DeferringObservationAuthorizationManager.java and DeferringObservationReactiveAuthorizationManager.java Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-04-23 14:09:05 -06:00
Josh Cummings	a683a3a730	Favor PathPatternMessageMatcher when activated ... Issue gh-16500	2025-04-23 12:11:10 -06:00
Josh Cummings	0ab01eac14	Update Deprecated Security Usage	2025-04-23 12:11:08 -06:00
Josh Cummings	834370d8eb	Update Deprecated Spring Web Usage	2025-04-23 11:29:19 -06:00
Josh Cummings	2ad859a63c	Add Missing Deprecation Markers	2025-04-23 11:29:18 -06:00
Josh Cummings	3f7f3dabe7	Correct JavaDoc Class Reference	2025-04-23 11:29:18 -06:00
Josh Cummings	f86c4ad383	Polish Native Support ... - Remove unneeded deprecateion marker - Add missing reflected class Issue gh-16536	2025-04-14 14:08:57 -06:00
Josh Cummings	178ca73673	Fix Type Check ... Issue gh-16536	2025-04-14 13:42:44 -06:00
Josh Cummings	ae82be70c3	Add Needed Runtime Hints ... Issue gh-16536	2025-04-14 11:06:18 -06:00
Josh Cummings	0e70482725	Fix Formatting	2025-04-10 15:55:00 -06:00
Josh Cummings	09ba5397fb	Add Support for Authorizing Spring MVC Return Types ... Closes gh-16059	2025-04-10 15:48:10 -06:00
Josh Cummings	6438603cb6	Pick Up TargetVisitor Beans ... Closes gh-16923	2025-04-10 15:48:09 -06:00
Josh Cummings	5841e35cae	Invert AuthorizeReturnObjectMethodInterceptor Dependency ... Closes gh-16922	2025-04-10 15:48:09 -06:00
Daeho Kwon	9908d96644	DeferredCsrfToken Implements Supplier ... Closes gh-16870 Signed-off-by: Daeho Kwon <trewq231@naver.com>	2025-04-09 14:24:11 -06:00
Josh Cummings	f93a7a2f85	Deprecate HandlerMappingIntrospectorRequestTransformer ... Closes gh-16536	2025-04-07 13:56:18 -06:00
Steve Riesenberg	03e090c2d7	Merge branch '6.4.x' ... Closes gh-16902	2025-04-07 10:57:12 -05:00
Steve Riesenberg	db34de59bc	Merge branch '6.3.x' into 6.4.x ... Closes gh-16901	2025-04-07 10:55:51 -05:00
Steve Riesenberg	3c0fef59b5	Polish gh-16039 ... Closes gh-16038	2025-04-07 10:54:09 -05:00
Jonah Klöckner	da94fbe431	Evaluate URI query parameter only if enabled ... Issue gh-16038	2025-04-07 10:54:07 -05:00
Joe Grandja	9c073dbcde	Add AuthenticationEntryPoint for DPoP ... Issue gh-16574 Closes gh-16900	2025-04-07 09:38:51 -04:00
chu3la	8cbe02e3aa	Update WebAuthn Test Objects Class Names ... Closes gh-16604 Signed-off-by: chu3la <elmansouri.houssam@gmail.com>	2025-04-03 16:33:34 -06:00
Josh Cummings	4cdc6dab21	Fix Formatting ... Issue gh-16604	2025-04-03 12:55:51 -06:00
Vasanth	04d7130975	Update WebAuthn Test Objects Class Names ... Renamed the WebAuthn test object class names Closes gh-16604 Signed-off-by: Vasanth <76898064+vasanth-79@users.noreply.github.com>	2025-04-03 12:55:50 -06:00
Josh Cummings	2885b0f75f	Add valueOf ... This commit adds a static factory for returning a constant ClientAuthenticationMethod or creating a new one when there is no match. Issue gh-16825	2025-04-02 11:16:30 -06:00
Steve Riesenberg	7a937ca369	Merge branch '6.4.x' ... Closes gh-16845	2025-03-28 16:34:35 -05:00
Steve Riesenberg	26c63aeb01	Merge branch '6.3.x' into 6.4.x ... Closes gh-16844	2025-03-28 16:34:01 -05:00
Steve Riesenberg	b7df86197c	Apply request-handler-ref to CsrfAuthenticationStrategy ... Closes gh-16801	2025-03-28 16:25:52 -05:00
Steve Riesenberg	c84c438075	Apply request-handler-ref to CsrfAuthenticationStrategy ... Closes gh-16801	2025-03-28 16:08:36 -05:00
Josh Cummings	40b84d3e44	Merge branch '6.4.x'	2025-03-27 16:34:39 -06:00
Josh Cummings	6c5b6d1c51	Merge branch '6.3.x' into 6.4.x ... Closes gh-16837	2025-03-27 16:32:12 -06:00
Josh Cummings	15b9a50060	Add Test ... Issue gh-16819	2025-03-27 16:18:00 -06:00
Josh Cummings	37b8d019fa	Polish RequestMatcher Migration Path for OAuth 2.0 Login DSL ... Issue gh-16573	2025-03-26 16:38:39 -06:00
Steve Riesenberg	860f130bc4	Add additional validation when refreshing ID tokens ... Issue gh-16589	2025-03-26 15:34:17 -05:00
Steve Riesenberg	5f98ce5ecc	Polish gh-16589	2025-03-26 15:34:17 -05:00
Josh Cummings	d2d9da0a39	Favor PathPatternRequestMatcher ... Issue gh-16828	2025-03-26 14:33:46 -06:00
Josh Cummings	e65e32bb42	Polish CorsConfigurationSource Selection Logic ... Issue gh-16501	2025-03-26 13:44:47 -06:00
Josh Cummings	59f08e861e	Use PathPatternRequestMatcher in Docs ... Update documenation references from PathPatternRequestMatcher to AntPathRequestMatcher Issue gh-16632	2025-03-26 13:40:04 -06:00
Josh Cummings	ff52e05b24	Favor PathPatternRequestMatcher in XML Configuration ... Update BeanDefinitionParsers to use PathPatternRequestMatcher conditionally on the presence of a PathPatternRequestMatcher.Builder bean Closes gh-16828	2025-03-26 13:40:04 -06:00
Josh Cummings	de07b1108f	Use PathPatternRequestMatcher in Web Components ... This commit changes filters and resolvers that were using AntPathRequestMatcher as their default to using PathPatternRequestMatcher. Issue gh-16632	2025-03-26 13:28:58 -06:00
Evgeniy Cheban	ad1ee28f01	Update HandlerMappingIntrospector Usage in CORS support ... Closes gh-16501 Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>	2025-03-26 13:11:05 -06:00
Josh Cummings	86599afd43	Rename servletPath to basePath ... Closes gh-16765	2025-03-21 12:04:46 -06:00
Josh Cummings	c91656c27a	Add Authorization Event Tests ... - These ensure that the parameterized version of authorization events can be listened to Issue gh-16700	2025-03-20 13:12:36 -06:00
Josh Cummings	1120733e27	Update Copyright	2025-03-19 17:43:01 -06:00
Josh Cummings	116ef5fd54	Add HttpsRedirectFilter ... - Added missing JavaDoc Issue gh-16678	2025-03-19 17:41:20 -06:00
Josh Cummings	8e9634d25c	Deprecate ConfigAttribute ... Closes gh-16774	2025-03-19 17:39:38 -06:00
Josh Cummings	89bd670fb1	Deprecate SecurityConfig ... Closes gh-16773	2025-03-19 17:39:26 -06:00
Josh Cummings	a884c3c906	Address XsdDocumentedTests Errors ... Issue gh-16775	2025-03-19 16:39:27 -06:00
Josh Cummings	e6008b6067	Add RedirectToHttps to XML ... Closes gh-16775	2025-03-19 15:26:05 -06:00
Josh Cummings	44d553946e	PathPatternMessageMatcher Polish ... Issue gh-16500 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2025-03-19 08:48:54 -06:00
Pat McCusker	33272ef0f4	Add PathPatternMessageMatcher ... Closes gh-16500 Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	2025-03-19 08:48:54 -06:00
Steve Riesenberg	5bb5d0f6be	Polish gh-16589	2025-03-18 18:07:56 -05:00
Hao	fc1469ad5e	Ensure ID Token is updated after refresh token ... Signed-off-by: Hao <kyrieeeee2@gmail.com>	2025-03-18 18:07:56 -05:00
Rob Winch	e6223dede3	Merge branch '6.4.x' ... - adb303e Add testRuntimeOnly junit-platform-launcher Closes gh-16757	2025-03-17 14:34:18 -05:00
Rob Winch	05116eabbd	Merge branch '6.3.x' into 6.4.x ... - adb303e Add testRuntimeOnly junit-platform-launcher Closes gh-16756	2025-03-17 14:18:49 -05:00
Rob Winch	adb303e152	Add testRuntimeOnly junit-platform-launcher ... Closes gh-16755	2025-03-17 14:16:44 -05:00
Rob Winch	3a11d1529d	Merge branch '6.4.x' ... - Disable Flaky WebAuthnWebDriverTests Closes gh-16754	2025-03-17 13:57:37 -05:00
Rob Winch	f2f9d8282a	Disable Flaky WebAuthnWebDriverTests ... Closes gh-16753	2025-03-17 13:54:17 -05:00
Max Batischev	58a665e5aa	Add Support SingleResultAuthorizationManager ... Closes gh-16590 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-03-07 13:46:23 -07:00
Josh Cummings	72070cd191	Deprecate ChannelSecurityConfigurer ... Closes gh-16680	2025-02-28 09:38:45 -07:00
Josh Cummings	be23268c37	Add redirectToHttps DSL Configurer ... Closes gh-16679	2025-02-28 09:38:07 -07:00
Max Batischev	fa35c5b4d8	Make DefaultOneTimeToken Serializable ... Closes gh-16617 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-27 12:49:48 -07:00
Rob Winch	76a566265c	Use PortResolver Beans by Default ... Closes gh-16664	2025-02-26 16:13:10 -06:00
Josh Cummings	7d301f87d6	Add Opt-in PathPattern Strategy ... Closes gh-16573	2025-02-21 13:40:24 -07:00
Josh Cummings	588220a020	Add PathPatterRequestMatcher ... Closes gh-16429 Clsoes gh-16430	2025-02-21 13:40:23 -07:00
Josh Cummings	51ce91f07b	Merge branch '6.4.x'	2025-02-18 15:11:08 -07:00
Josh Cummings	cc2cfc62b0	Add Test Requiring serialVersionUID ... Issue gh-16276	2025-02-18 15:06:50 -07:00
tejas-teju	c4b223266c	Return Invalid Credentials message on login error ... Closes gh-16484 Signed-off-by: tejas-teju <tejas8196@gmail.com>	2025-02-14 16:01:22 -07:00
Josh Cummings	e42865b926	Merge branch '6.4.x'	2025-02-14 13:08:17 -07:00
Josh Cummings	946812691e	Make AuthenticatorAttestation Serializable ... Issue gh-16481	2025-02-14 13:07:56 -07:00
Max Batischev	b5a4218a0b	Make WebAuthnAuthenticationRequestToken Serializable ... Closes gh-16481 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-14 11:51:46 -07:00
plll0123	f9e04594a7	Refactor authorization manager variable naming ... - Renamed PERMIT_ALL_AUTHORIZATION_MANAGER to snake_case style - Introduced AUTHORIZATION_DECISION for reuse Signed-off-by: plll0123 <jsh951227@gmail.com>	2025-02-14 10:02:55 -07:00
Josh Cummings	666d3a4af6	Merge branch '6.4.x'	2025-02-13 17:25:39 -07:00
Max Batischev	879b44f9a1	Make PublicKeyCredentialRequestOptions Serializable ... Closes gh-16432 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-13 17:17:16 -07:00
Joe Grandja	2480d41981	Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) ... Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>	2025-02-11 14:10:23 -05:00
Daniel Garnier-Moiroux	238f47ce5e	One Time Token login registers the default login page ... closes gh-16414 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-02-10 09:55:51 -06:00
Daniel Garnier-Moiroux	5ee6b83953	Introduce OneTimeTokenAuthenticationFilter ... closes gh-16539 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-02-10 09:55:51 -06:00
Josh Cummings	8e19b8039c	Merge branch '6.4.x'	2025-02-05 15:49:20 -07:00
Josh Cummings	4776446b14	Add Missing Serialzed AuthorizationDeniedException ... Issue gh-16544	2025-02-05 15:48:55 -07:00
Max Batischev	9676739c88	TestServerOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable ... Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-05 14:14:16 -07:00
Max Batischev	be81377235	Add Support ServerGenerateOneTimeTokenRequestResolver ... Closes gh-16488 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-05 14:14:16 -07:00
Josh Cummings	981e3fd779	Merge branch '6.4.x'	2025-02-05 13:59:12 -07:00
Josh Cummings	b4c7795699	Support Serialization for Authorization Components ... Closes gh-16544	2025-02-05 13:58:32 -07:00
DingHao	f7e0f7fa8a	Polish OneTimeTokenLoginConfigurer ... Signed-off-by: DingHao <dh.hiekn@gmail.com>	2025-02-04 12:38:27 -07:00
Josh Cummings	5ff87128b1	Make Saml2AuthenticationToken Serializable ... Issue gh-16286	2025-02-03 10:13:14 -07:00
Tran Ngoc Nhan	bcc4b415b3	Make RelyingPartyRegistration Serializable ... Closes gh-16286	2025-02-03 10:13:13 -07:00
Rob Winch	10394c8f2a	OTT Tests use Mocks Instead of Comparing Expires ... Previously, expires was compared to test if a custom implementations were used. Now the tests verify this through mocks. Closes gh-16515	2025-01-31 16:47:50 -06:00
Josh Cummings	5af4b9a2ad	Merge branch '6.4.x'	2025-01-30 18:06:01 -07:00
Josh Cummings	4b5bacf71a	Make Saml2AuthenticationToken Serializable ... Issue gh-16286	2025-01-30 18:05:17 -07:00
Tran Ngoc Nhan	e50415de85	Make RelyingPartyRegistration Serializable ... Closes gh-16286	2025-01-30 17:45:41 -07:00
Josh Cummings	28615e7f64	Remove Stray Import	2025-01-24 11:47:40 -07:00
Rob Winch	a841737941	Use credPropsField.getType() ... Using the type from a field retains generics information. Issue gh-16432	2025-01-23 20:13:11 -06:00
Max Batischev	c7bc4c98db	Make PublicKeyCredentialRequestOptions Serializable ... Closes gh-16432 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-23 20:13:10 -06:00
Josh Cummings	e1a42db845	Merge branch '6.4.x'	2025-01-23 17:03:53 -07:00
Josh Cummings	e1e5970a24	Support Serialization for LDAP Components ... Issue gh-16276	2025-01-23 16:55:30 -07:00
Josh Cummings	36716d12ba	Serialization Support of Core Components ... Issue gh-16276	2025-01-23 16:50:30 -07:00
Josh Cummings	d7921daa13	Support Serialization for SecurityConfig ... Issue gh-16276	2025-01-23 16:44:53 -07:00
Josh Cummings	d043884e32	Support Serialization ... Issue gh-16276	2025-01-23 16:44:45 -07:00
Rob Winch	177ce59a4b	Merge branch '6.4.x' ... Implement Serializable for WebAuthnAuthentication Closes gh-16474	2025-01-23 14:12:30 -06:00
Tran Ngoc Nhan	e557c7227b	Implement Serializable for WebAuthnAuthentication ... Closes gh-16273 Closes gh-16285 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-01-23 13:53:26 -06:00
Rob Winch	f8132018d5	Merge branch '6.4.x' ... TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable Closes gh-16472	2025-01-23 12:45:09 -06:00