3024 Commits

Author	SHA1	Message	Date
Josh Cummings	0ab01eac14	Update Deprecated Security Usage	2025-04-23 12:11:08 -06:00
Josh Cummings	834370d8eb	Update Deprecated Spring Web Usage	2025-04-23 11:29:19 -06:00
Josh Cummings	2ad859a63c	Add Missing Deprecation Markers	2025-04-23 11:29:18 -06:00
Josh Cummings	3f7f3dabe7	Correct JavaDoc Class Reference	2025-04-23 11:29:18 -06:00
Josh Cummings	f86c4ad383	Polish Native Support ... - Remove unneeded deprecateion marker - Add missing reflected class Issue gh-16536	2025-04-14 14:08:57 -06:00
Josh Cummings	178ca73673	Fix Type Check ... Issue gh-16536	2025-04-14 13:42:44 -06:00
Josh Cummings	ae82be70c3	Add Needed Runtime Hints ... Issue gh-16536	2025-04-14 11:06:18 -06:00
Josh Cummings	0e70482725	Fix Formatting	2025-04-10 15:55:00 -06:00
Josh Cummings	09ba5397fb	Add Support for Authorizing Spring MVC Return Types ... Closes gh-16059	2025-04-10 15:48:10 -06:00
Josh Cummings	6438603cb6	Pick Up TargetVisitor Beans ... Closes gh-16923	2025-04-10 15:48:09 -06:00
Josh Cummings	5841e35cae	Invert AuthorizeReturnObjectMethodInterceptor Dependency ... Closes gh-16922	2025-04-10 15:48:09 -06:00
Daeho Kwon	9908d96644	DeferredCsrfToken Implements Supplier ... Closes gh-16870 Signed-off-by: Daeho Kwon <trewq231@naver.com>	2025-04-09 14:24:11 -06:00
Josh Cummings	f93a7a2f85	Deprecate HandlerMappingIntrospectorRequestTransformer ... Closes gh-16536	2025-04-07 13:56:18 -06:00
Steve Riesenberg	03e090c2d7	Merge branch '6.4.x' ... Closes gh-16902	2025-04-07 10:57:12 -05:00
Steve Riesenberg	db34de59bc	Merge branch '6.3.x' into 6.4.x ... Closes gh-16901	2025-04-07 10:55:51 -05:00
Steve Riesenberg	3c0fef59b5	Polish gh-16039 ... Closes gh-16038	2025-04-07 10:54:09 -05:00
Jonah Klöckner	da94fbe431	Evaluate URI query parameter only if enabled ... Issue gh-16038	2025-04-07 10:54:07 -05:00
Joe Grandja	9c073dbcde	Add AuthenticationEntryPoint for DPoP ... Issue gh-16574 Closes gh-16900	2025-04-07 09:38:51 -04:00
chu3la	8cbe02e3aa	Update WebAuthn Test Objects Class Names ... Closes gh-16604 Signed-off-by: chu3la <elmansouri.houssam@gmail.com>	2025-04-03 16:33:34 -06:00
Josh Cummings	4cdc6dab21	Fix Formatting ... Issue gh-16604	2025-04-03 12:55:51 -06:00
Vasanth	04d7130975	Update WebAuthn Test Objects Class Names ... Renamed the WebAuthn test object class names Closes gh-16604 Signed-off-by: Vasanth <76898064+vasanth-79@users.noreply.github.com>	2025-04-03 12:55:50 -06:00
Josh Cummings	2885b0f75f	Add valueOf ... This commit adds a static factory for returning a constant ClientAuthenticationMethod or creating a new one when there is no match. Issue gh-16825	2025-04-02 11:16:30 -06:00
Steve Riesenberg	7a937ca369	Merge branch '6.4.x' ... Closes gh-16845	2025-03-28 16:34:35 -05:00
Steve Riesenberg	26c63aeb01	Merge branch '6.3.x' into 6.4.x ... Closes gh-16844	2025-03-28 16:34:01 -05:00
Steve Riesenberg	b7df86197c	Apply request-handler-ref to CsrfAuthenticationStrategy ... Closes gh-16801	2025-03-28 16:25:52 -05:00
Steve Riesenberg	c84c438075	Apply request-handler-ref to CsrfAuthenticationStrategy ... Closes gh-16801	2025-03-28 16:08:36 -05:00
Josh Cummings	40b84d3e44	Merge branch '6.4.x'	2025-03-27 16:34:39 -06:00
Josh Cummings	6c5b6d1c51	Merge branch '6.3.x' into 6.4.x ... Closes gh-16837	2025-03-27 16:32:12 -06:00
Josh Cummings	15b9a50060	Add Test ... Issue gh-16819	2025-03-27 16:18:00 -06:00
Josh Cummings	37b8d019fa	Polish RequestMatcher Migration Path for OAuth 2.0 Login DSL ... Issue gh-16573	2025-03-26 16:38:39 -06:00
Steve Riesenberg	860f130bc4	Add additional validation when refreshing ID tokens ... Issue gh-16589	2025-03-26 15:34:17 -05:00
Steve Riesenberg	5f98ce5ecc	Polish gh-16589	2025-03-26 15:34:17 -05:00
Josh Cummings	d2d9da0a39	Favor PathPatternRequestMatcher ... Issue gh-16828	2025-03-26 14:33:46 -06:00
Josh Cummings	e65e32bb42	Polish CorsConfigurationSource Selection Logic ... Issue gh-16501	2025-03-26 13:44:47 -06:00
Josh Cummings	59f08e861e	Use PathPatternRequestMatcher in Docs ... Update documenation references from PathPatternRequestMatcher to AntPathRequestMatcher Issue gh-16632	2025-03-26 13:40:04 -06:00
Josh Cummings	ff52e05b24	Favor PathPatternRequestMatcher in XML Configuration ... Update BeanDefinitionParsers to use PathPatternRequestMatcher conditionally on the presence of a PathPatternRequestMatcher.Builder bean Closes gh-16828	2025-03-26 13:40:04 -06:00
Josh Cummings	de07b1108f	Use PathPatternRequestMatcher in Web Components ... This commit changes filters and resolvers that were using AntPathRequestMatcher as their default to using PathPatternRequestMatcher. Issue gh-16632	2025-03-26 13:28:58 -06:00
Evgeniy Cheban	ad1ee28f01	Update HandlerMappingIntrospector Usage in CORS support ... Closes gh-16501 Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>	2025-03-26 13:11:05 -06:00
Josh Cummings	86599afd43	Rename servletPath to basePath ... Closes gh-16765	2025-03-21 12:04:46 -06:00
Josh Cummings	c91656c27a	Add Authorization Event Tests ... - These ensure that the parameterized version of authorization events can be listened to Issue gh-16700	2025-03-20 13:12:36 -06:00
Josh Cummings	1120733e27	Update Copyright	2025-03-19 17:43:01 -06:00
Josh Cummings	116ef5fd54	Add HttpsRedirectFilter ... - Added missing JavaDoc Issue gh-16678	2025-03-19 17:41:20 -06:00
Josh Cummings	8e9634d25c	Deprecate ConfigAttribute ... Closes gh-16774	2025-03-19 17:39:38 -06:00
Josh Cummings	89bd670fb1	Deprecate SecurityConfig ... Closes gh-16773	2025-03-19 17:39:26 -06:00
Josh Cummings	a884c3c906	Address XsdDocumentedTests Errors ... Issue gh-16775	2025-03-19 16:39:27 -06:00
Josh Cummings	e6008b6067	Add RedirectToHttps to XML ... Closes gh-16775	2025-03-19 15:26:05 -06:00
Josh Cummings	44d553946e	PathPatternMessageMatcher Polish ... Issue gh-16500 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2025-03-19 08:48:54 -06:00
Pat McCusker	33272ef0f4	Add PathPatternMessageMatcher ... Closes gh-16500 Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	2025-03-19 08:48:54 -06:00
Steve Riesenberg	5bb5d0f6be	Polish gh-16589	2025-03-18 18:07:56 -05:00
Hao	fc1469ad5e	Ensure ID Token is updated after refresh token ... Signed-off-by: Hao <kyrieeeee2@gmail.com>	2025-03-18 18:07:56 -05:00
Rob Winch	e6223dede3	Merge branch '6.4.x' ... - adb303e Add testRuntimeOnly junit-platform-launcher Closes gh-16757	2025-03-17 14:34:18 -05:00
Rob Winch	05116eabbd	Merge branch '6.3.x' into 6.4.x ... - adb303e Add testRuntimeOnly junit-platform-launcher Closes gh-16756	2025-03-17 14:18:49 -05:00
Rob Winch	adb303e152	Add testRuntimeOnly junit-platform-launcher ... Closes gh-16755	2025-03-17 14:16:44 -05:00
Rob Winch	3a11d1529d	Merge branch '6.4.x' ... - Disable Flaky WebAuthnWebDriverTests Closes gh-16754	2025-03-17 13:57:37 -05:00
Rob Winch	f2f9d8282a	Disable Flaky WebAuthnWebDriverTests ... Closes gh-16753	2025-03-17 13:54:17 -05:00
Max Batischev	58a665e5aa	Add Support SingleResultAuthorizationManager ... Closes gh-16590 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-03-07 13:46:23 -07:00
Josh Cummings	72070cd191	Deprecate ChannelSecurityConfigurer ... Closes gh-16680	2025-02-28 09:38:45 -07:00
Josh Cummings	be23268c37	Add redirectToHttps DSL Configurer ... Closes gh-16679	2025-02-28 09:38:07 -07:00
Max Batischev	fa35c5b4d8	Make DefaultOneTimeToken Serializable ... Closes gh-16617 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-27 12:49:48 -07:00
Rob Winch	76a566265c	Use PortResolver Beans by Default ... Closes gh-16664	2025-02-26 16:13:10 -06:00
Josh Cummings	7d301f87d6	Add Opt-in PathPattern Strategy ... Closes gh-16573	2025-02-21 13:40:24 -07:00
Josh Cummings	588220a020	Add PathPatterRequestMatcher ... Closes gh-16429 Clsoes gh-16430	2025-02-21 13:40:23 -07:00
Josh Cummings	51ce91f07b	Merge branch '6.4.x'	2025-02-18 15:11:08 -07:00
Josh Cummings	cc2cfc62b0	Add Test Requiring serialVersionUID ... Issue gh-16276	2025-02-18 15:06:50 -07:00
tejas-teju	c4b223266c	Return Invalid Credentials message on login error ... Closes gh-16484 Signed-off-by: tejas-teju <tejas8196@gmail.com>	2025-02-14 16:01:22 -07:00
Josh Cummings	e42865b926	Merge branch '6.4.x'	2025-02-14 13:08:17 -07:00
Josh Cummings	946812691e	Make AuthenticatorAttestation Serializable ... Issue gh-16481	2025-02-14 13:07:56 -07:00
Max Batischev	b5a4218a0b	Make WebAuthnAuthenticationRequestToken Serializable ... Closes gh-16481 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-14 11:51:46 -07:00
plll0123	f9e04594a7	Refactor authorization manager variable naming ... - Renamed PERMIT_ALL_AUTHORIZATION_MANAGER to snake_case style - Introduced AUTHORIZATION_DECISION for reuse Signed-off-by: plll0123 <jsh951227@gmail.com>	2025-02-14 10:02:55 -07:00
Josh Cummings	666d3a4af6	Merge branch '6.4.x'	2025-02-13 17:25:39 -07:00
Max Batischev	879b44f9a1	Make PublicKeyCredentialRequestOptions Serializable ... Closes gh-16432 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-13 17:17:16 -07:00
Joe Grandja	2480d41981	Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) ... Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>	2025-02-11 14:10:23 -05:00
Daniel Garnier-Moiroux	238f47ce5e	One Time Token login registers the default login page ... closes gh-16414 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-02-10 09:55:51 -06:00
Daniel Garnier-Moiroux	5ee6b83953	Introduce OneTimeTokenAuthenticationFilter ... closes gh-16539 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-02-10 09:55:51 -06:00
Josh Cummings	8e19b8039c	Merge branch '6.4.x'	2025-02-05 15:49:20 -07:00
Josh Cummings	4776446b14	Add Missing Serialzed AuthorizationDeniedException ... Issue gh-16544	2025-02-05 15:48:55 -07:00
Max Batischev	9676739c88	TestServerOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable ... Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-05 14:14:16 -07:00
Max Batischev	be81377235	Add Support ServerGenerateOneTimeTokenRequestResolver ... Closes gh-16488 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-05 14:14:16 -07:00
Josh Cummings	981e3fd779	Merge branch '6.4.x'	2025-02-05 13:59:12 -07:00
Josh Cummings	b4c7795699	Support Serialization for Authorization Components ... Closes gh-16544	2025-02-05 13:58:32 -07:00
DingHao	f7e0f7fa8a	Polish OneTimeTokenLoginConfigurer ... Signed-off-by: DingHao <dh.hiekn@gmail.com>	2025-02-04 12:38:27 -07:00
Josh Cummings	5ff87128b1	Make Saml2AuthenticationToken Serializable ... Issue gh-16286	2025-02-03 10:13:14 -07:00
Tran Ngoc Nhan	bcc4b415b3	Make RelyingPartyRegistration Serializable ... Closes gh-16286	2025-02-03 10:13:13 -07:00
Rob Winch	10394c8f2a	OTT Tests use Mocks Instead of Comparing Expires ... Previously, expires was compared to test if a custom implementations were used. Now the tests verify this through mocks. Closes gh-16515	2025-01-31 16:47:50 -06:00
Josh Cummings	5af4b9a2ad	Merge branch '6.4.x'	2025-01-30 18:06:01 -07:00
Josh Cummings	4b5bacf71a	Make Saml2AuthenticationToken Serializable ... Issue gh-16286	2025-01-30 18:05:17 -07:00
Tran Ngoc Nhan	e50415de85	Make RelyingPartyRegistration Serializable ... Closes gh-16286	2025-01-30 17:45:41 -07:00
Josh Cummings	28615e7f64	Remove Stray Import	2025-01-24 11:47:40 -07:00
Rob Winch	a841737941	Use credPropsField.getType() ... Using the type from a field retains generics information. Issue gh-16432	2025-01-23 20:13:11 -06:00
Max Batischev	c7bc4c98db	Make PublicKeyCredentialRequestOptions Serializable ... Closes gh-16432 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-23 20:13:10 -06:00
Josh Cummings	e1a42db845	Merge branch '6.4.x'	2025-01-23 17:03:53 -07:00
Josh Cummings	e1e5970a24	Support Serialization for LDAP Components ... Issue gh-16276	2025-01-23 16:55:30 -07:00
Josh Cummings	36716d12ba	Serialization Support of Core Components ... Issue gh-16276	2025-01-23 16:50:30 -07:00
Josh Cummings	d7921daa13	Support Serialization for SecurityConfig ... Issue gh-16276	2025-01-23 16:44:53 -07:00
Josh Cummings	d043884e32	Support Serialization ... Issue gh-16276	2025-01-23 16:44:45 -07:00
Rob Winch	177ce59a4b	Merge branch '6.4.x' ... Implement Serializable for WebAuthnAuthentication Closes gh-16474	2025-01-23 14:12:30 -06:00
Tran Ngoc Nhan	e557c7227b	Implement Serializable for WebAuthnAuthentication ... Closes gh-16273 Closes gh-16285 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-01-23 13:53:26 -06:00
Rob Winch	f8132018d5	Merge branch '6.4.x' ... TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable Closes gh-16472	2025-01-23 12:45:09 -06:00
Rob Winch	751b5580a1	TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable ... Previously there were race conditions on the static member lastToken of TestOneTimeTokenGenerationSuccessHandler. This is because the tests run in parallel and one test may override the other tests lastToken and thus make the assertion on it incorrect. This commit changes lastToken to be a non-static variable to ensure that each test has it's own lastToken for asserting the expected value. Closes gh-16471	2025-01-23 12:43:22 -06:00
Steve Riesenberg	4f860a5481	Merge branch '6.4.x' ... # Conflicts: # config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java	2025-01-22 17:30:29 -06:00