1223 Commits

Author	SHA1	Message	Date
Rob Winch	435d132c79	Merge branch '6.4.x' into dependencies-typo-6.5.x	2025-11-21 10:15:15 -06:00
Peter Potrowl	5baff27ffb	Fix typo in ldap.adoc ... Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	2025-11-21 10:12:20 -06:00
Peter Potrowl	39aaf25b60	Fix typo in passkeys.adoc ... Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	2025-11-21 10:12:20 -06:00
Rob Winch	c1e9e10bf0	Merge branch '6.4.x' into 6.5.x ... Closes gh-18131	2025-11-04 11:28:40 -06:00
Daniel Garnier-Moiroux	fed6df5167	Default WebAuthnConfigurer#rpName to rpId ... In WebAuthn L3 spec, PublicKeyCredentialEntity.name is deprecated: > This member is deprecated because many clients do not display it, > but it remains a required dictionary member for backwards compatibility. > Relying Parties MAY, as a safe default, set this equal to the RP ID. Source: https://www.w3.org/TR/webauthn-3/#dictdef-publickeycredentialentity Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-11-04 11:16:22 -06:00
Rob Winch	8fa2fc0e1e	Merge branch '6.4.x' into 6.5.x	2025-11-04 10:24:15 -06:00
Daniel Garnier-Moiroux	4feeb0f843	Docs: document effects of disabling CORS configurer ... Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-11-04 10:23:46 -06:00
Himanshu Pareek	dcb4e47cd5	Add Include-Code to the Password Storage page ... References gh-16226 Signed-off-by: Himanshu Pareek <himanshupareekiit01@gmail.com>	2025-10-20 16:35:23 -06:00
Josh Cummings	9d64880ea9	Merge branch '6.4.x' into 6.5.x	2025-08-22 12:40:12 -06:00
Josh Cummings	8b2a453301	Advise Favoring PostAuthorize on Reads ... Closes gh-17797	2025-08-22 12:39:51 -06:00
Joe Kuhel	d002e68231	Update servlet test method docs to use include-code ... References gh-16226 Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	2025-08-21 12:35:13 -05:00
Josh Cummings	c966139338	Merge branch '6.4.x' into 6.5.x	2025-07-31 10:21:36 -06:00
Josh Cummings	a411fb7b8d	Merge remote-tracking branch 'origin/6.3.x' into 6.4.x	2025-07-31 10:21:26 -06:00
Michał Sobkiewicz	c963f4250e	Update Angular documentation links in csrf.adoc ... Replaced `angular.io` links with their corresponding `angular.dev` URLs. This change ensures that users referencing CSRF documentation are directed to the most current Angular resources. Signed-off-by: Michał Sobkiewicz <perceptron8@users.noreply.github.com>	2025-07-31 10:21:06 -06:00
Josh Cummings	a9fcec8b46	Merge branch '6.4.x' into 6.5.x	2025-07-29 09:27:47 -06:00
Josh Cummings	452d311a9b	Merge remote-tracking branch 'origin/6.3.x' into 6.4.x	2025-07-29 09:27:23 -06:00
Bernie Schelberg	edcb3b024e	Update Shibboleth repository URL ... Signed-off-by: Bernie Schelberg <bernard.schelberg@invicara.com>	2025-07-29 09:26:42 -06:00
Josh Cummings	7960d2803d	Add Migration Steps for PathMatcher Usage ... Issue gh-17509	2025-07-10 14:53:39 -06:00
Josh Cummings	4b15b2b94e	Add Migration Steps for Messaging ... Closes gh-17509	2025-07-10 13:19:42 -06:00
Josh Cummings	9209a33678	Remove References to Deprecated OpenSaml Components ... Issue gh-11658	2025-07-09 14:10:33 -06:00
Rob Winch	6eee256e12	Demonstrate include-code usage ... Closes gh-17161	2025-05-22 14:59:35 -05:00
Rob Winch	0fecaf4924	Add include-code extension setup for docs ... Closes gh-17160	2025-05-22 14:59:35 -05:00
Josh Cummings	7d49c41e03	Merge branch '6.4.x' into 6.5.x	2025-05-21 14:44:03 -06:00
Josh Cummings	fbfb28456a	Merge branch '6.3.x' into 6.4.x	2025-05-21 14:43:44 -06:00
Gurunathan	a4cd6f4278	Advise Overriding equals() and hashCode() in UserDetails Implementations ... This commit adds a documentation note explaining the importance of overriding equals() and hashCode() in custom UserDetails implementations. The default SessionRegistryImpl in Spring Security uses an in-memory ConcurrentMap<Object, Set<String>>, Map<String,SessionInformation> to associate principals with sessions. If a custom UserDetails class does not properly override equals() and hashCode(), user sessions may not be tracked or matched correctly. I believe this helps developers avoid subtle session management issues when implementing custom authentication logic. Signed-off-by: Gurunathan <129361658+Gurunathan16@users.noreply.github.com>	2025-05-21 12:41:44 -06:00
Josh Cummings	02a516d7f2	Merge branch '6.4.x' into 6.5.x	2025-05-15 18:16:53 -06:00
Josh Cummings	70c940fd4f	Merge branch '6.3.x' into 6.4.x	2025-05-15 18:16:44 -06:00
Josh Cummings	eb30fd7f59	Add Missing Header ... Issue gh-11161	2025-05-15 18:16:36 -06:00
Josh Cummings	8548d8e18a	Merge branch '6.4.x' into 6.5.x	2025-05-15 17:20:08 -06:00
Josh Cummings	fbdf4a88a0	Merge branch '6.3.x' into 6.4.x	2025-05-15 17:19:55 -06:00
snowykte0426	260d298cc5	Add Migration Guide from Spring Security SAML Extension ... This adds a dedicated migration guide for users moving from the Spring Security SAML Extension to the built-in SAML 2.0 support. Includes: - Content migrated from the project wiki - xref links for `saml2Login`, `saml2Logout`, and `saml2Metadata` - Metadata example moved to Examples Matrix - Cleanup and naming per review feedback Closes gh-11161 Signed-off-by: snowykte0426 <snowykte0426@naver.com>	2025-05-15 17:17:43 -06:00
Josh Cummings	26f359a4db	Merge branch '6.4.x' into 6.5.x	2025-05-13 11:18:31 -06:00
Josh Cummings	5ba4ab5e11	Merge branch '6.3.x' into 6.4.x	2025-05-13 11:18:02 -06:00
Danilo Piazzalunga	27319e3f9b	Add missing registration property in YAML listing ... Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>	2025-05-13 11:17:35 -06:00
Danilo Piazzalunga	ec462e8bc5	Update assertingparty property usage in YAML snippets ... Spring Boot 2.7 renamed spring.security.saml2.relyingparty.registration.*.identityprovider.* to spring.security.saml2.relyingparty.registration.*.assertingparty.*. Closes gh-12810. Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>	2025-05-13 11:17:35 -06:00
Joe Grandja	e3c39f02bc	Add documentation for DPoP support ... Closes gh-17072	2025-05-09 16:02:14 -04:00
Josh Cummings	211b1b7285	Update Method Security Migration Steps	2025-05-06 16:44:20 -06:00
Josh Cummings	84db5bb312	Add Cookie Customizer Migration Steps	2025-05-06 16:43:04 -06:00
Josh Cummings	74a25c3fc1	Add shouldFilterAllDispatcherTypes Migration Steps	2025-05-06 16:40:10 -06:00
Josh Cummings	084990736e	Move Opaque Token Migration Steps	2025-05-06 16:39:16 -06:00
Josh Cummings	c6bba38458	Update SAML 2.0 Migration Steps	2025-05-06 16:38:32 -06:00
Josh Cummings	45b453f59b	Add ACL Migration Steps	2025-05-06 16:38:19 -06:00
Rob Winch	9b79b99150	Merge branch '6.4.x' ... - Correct method name in logout.adoc Closes gh-17049	2025-05-06 10:24:14 -05:00
Rob Winch	63d79a97db	Merge branch '6.3.x' into 6.4.x ... - Correct method name in logout.adoc Closes gh-17048	2025-05-06 10:23:58 -05:00
Tran Ngoc Nhan	505fe3abed	Correct method name ... Closes gh-17031 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-05-06 10:17:29 -05:00
Josh Cummings	df640f22dc	Merge branch '6.4.x'	2025-05-02 15:59:13 -06:00
Josh Cummings	92160fa26f	Merge branch '6.3.x' into 6.4.x ... Closes gh-17034	2025-05-02 15:58:58 -06:00
Josh Cummings	51239359ed	Fix ClearSiteData Code Snippet ... Closes gh-16948	2025-05-02 15:57:31 -06:00
Josh Cummings	28091c8563	Merge branch '6.4.x'	2025-05-01 12:03:19 -06:00
Josh Cummings	c4a0dfe838	Merge remote-tracking branch 'origin/6.3.x' into 6.4.x	2025-05-01 12:03:05 -06:00