3226 Commits

Author	SHA1	Message	Date
Max Batischev	4a12382d2b	Remove unused classes ... Remove DeferringObservationAuthorizationManager.java and DeferringObservationReactiveAuthorizationManager.java Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-04-23 14:09:05 -06:00
Josh Cummings	a683a3a730	Favor PathPatternMessageMatcher when activated ... Issue gh-16500	2025-04-23 12:11:10 -06:00
Josh Cummings	0ab01eac14	Update Deprecated Security Usage	2025-04-23 12:11:08 -06:00
Josh Cummings	834370d8eb	Update Deprecated Spring Web Usage	2025-04-23 11:29:19 -06:00
Josh Cummings	2ad859a63c	Add Missing Deprecation Markers	2025-04-23 11:29:18 -06:00
Josh Cummings	3f7f3dabe7	Correct JavaDoc Class Reference	2025-04-23 11:29:18 -06:00
Josh Cummings	f86c4ad383	Polish Native Support ... - Remove unneeded deprecateion marker - Add missing reflected class Issue gh-16536	2025-04-14 14:08:57 -06:00
Josh Cummings	178ca73673	Fix Type Check ... Issue gh-16536	2025-04-14 13:42:44 -06:00
Josh Cummings	ae82be70c3	Add Needed Runtime Hints ... Issue gh-16536	2025-04-14 11:06:18 -06:00
Josh Cummings	0e70482725	Fix Formatting	2025-04-10 15:55:00 -06:00
Josh Cummings	09ba5397fb	Add Support for Authorizing Spring MVC Return Types ... Closes gh-16059	2025-04-10 15:48:10 -06:00
Josh Cummings	6438603cb6	Pick Up TargetVisitor Beans ... Closes gh-16923	2025-04-10 15:48:09 -06:00
Josh Cummings	5841e35cae	Invert AuthorizeReturnObjectMethodInterceptor Dependency ... Closes gh-16922	2025-04-10 15:48:09 -06:00
Daeho Kwon	9908d96644	DeferredCsrfToken Implements Supplier ... Closes gh-16870 Signed-off-by: Daeho Kwon <trewq231@naver.com>	2025-04-09 14:24:11 -06:00
Josh Cummings	f93a7a2f85	Deprecate HandlerMappingIntrospectorRequestTransformer ... Closes gh-16536	2025-04-07 13:56:18 -06:00
Steve Riesenberg	03e090c2d7	Merge branch '6.4.x' ... Closes gh-16902	2025-04-07 10:57:12 -05:00
Steve Riesenberg	db34de59bc	Merge branch '6.3.x' into 6.4.x ... Closes gh-16901	2025-04-07 10:55:51 -05:00
Steve Riesenberg	3c0fef59b5	Polish gh-16039 ... Closes gh-16038	2025-04-07 10:54:09 -05:00
Jonah Klöckner	da94fbe431	Evaluate URI query parameter only if enabled ... Issue gh-16038	2025-04-07 10:54:07 -05:00
Joe Grandja	9c073dbcde	Add AuthenticationEntryPoint for DPoP ... Issue gh-16574 Closes gh-16900	2025-04-07 09:38:51 -04:00
chu3la	8cbe02e3aa	Update WebAuthn Test Objects Class Names ... Closes gh-16604 Signed-off-by: chu3la <elmansouri.houssam@gmail.com>	2025-04-03 16:33:34 -06:00
Josh Cummings	4cdc6dab21	Fix Formatting ... Issue gh-16604	2025-04-03 12:55:51 -06:00
Vasanth	04d7130975	Update WebAuthn Test Objects Class Names ... Renamed the WebAuthn test object class names Closes gh-16604 Signed-off-by: Vasanth <76898064+vasanth-79@users.noreply.github.com>	2025-04-03 12:55:50 -06:00
Josh Cummings	2885b0f75f	Add valueOf ... This commit adds a static factory for returning a constant ClientAuthenticationMethod or creating a new one when there is no match. Issue gh-16825	2025-04-02 11:16:30 -06:00
Steve Riesenberg	7a937ca369	Merge branch '6.4.x' ... Closes gh-16845	2025-03-28 16:34:35 -05:00
Steve Riesenberg	26c63aeb01	Merge branch '6.3.x' into 6.4.x ... Closes gh-16844	2025-03-28 16:34:01 -05:00
Steve Riesenberg	b7df86197c	Apply request-handler-ref to CsrfAuthenticationStrategy ... Closes gh-16801	2025-03-28 16:25:52 -05:00
Steve Riesenberg	c84c438075	Apply request-handler-ref to CsrfAuthenticationStrategy ... Closes gh-16801	2025-03-28 16:08:36 -05:00
Josh Cummings	40b84d3e44	Merge branch '6.4.x'	2025-03-27 16:34:39 -06:00
Josh Cummings	6c5b6d1c51	Merge branch '6.3.x' into 6.4.x ... Closes gh-16837	2025-03-27 16:32:12 -06:00
Josh Cummings	15b9a50060	Add Test ... Issue gh-16819	2025-03-27 16:18:00 -06:00
Josh Cummings	37b8d019fa	Polish RequestMatcher Migration Path for OAuth 2.0 Login DSL ... Issue gh-16573	2025-03-26 16:38:39 -06:00
Steve Riesenberg	860f130bc4	Add additional validation when refreshing ID tokens ... Issue gh-16589	2025-03-26 15:34:17 -05:00
Steve Riesenberg	5f98ce5ecc	Polish gh-16589	2025-03-26 15:34:17 -05:00
Josh Cummings	d2d9da0a39	Favor PathPatternRequestMatcher ... Issue gh-16828	2025-03-26 14:33:46 -06:00
Josh Cummings	e65e32bb42	Polish CorsConfigurationSource Selection Logic ... Issue gh-16501	2025-03-26 13:44:47 -06:00
Josh Cummings	59f08e861e	Use PathPatternRequestMatcher in Docs ... Update documenation references from PathPatternRequestMatcher to AntPathRequestMatcher Issue gh-16632	2025-03-26 13:40:04 -06:00
Josh Cummings	ff52e05b24	Favor PathPatternRequestMatcher in XML Configuration ... Update BeanDefinitionParsers to use PathPatternRequestMatcher conditionally on the presence of a PathPatternRequestMatcher.Builder bean Closes gh-16828	2025-03-26 13:40:04 -06:00
Josh Cummings	de07b1108f	Use PathPatternRequestMatcher in Web Components ... This commit changes filters and resolvers that were using AntPathRequestMatcher as their default to using PathPatternRequestMatcher. Issue gh-16632	2025-03-26 13:28:58 -06:00
Evgeniy Cheban	ad1ee28f01	Update HandlerMappingIntrospector Usage in CORS support ... Closes gh-16501 Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>	2025-03-26 13:11:05 -06:00
Josh Cummings	86599afd43	Rename servletPath to basePath ... Closes gh-16765	2025-03-21 12:04:46 -06:00
Josh Cummings	c91656c27a	Add Authorization Event Tests ... - These ensure that the parameterized version of authorization events can be listened to Issue gh-16700	2025-03-20 13:12:36 -06:00
Josh Cummings	1120733e27	Update Copyright	2025-03-19 17:43:01 -06:00
Josh Cummings	116ef5fd54	Add HttpsRedirectFilter ... - Added missing JavaDoc Issue gh-16678	2025-03-19 17:41:20 -06:00
Josh Cummings	8e9634d25c	Deprecate ConfigAttribute ... Closes gh-16774	2025-03-19 17:39:38 -06:00
Josh Cummings	89bd670fb1	Deprecate SecurityConfig ... Closes gh-16773	2025-03-19 17:39:26 -06:00
Josh Cummings	a884c3c906	Address XsdDocumentedTests Errors ... Issue gh-16775	2025-03-19 16:39:27 -06:00
Josh Cummings	e6008b6067	Add RedirectToHttps to XML ... Closes gh-16775	2025-03-19 15:26:05 -06:00
Josh Cummings	44d553946e	PathPatternMessageMatcher Polish ... Issue gh-16500 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2025-03-19 08:48:54 -06:00
Pat McCusker	33272ef0f4	Add PathPatternMessageMatcher ... Closes gh-16500 Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	2025-03-19 08:48:54 -06:00
Steve Riesenberg	5bb5d0f6be	Polish gh-16589	2025-03-18 18:07:56 -05:00
Hao	fc1469ad5e	Ensure ID Token is updated after refresh token ... Signed-off-by: Hao <kyrieeeee2@gmail.com>	2025-03-18 18:07:56 -05:00
Rob Winch	e6223dede3	Merge branch '6.4.x' ... - adb303e Add testRuntimeOnly junit-platform-launcher Closes gh-16757	2025-03-17 14:34:18 -05:00
Rob Winch	05116eabbd	Merge branch '6.3.x' into 6.4.x ... - adb303e Add testRuntimeOnly junit-platform-launcher Closes gh-16756	2025-03-17 14:18:49 -05:00
Rob Winch	adb303e152	Add testRuntimeOnly junit-platform-launcher ... Closes gh-16755	2025-03-17 14:16:44 -05:00
Rob Winch	3a11d1529d	Merge branch '6.4.x' ... - Disable Flaky WebAuthnWebDriverTests Closes gh-16754	2025-03-17 13:57:37 -05:00
Rob Winch	f2f9d8282a	Disable Flaky WebAuthnWebDriverTests ... Closes gh-16753	2025-03-17 13:54:17 -05:00
Max Batischev	58a665e5aa	Add Support SingleResultAuthorizationManager ... Closes gh-16590 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-03-07 13:46:23 -07:00
Josh Cummings	72070cd191	Deprecate ChannelSecurityConfigurer ... Closes gh-16680	2025-02-28 09:38:45 -07:00
Josh Cummings	be23268c37	Add redirectToHttps DSL Configurer ... Closes gh-16679	2025-02-28 09:38:07 -07:00
Max Batischev	fa35c5b4d8	Make DefaultOneTimeToken Serializable ... Closes gh-16617 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-27 12:49:48 -07:00
Rob Winch	76a566265c	Use PortResolver Beans by Default ... Closes gh-16664	2025-02-26 16:13:10 -06:00
Josh Cummings	7d301f87d6	Add Opt-in PathPattern Strategy ... Closes gh-16573	2025-02-21 13:40:24 -07:00
Josh Cummings	588220a020	Add PathPatterRequestMatcher ... Closes gh-16429 Clsoes gh-16430	2025-02-21 13:40:23 -07:00
Josh Cummings	51ce91f07b	Merge branch '6.4.x'	2025-02-18 15:11:08 -07:00
Josh Cummings	cc2cfc62b0	Add Test Requiring serialVersionUID ... Issue gh-16276	2025-02-18 15:06:50 -07:00
tejas-teju	c4b223266c	Return Invalid Credentials message on login error ... Closes gh-16484 Signed-off-by: tejas-teju <tejas8196@gmail.com>	2025-02-14 16:01:22 -07:00
Josh Cummings	e42865b926	Merge branch '6.4.x'	2025-02-14 13:08:17 -07:00
Josh Cummings	946812691e	Make AuthenticatorAttestation Serializable ... Issue gh-16481	2025-02-14 13:07:56 -07:00
Max Batischev	b5a4218a0b	Make WebAuthnAuthenticationRequestToken Serializable ... Closes gh-16481 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-14 11:51:46 -07:00
plll0123	f9e04594a7	Refactor authorization manager variable naming ... - Renamed PERMIT_ALL_AUTHORIZATION_MANAGER to snake_case style - Introduced AUTHORIZATION_DECISION for reuse Signed-off-by: plll0123 <jsh951227@gmail.com>	2025-02-14 10:02:55 -07:00
Josh Cummings	666d3a4af6	Merge branch '6.4.x'	2025-02-13 17:25:39 -07:00
Max Batischev	879b44f9a1	Make PublicKeyCredentialRequestOptions Serializable ... Closes gh-16432 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-13 17:17:16 -07:00
Joe Grandja	2480d41981	Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) ... Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>	2025-02-11 14:10:23 -05:00
Daniel Garnier-Moiroux	238f47ce5e	One Time Token login registers the default login page ... closes gh-16414 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-02-10 09:55:51 -06:00
Daniel Garnier-Moiroux	5ee6b83953	Introduce OneTimeTokenAuthenticationFilter ... closes gh-16539 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-02-10 09:55:51 -06:00
Josh Cummings	8e19b8039c	Merge branch '6.4.x'	2025-02-05 15:49:20 -07:00
Josh Cummings	4776446b14	Add Missing Serialzed AuthorizationDeniedException ... Issue gh-16544	2025-02-05 15:48:55 -07:00
Max Batischev	9676739c88	TestServerOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable ... Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-05 14:14:16 -07:00
Max Batischev	be81377235	Add Support ServerGenerateOneTimeTokenRequestResolver ... Closes gh-16488 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-05 14:14:16 -07:00
Josh Cummings	981e3fd779	Merge branch '6.4.x'	2025-02-05 13:59:12 -07:00
Josh Cummings	b4c7795699	Support Serialization for Authorization Components ... Closes gh-16544	2025-02-05 13:58:32 -07:00
DingHao	f7e0f7fa8a	Polish OneTimeTokenLoginConfigurer ... Signed-off-by: DingHao <dh.hiekn@gmail.com>	2025-02-04 12:38:27 -07:00
Josh Cummings	5ff87128b1	Make Saml2AuthenticationToken Serializable ... Issue gh-16286	2025-02-03 10:13:14 -07:00
Tran Ngoc Nhan	bcc4b415b3	Make RelyingPartyRegistration Serializable ... Closes gh-16286	2025-02-03 10:13:13 -07:00
Rob Winch	10394c8f2a	OTT Tests use Mocks Instead of Comparing Expires ... Previously, expires was compared to test if a custom implementations were used. Now the tests verify this through mocks. Closes gh-16515	2025-01-31 16:47:50 -06:00
Josh Cummings	5af4b9a2ad	Merge branch '6.4.x'	2025-01-30 18:06:01 -07:00
Josh Cummings	4b5bacf71a	Make Saml2AuthenticationToken Serializable ... Issue gh-16286	2025-01-30 18:05:17 -07:00
Tran Ngoc Nhan	e50415de85	Make RelyingPartyRegistration Serializable ... Closes gh-16286	2025-01-30 17:45:41 -07:00
Josh Cummings	28615e7f64	Remove Stray Import	2025-01-24 11:47:40 -07:00
Rob Winch	a841737941	Use credPropsField.getType() ... Using the type from a field retains generics information. Issue gh-16432	2025-01-23 20:13:11 -06:00
Max Batischev	c7bc4c98db	Make PublicKeyCredentialRequestOptions Serializable ... Closes gh-16432 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-23 20:13:10 -06:00
Josh Cummings	e1a42db845	Merge branch '6.4.x'	2025-01-23 17:03:53 -07:00
Josh Cummings	e1e5970a24	Support Serialization for LDAP Components ... Issue gh-16276	2025-01-23 16:55:30 -07:00
Josh Cummings	36716d12ba	Serialization Support of Core Components ... Issue gh-16276	2025-01-23 16:50:30 -07:00
Josh Cummings	d7921daa13	Support Serialization for SecurityConfig ... Issue gh-16276	2025-01-23 16:44:53 -07:00
Josh Cummings	d043884e32	Support Serialization ... Issue gh-16276	2025-01-23 16:44:45 -07:00
Rob Winch	177ce59a4b	Merge branch '6.4.x' ... Implement Serializable for WebAuthnAuthentication Closes gh-16474	2025-01-23 14:12:30 -06:00
Tran Ngoc Nhan	e557c7227b	Implement Serializable for WebAuthnAuthentication ... Closes gh-16273 Closes gh-16285 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-01-23 13:53:26 -06:00
Rob Winch	f8132018d5	Merge branch '6.4.x' ... TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable Closes gh-16472	2025-01-23 12:45:09 -06:00
Rob Winch	751b5580a1	TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable ... Previously there were race conditions on the static member lastToken of TestOneTimeTokenGenerationSuccessHandler. This is because the tests run in parallel and one test may override the other tests lastToken and thus make the assertion on it incorrect. This commit changes lastToken to be a non-static variable to ensure that each test has it's own lastToken for asserting the expected value. Closes gh-16471	2025-01-23 12:43:22 -06:00
Steve Riesenberg	4f860a5481	Merge branch '6.4.x' ... # Conflicts: # config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java	2025-01-22 17:30:29 -06:00
Max Batischev	474b5e151a	Add Support GenerateOneTimeTokenRequestResolver ... Closes gh-16291 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-22 17:09:55 -06:00
Steve Riesenberg	d97e01d1de	Merge branch '6.3.x' into 6.4.x ... Closes gh-16466	2025-01-22 17:09:34 -06:00
Steve Riesenberg	211fa52649	Favor provided instances over shared objects ... Prior to this commit, providing oauth2Login() and oauth2Client() with clientRegistrationRepository() and authorizedClientRepository() caused objects to be shared across both configurers. These configurers will now prefer explicitly provided instances of those objects when they are available. Closes gh-16105	2025-01-22 17:07:44 -06:00
Rob Winch	68c8a5ad99	Remove debug test ... Issue gh-16443	2025-01-22 16:11:25 -06:00
Rob Winch	6149489b70	Merge branch '6.4.x' ... fix flakey test in WebAuthnWebDriverTests Closes gh-16464	2025-01-22 14:46:05 -06:00
Daniel Garnier-Moiroux	028c212be4	fix flakey test in WebAuthnWebDriverTests ... Closes gh-16463 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-01-22 14:45:44 -06:00
Rob Winch	4ee9358900	Add serializeAndDeserializeAreEqual ... Checks that serialization/deserialization can be performed. Issue gh-16443	2025-01-22 14:06:11 -06:00
Tran Ngoc Nhan	e5ea75f7f4	Implement Serial ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-01-21 18:14:52 -06:00
Rob Winch	a2abe3c33e	Add HttpMessageConverter WebAuthnDsl Support ... Issue gh-16397	2025-01-17 21:07:46 -06:00
Rob Winch	4314e68329	Add WebAuthenticationDsl.creationOptionsRepository ... Issue gh-16396	2025-01-17 20:51:43 -06:00
Rob Winch	bea232237f	Fix whitespace	2025-01-17 20:51:43 -06:00
DingHao	f4491f388e	Set PublicKeyCredentialCreationOptionsRepository by DSL or Bean ... Closes gh-16369 Signed-off-by: DingHao <dh.hiekn@gmail.com>	2025-01-17 18:57:08 -06:00
Rob Winch	5462b4c358	webauthnWhenConfiguredMessageConverter uses mock ... Issue gh-16397	2025-01-17 18:29:23 -06:00
Rob Winch	0d4f786484	Fix WebAuthnConfigurer Javadoc ... Issue gh-16397	2025-01-17 18:29:23 -06:00
DingHao	8181cec06c	Set HttpMessageConverter by DSL ... Closes gh-16369 Signed-off-by: DingHao <dh.hiekn@gmail.com>	2025-01-17 18:29:23 -06:00
Josh Cummings	c2a5709e0f	Merge branch '6.4.x'	2025-01-17 16:09:01 -07:00
Josh Cummings	bbe4f87641	Mark Serialization Support for Events ... Issue gh-16276	2025-01-17 16:08:31 -07:00
Max Batischev	17fb4d1c0d	Fixed typo in WebAuthnDsl ... Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-16 14:33:57 -07:00
Josh Cummings	443af32314	Move Servlet Mocks to Web ... Issue gh-13551	2025-01-15 17:32:58 -07:00
Josh Cummings	8827b2e564	Polish Using Request ServletContext ... Issue gh-14418	2025-01-15 17:27:08 -07:00
Josh Cummings	75a35793dc	Polish requestMatchers Logic ... Issue gh-13551	2025-01-15 17:27:00 -07:00
Josh Cummings	6019803064	Merge branch '6.4.x'	2025-01-14 18:38:14 -07:00
Josh Cummings	244fd2eb51	Support Serialization in Exceptions ... Issue gh-16276	2025-01-14 18:37:53 -07:00
Josh Cummings	8035815e56	Merge branch '6.4.x'	2025-01-14 16:29:06 -07:00
Josh Cummings	feea103050	Formatting ... Issue gh-16276	2025-01-14 16:28:53 -07:00
Josh Cummings	28644aa966	Merge branch '6.4.x'	2025-01-14 16:17:34 -07:00
Josh Cummings	6f379aa907	Add Serializable to Csrf Components ... Issue gh-16276	2025-01-14 16:07:20 -07:00
Max Batischev	7fae738a9b	Add support fullyAuthenticated to Kotlin DSL ... Closes gh-16162	2025-01-13 17:03:14 -07:00
Rob Winch	85b854c61c	Merge branch '6.4.x' ... - Fix Kotlin DSL webAuthn { } - Add Support disableDefaultRegistrationPage to WebAuthnDsl Closes gh-16403 Closes gh-16404	2025-01-12 22:17:10 -06:00
Max Batischev	decf4def95	Add Support disableDefaultRegistrationPage to WebAuthnDsl ... Closes gh-16395 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-12 22:16:55 -06:00
Max Batischev	882766e54f	Fix Kotlin webAuthn {} ... Fixes the default configuration for WebAuthn Kotlin DSL Closes gh-16338 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-12 22:16:55 -06:00
Max Batischev	bf9b95a481	Add Support OAuth2AuthorizationRequestResolver As Bean ... Closes gh-16380 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-10 16:25:03 -06:00
Rob Winch	72a2831f76	CustomBeanPostProcessor -> CountHttpSecurityBeanPostProcessor ... Issue gh-16370 Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	2025-01-09 17:23:58 -06:00
DingHao	c631afcf5b	Avoid unnecessary instantiation of HttpSecurity when a SecurityFilterChain bean is provided ... Signed-off-by: DingHao <dh.hiekn@gmail.com>	2025-01-09 17:23:58 -06:00
DingHao	6cfc372f70	Polish remove unused code ... Signed-off-by: DingHao <dh.hiekn@gmail.com>	2025-01-09 14:27:22 -06:00
DingHao	5937ba9a06	Polish use getBeanProvider instead of getBeanNamesForType	2025-01-07 13:20:39 -06:00
Josh Cummings	9ae432f0d2	Add Filter Chain Validation Test ... Issue gh-15982	2024-12-19 15:04:01 -07:00
Max Batischev	624a8fb252	Add Alerting About Deprecated Authorize Config ... Closes gh-16213	2024-12-19 15:04:01 -07:00
Max Batischev	e257af8854	Add Support Same Request Matchers Checking ... Closes gh-15982	2024-12-19 15:04:01 -07:00
Max Batischev	e9bdb5b96e	Polish SecurityFilterChain Validation ... Issue gh-15982	2024-12-19 15:04:01 -07:00
Josh Cummings	fa58ebbc0c	Merge branch '6.4.x'	2024-12-19 08:55:44 -07:00
Josh Cummings	05076db53a	Merge branch '6.3.x' into 6.4.x	2024-12-19 08:55:35 -07:00
Josh Cummings	a9f8a23e50	Merge branch '6.2.x' into 6.3.x	2024-12-19 08:55:25 -07:00
Josh Cummings	643a3f1206	Test Setting logoutRequestRepository ... Issue gh-16093	2024-12-19 08:55:18 -07:00
Steven Williams	7aafe2ed5a	Set Saml2RelyingPartyInitiatedLogoutSuccessHandler#logoutRequestRepository ... Closes gh-16093	2024-12-19 08:53:02 -07:00
Josh Cummings	1104b45832	Polish SessionLimit ... - Move to the web.authentication.session package since it is only needed by web.authentication.session elements and does not access any other web element itself. - Add Kotlin support - Add documentation Issue gh-16206	2024-12-18 18:32:28 -07:00
Claudenir Machado	1864577e98	Address SessionLimitStrategy ... Closes gh-16206	2024-12-18 18:32:12 -07:00
Josh Cummings	3eeb4317f6	Add setFavorRelativeUris ... This places the new functionality behind a setting so that we can remain passive until we can change the setting in the next major release. Issue gh-7273	2024-12-17 22:35:41 -07:00
Michal Okosy	7848b959da	Use relative URLs in /login redirects ... Closes gh-7273	2024-12-17 22:35:41 -07:00
Josh Cummings	25740db819	Merge branch '6.4.x'	2024-12-17 13:10:52 -07:00
Josh Cummings	27c2a8ad11	Add Serializable Compatibility to Web Authentication Exceptions ... Issue gh-16276	2024-12-17 13:05:23 -07:00
Josh Cummings	d233b70285	Merge branch '6.4.x'	2024-12-17 09:37:01 -07:00
Josh Cummings	841c03fe3b	Add Serializable Compatilibity to Saml 2.0 Exceptions ... Issue gh-16276	2024-12-17 09:36:29 -07:00
Josh Cummings	b9f3a28678	Add UserDetailsService Constructor ... Closes gh-15973	2024-12-16 17:59:16 -07:00
Evgeniy Cheban	f45cc22e11	Allow configuring custom ServerHttpHeadersWriter for Kotlin DSL ... Closes gh-16009	2024-12-16 17:54:04 -07:00
Josh Cummings	a5b0304596	Move AnyRequest Validation ... This will make way for other adding other checks Issue gh-15982	2024-12-13 18:24:57 -07:00
Josh Cummings	c1f5eb3192	Merge branch '6.4.x'	2024-12-13 18:24:39 -07:00
Josh Cummings	5ee1586a5a	Remove Unexposed Inner Classes from Serialization Test ... The following inner classes are used only internally by a non-Serializable component Issue gh-16276	2024-12-13 18:18:09 -07:00
Josh Cummings	9d02949fa9	Merge branch '6.4.x'	2024-12-13 16:58:17 -07:00
Josh Cummings	018e1ae1a4	Added Serialization Values ... Issue gh-16276	2024-12-13 16:41:32 -07:00
Josh Cummings	b9911fd522	Add serialVersionUID to Authentication classes ... Issue gh-16276	2024-12-13 16:41:32 -07:00
Josh Cummings	77f76f8465	Merge branch '6.4.x'	2024-12-13 11:53:51 -07:00
Josh Cummings	e3cd4339b2	Add Serial Version ... Closes gh-16163	2024-12-13 11:53:15 -07:00
Rob Winch	a6354e5137	Merge branch '6.4.x' ... Closes gh-16283	2024-12-13 10:10:21 -06:00
Daniel Garnier-Moiroux	fb954063bf	Fix WebAuthnWebdriverTests ... Closes gh-16279	2024-12-13 10:08:27 -06:00
Rob Winch	5a81a1fe66	Merge branch '6.4.x'	2024-12-12 22:21:44 -06:00
Rob Winch	2a76a09552	Disable Flaky WebAuthnWebDriverTests	2024-12-12 22:21:36 -06:00
Rob Winch	2fcd305509	Increment to 6.5.0-SNAPSHOT ... Closes gh-16221	2024-12-12 21:47:11 -06:00
Josh Cummings	7592483654	Add Test to Report Missing serialVersionUID ... Issue gh-16276	2024-12-12 18:12:11 -07:00
Josh Cummings	f7b9b7228f	Include Classes Listed in Generator Map ... This allows testing of classes that are serializable, but do not use Security's serialVersionUID. Issue gh-16276	2024-12-12 18:07:53 -07:00
Josh Cummings	82cc3ad5ec	Arrange Class Generators by Module ... Issue gh-16276	2024-12-12 18:07:52 -07:00
Josh Cummings	47b5ab400a	Add 6.4.x Serialization Files ... Closes gh-16274	2024-12-12 18:07:52 -07:00
Daniel Garnier-Moiroux	99cc65d74c	webauthn: add webdriver test ... - These tests verify the full end-to-end flow, including the javascript code bundled in the default login and logout pages. They require a full web browser, with support for Virtual Authenticators for automated testing. At this point in time, only Chrome supports virutal authenticators.	2024-12-11 16:53:38 -06:00
Josh Cummings	4cbaabb239	Added Testing ... Issue gh-16177	2024-12-10 14:09:46 -07:00
Josh Cummings	aa85ebc65f	Remove Extraneous Field ... Issue gh-15678	2024-12-09 08:00:22 -07:00
Josh Cummings	4dd00fe146	Merge branch '6.3.x'	2024-12-06 15:19:19 -07:00
Josh Cummings	dd8ee38194	Merge branch '6.2.x' into 6.3.x ... Closes gh-16229	2024-12-06 15:18:42 -07:00
Josh Cummings	87de6cea1b	Use Reactive JSON Encoder ... Closes gh-16177	2024-12-06 15:14:07 -07:00
Josh Cummings	3d1e4b5f18	Polish Tests ... Confirm that responses are a valid JSON map Issue gh-16177	2024-12-06 15:14:07 -07:00
Josh Cummings	3e20f7b5b5	Polish Error Messages ... - aligned the grammar - formatted using gradlew format - updated copyright year Issue gh-16193	2024-12-05 17:37:46 -07:00
Dmitry Spikhalsky	32e1d4c990	Improve AuthorizationManager configuration error messages ... Closes gh-16193	2024-12-05 17:37:46 -07:00
Tran Ngoc Nhan	39cd8d9faf	Update copyright headers	2024-12-05 14:52:59 -07:00
Josh Cummings	96b3c77ce0	Merge branch '6.3.x'	2024-12-05 12:30:37 -07:00
DingHao	ef7b11ac01	Delay initialization UserDetailsService in Global Authentication	2024-12-05 12:26:04 -07:00
Tran Ngoc Nhan	5966baf9bf	Update copyright headers	2024-12-04 16:51:05 -07:00
Josh Cummings	2ed1cafed8	Restore Deprecated ObjectPostProcessor Usage ... Closes gh-16174	2024-12-04 16:51:05 -07:00
Tran Ngoc Nhan	8c0ea3e630	Add Deprecated ObjectPostProcessor constructor ... Issue gh-16174	2024-12-04 16:51:05 -07:00
Josh Cummings	2b5a2eef82	Address Observation Bean Name Collisions ... Closes gh-16161	2024-11-25 13:26:52 -07:00
Josh Cummings	a55021539a	Add RSocket and WebFlux Observation Tests ... Issue gh-11989 Issue gh-11990	2024-11-25 13:26:52 -07:00
Josh Cummings	315aafd464	Merge remote-tracking branch 'origin/6.3.x'	2024-11-22 17:23:43 -07:00
DingHao	e8ba039a61	Delay initialization AuthenticationProvider in Global Authentication	2024-11-22 17:22:14 -07:00
Tran Ngoc Nhan	b896a74669	Resolve Observation Bean Name Collisions ... Closes gh-16011	2024-11-20 13:28:06 -07:00
Josh Cummings	91832bfc8e	Add EnableWebSecurity + EnableWebSocketSecurity Test ... Issue gh-16011	2024-11-20 13:28:06 -07:00
Joe Grandja	c2cfe92a02	Merge branch '6.3.x'	2024-11-18 05:16:16 -05:00
Joe Grandja	709103e38c	Merge branch '6.2.x' into 6.3.x	2024-11-18 04:45:38 -05:00
Joe Grandja	a8c4d6cead	Require Locale argument for toLower/toUpperCase usage	2024-11-18 04:22:26 -05:00
Daniel Garnier-Moiroux	2639ac6545	webauthn: introduce WebAuthnConfigurer#disableDefaultRegistrationPage	2024-11-14 12:11:43 -06:00
Daniel Garnier-Moiroux	de7c452e42	webauthn: use DefaultResourcesFilter#webauthn ... - Unconditionally use the DefaultResourcesFilter, because the javascript file is required by the DefaultWebAythnPageGeneratingFilter, which is always registered.	2024-11-14 12:11:43 -06:00
Rob Winch	5a95952c95	Merge branch '6.3.x' ... Closes gh-16063	2024-11-11 15:17:02 -06:00
Rob Winch	e1ad989d38	Merge branch '6.2.x' into 6.3.x ... Closes gh-16062	2024-11-11 14:58:39 -06:00
Rob Winch	81e74e65d4	Support ServerExchangeRejectedHandler @Bean ... Closes gh-16061	2024-11-11 14:58:00 -06:00
Josh Cummings	f46e56de78	Improve Error Message for Conflicting Filter Chains ... Closes gh-15874	2024-11-07 13:01:16 -07:00
Josh Cummings	8a6e1297a1	Add Warning Message for Missing Leading Slashes ... Closes gh-16020	2024-10-31 12:22:17 -06:00
Cedric Montfort	d9d77bed82	Allow logout+jwt JWT type for reactive ... The OIDC back-channel spec recommends using a logout token typ `logout+jwt` (see [here](https://openid.net/specs/openid-connect-backchannel-1_0-final.html#LogoutToken). Support of this type was recently added [on the servlet side]([on the Servlet side](9101bf1f7d)), so back porting the same on the reactive side to close the gap. Closes gh-15702	2024-10-28 14:21:48 -07:00
Josh Cummings	27294b2e11	Allow RelyingPartyRegistration Placeholder Resolution in XML ... Closes gh-14645	2024-10-25 16:12:27 -06:00
Tran Ngoc Nhan	689a4141df	Remove unused import	2024-10-25 13:42:33 -07:00
Tran Ngoc Nhan	ffed4ea1dc	Polish diamond usage	2024-10-25 13:42:33 -07:00
Rob Winch	1ba6301afa	Support ServerWebExchangeFirewall @Bean ... Closes gh-15987	2024-10-25 12:13:41 -05:00
Rob Winch	8d5fddda9d	Merge branch '6.3.x' ... Support ServerWebExchangeFirewall @Bean Closes gh-15974in 6.4.x	2024-10-25 12:07:01 -05:00
Rob Winch	adc66e134b	Merge branch '6.2.x' into 6.3.x ... Support ServerWebExchangeFirewall @Bean Closes gh-15991	2024-10-25 11:56:53 -05:00
Rob Winch	3ba1263d64	Support ServerWebExchangeFirewall @Bean ... Closes gh-15987	2024-10-24 16:47:36 -05:00
Tomasz Letachowicz	b2e0539ff5	Add localization to DefaultLoginPageConfigurerTests test in order to avoid failure when system language is different	2024-10-24 11:34:34 -05:00
Josh Cummings	8bac87fb20	Merge branch '6.3.x'	2024-10-23 15:24:32 -07:00
Josh Cummings	c104f44546	Merge branch '6.2.x' into 6.3.x	2024-10-23 15:23:15 -07:00
Scott Murphy Heiberg	18dba34bde	Make RequestMatcherDelegatingAuthorizationManager Post-Processable ... Closes gh-15948	2024-10-23 15:15:10 -07:00
Rob Winch	b0e8730d70	Add Passkeys Support ... Closes gh-13305	2024-10-20 22:54:53 -05:00
xhaggi	7f537241e7	Use SessionAuthenticationStrategy for Remember-Me authentication ... Closes gh-2253	2024-10-15 14:07:07 -07:00
Max Batischev	d37d41c130	Polish One-Time Token API Names and Doc ... The names of variables and methods have been adjusted in accordance with the names of the one-time token login API components. Issue gh-15114	2024-10-15 14:04:56 -07:00
Max Batischev	e9fe6360bc	Add Reactive One-Time Token Login Kotlin DSL Support ... Closes gh-15887	2024-10-15 14:04:56 -07:00
Josh Cummings	c40334317d	Polish One-Time Token Component Names ... Aligning parts of speech so that names are using nouns/verbs where comparable components are using nouns/verbs. Issue gh-15114	2024-10-14 14:07:47 -06:00
kwonyonghyun	b8aa78829c	Improve readability of empty collection checks	2024-10-14 12:16:39 -07:00
Tran Ngoc Nhan	31f8caec5f	Polish diamond operator usage	2024-10-14 11:51:35 -07:00
Josh Cummings	9ce5a76e8c	Polish AuthorizationManager#authorize ... Issue gh-14843	2024-10-14 11:48:57 -07:00
Max Batischev	e7644925f8	Add AuthorizationResult support for AuthorizationManager ... Closes gh-14843	2024-10-14 11:48:57 -07:00
Josh Cummings	702538ebce	AuthorizationEventPublisher Accepts AuthorizationResult ... Closes gh-15915 Co-authored-by: Max Batischev <mblancer@mail.ru>	2024-10-14 11:48:57 -07:00
DingHao	ef1226ddf8	Use Oauth2UserService bean in OidcReactiveOAuth2UserService ... Closes gh-15846	2024-10-14 11:41:04 -07:00
Max Batischev	2edaedf099	Improve encapsulation for jwtValidators	2024-10-07 16:41:50 -07:00
Josh Cummings	b26f2af5d5	Polish ... Formatting as well as adding a missing defer Issue gh-15699	2024-10-07 16:39:54 -07:00
Max Batischev	2ca2e56383	Add Reactive One-Time Token Login support ... Closes gh-15699	2024-10-07 16:39:54 -07:00
Cedric Montfort	aceb5fa6bb	Allow logout+jwt JWT type for reactive ... The OIDC back-channel spec recommends using a logout token typ `logout+jwt` (see [here](https://openid.net/specs/openid-connect-backchannel-1_0-final.html#LogoutToken). Support of this type was recently added [on the servlet side]([on the Servlet side](9101bf1f7d)), so back porting the same on the reactive side to close the gap. Closes gh-15702	2024-09-30 16:32:45 -07:00
Josh Cummings	29331a0d8c	Merge branch '6.3.x'	2024-09-30 17:24:03 -06:00
Josh Cummings	746464e035	Merge branch '6.2.x' into 6.3.x	2024-09-30 17:21:13 -06:00
Josh Cummings	c1857c0308	Fix Formatting ... Issue gh-15771	2024-09-30 16:19:26 -07:00
chao.wang	690e012fb1	Improve OidcBackChannelLogoutTokenValidator error when provider issuer is missing ... Closes gh-15771	2024-09-30 16:19:26 -07:00
Thomas Darimont	8b97fdde43	Polish OAuth2ClientConfiguration	2024-09-30 16:16:45 -07:00
Josh Cummings	ee9a887ae5	Fix Package Tangle ... Move ObjectPostProcessor to be alongside Customizer, another functional interface for describing Spring Security object configuration.	2024-09-26 14:08:25 -06:00
Josh Cummings	d6b620b9f7	Make Observations Selectable ... Closes gh-15678	2024-09-26 11:30:40 -06:00
Josh Cummings	69e3c248fa	Abstract ObservationRegistry Behind ObjectPostProcessor ... Issue gh-15678	2024-09-26 11:30:40 -06:00
Josh Cummings	1ed20aa210	Add ObservationRegistry Tests ... Issue gh-11989 Issue gh-11990	2024-09-26 11:30:40 -06:00
Josh Cummings	717529deb4	Add Generic Type to ObjectPostProcessor Lookups ... Issue gh-15678	2024-09-26 11:30:39 -06:00
Tran Ngoc Nhan	e618fc425d	Favor ObjectProvider ... Closes gh-15805	2024-09-23 16:11:43 -07:00
Tran Ngoc Nhan	9dda65a5e3	Polish CorsSpecTests ... Use concrete ApplicationContext to simplify future maintenance. Issue gh-4832	2024-09-23 16:11:43 -07:00
Steve Riesenberg	cd7f6e09b0	Look up ReactiveOAuth2AccessTokenResponseClient as a bean ... Closes gh-11097	2024-09-23 11:06:12 -05:00
Rob Winch	22dffc0a98	Run format	2024-09-20 09:06:37 -07:00
Ryan Scheidter	0a0721b030	Complete HttpSecurity Deprecation notices	2024-09-20 09:06:37 -07:00
Marcus Hert Da Coregio	a88a7744ed	Require GeneratedOneTimeTokenHandler on constructor ... Issue gh-15114	2024-09-17 08:21:26 -03:00
Josh Cummings	b311b811a1	Pick Up OidcSessionRegistry Bean ... Closes gh-15813	2024-09-15 21:30:55 -07:00
Josh Cummings	590aef0af1	Configure OidcSessionRegistry in Kotlin ... Closes gh-15814	2024-09-15 21:30:55 -07:00
Josh Cummings	8bb5875595	Expose OidcBackChannelLogoutHandler ... This component already uses by default a URI that doesn't require a CSRF token and aalready allows for configuring a cookie name. So, by making it public and configurable in the DSL, both of these tickets quite naturally close. Closes gh-13841 Closes gh-14904	2024-09-15 21:30:55 -07:00
Josh Cummings	2d4c498c3b	Test Meta-Annotation Class Type Support in Reactive ... Issue gh-15747	2024-09-15 21:30:55 -07:00
Josh Cummings	75fd84ce16	Test Reactive Method Security Exactly-One Invocation Semantics ... Issue gh-15651	2024-09-15 21:30:55 -07:00
Josh Cummings	1aec571a81	Test Reactive Method Security Exactly Once Semantics ... Issue gh-15592	2024-09-15 21:30:55 -07:00
Josh Cummings	3e1f8bb960	Test Reactive Method Security with Abstract Classes ... Issue gh-15352	2024-09-15 21:30:55 -07:00
Josh Cummings	fee5dd30c0	Test AuthorizeReturnObject in Reactive ... Issue gh-14597	2024-09-15 21:30:55 -07:00
Josh Cummings	fc2ad34e5d	Test meta-annotation parameter support in Reactive ... Issue gh-14480	2024-09-15 21:30:55 -07:00
Josh Cummings	6f5e103dec	Use AnnotationTemplateExpressionDefaults in Reactive ... Issue gh-15097	2024-09-15 21:30:55 -07:00
Josh Cummings	86f64e7e86	Add Reactive Authorization Proxy Data Hints ... Issue gh-15709	2024-09-15 21:30:55 -07:00
Josh Cummings	2bb3787d2b	Use addAdvisors in Reactive Proxy Configuration ... Issue gh-15497	2024-09-15 21:30:55 -07:00
Marcus Hert Da Coregio	0618d4e03f	Provide Runtime Hints for Beans used in Pre/PostAuthorize Expressions ... Closes gh-14652	2024-09-13 08:42:14 -03:00
Steve Riesenberg	51c226f24c	Add loginPage() to DSL in reactive oauth2Login() ... Closes gh-15674	2024-09-11 15:56:54 -05:00
Rob Winch	9e5cc5f267	Merge remote-tracking branch 'origin/6.3.x'	2024-09-11 15:14:45 -05:00
Daniel Garnier-Moiroux	51d0a8b57d	Fix getBeansWithName in global authentication configurers	2024-09-11 10:46:24 -07:00
Daniel Garnier-Moiroux	7e41785dfc	Remove trailing spaces in default UIs ... - Default UIs had blank lines with only spaces. These get deleted by the spring-javaformat plugin. In order to avoid this behavior, an extra \s had been inserted in the tests. The reason for those \s is not obvious. - This commit cleans up the \s but changing the HTML templates.	2024-09-11 10:44:45 -07:00
Daniel Garnier-Moiroux	85693b2806	Add DefaultResourcesFitler to XML configuration	2024-09-11 10:21:12 -07:00
Steve Riesenberg	63f018eb18	Update tests using deprecated classes ... Issue gh-15737	2024-09-10 15:10:42 -05:00
Daniel Garnier-Moiroux	c1b9035544	Use static CSS in OneTimeToken default UI	2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux	45d53973ab	Serve static content (css, js) for reactive default UIs from DefaultResourcesWebFilter	2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux	11616a1d78	Use static CSS in servlet default UI	2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux	c5c5cd5ed0	Serve static content (css, js) for default UIs from DefaultResourcesFilter	2024-09-10 12:46:13 -07:00
Josh Cummings	be6dc1d2bf	Polish MethodSecurityExpressionHandler Test ... - Rename to follow convention - Use a mock object to verify usage Issue gh-15715	2024-09-10 13:12:47 -06:00
DingHao	ef8b0addbb	Support custom MethodSecurityExpressionHandler ... Closes gh-15715	2024-09-10 12:01:29 -07:00
Josh Cummings	e29058c7e4	Add AuthorizeReturnObject Spring Data Hints ... Issue gh-15709	2024-09-10 11:57:31 -07:00
Josh Cummings	fd5d03d384	Add AuthorizeReturnObject Hints ... Closes gh-15709	2024-09-10 11:57:31 -07:00
Daniel Garnier-Moiroux	6428bf2bd8	Add test for rendering "request token" form in OneTimeTokenLoginConfigurerTests	2024-09-06 09:13:30 -03:00
Daniel Garnier-Moiroux	803c32eb4e	Remove unused logger in OneTimeTokenLoginConfigurer	2024-09-06 09:13:30 -03:00
Daniel Garnier-Moiroux	8d47906191	Render default UIs using lightweight templates	2024-09-05 15:02:42 -07:00
Marcus Hert Da Coregio	a953a3d162	Remove log message	2024-09-05 16:40:26 -03:00
Josh Cummings	c0a10b90ba	Merge remote-tracking branch 'origin/6.3.x'	2024-09-04 14:48:23 -06:00
DingHao	5c20505b0e	Support Class Attributes in Annotation Template Processing ... Closes gh-15721	2024-09-04 13:41:46 -07:00
Max Batischev	81e4c7273a	Add One-Time Token Login support to Kotlin DSL ... Closes gh-15698	2024-09-04 09:13:38 -03:00
Josh Cummings	db04b5a248	Merge branch '6.3.x'	2024-09-03 16:34:09 -06:00
Josh Cummings	ff41521e1e	Merge branch '6.2.x' into 6.3.x	2024-09-03 16:33:46 -06:00
Josh Cummings	b22061d0b6	Merge branch '5.8.x' into 6.2.x	2024-09-03 16:33:22 -06:00
Josh Cummings	97cefa6830	Update Formatting ... Issue gh-15714	2024-09-03 15:32:59 -07:00
tugjg	f836efb912	Address unnecessary method invocation ... Closes gh-15714	2024-09-03 15:32:59 -07:00
Marcus Hert Da Coregio	00e4a8fb54	Add support for One-Time Token Login ... Closes gh-15114	2024-09-03 10:07:56 -03:00
Yanming Zhou	f0f47b54ec	Improve warning message	2024-08-31 16:48:59 -07:00
Josh Cummings	d2e8c19789	Merge branch '6.3.x'	2024-08-26 16:33:04 -06:00
Josh Cummings	279cb89eac	Merge branch '6.2.x' into 6.3.x	2024-08-26 16:32:58 -06:00
Hero Wanders	f372f5cf52	Replace OidcSessionStrategy References with OidcSessionRegistry	2024-08-26 15:32:35 -07:00
Josh Cummings	dff3780c5e	Merge branch '6.3.x'	2024-08-22 12:38:17 -06:00
Josh Cummings	4c0d969f1f	Merge branch '6.2.x' into 6.3.x ... Closes gh-15676	2024-08-22 12:37:45 -06:00
Josh Cummings	3ee5a96e53	Merge branch '5.8.x' into 6.2.x ... Closes gh-15675	2024-08-22 12:24:56 -06:00
Josh Cummings	5c604b95fb	Correct PostFilterAuthorizationMethodInterceptor Target Type ... Previously, `postFilterAuthorizationMethodInterceptor` mistakenly was published as an `Advisor`. Because `MethodSecurityAdvisorRegistrar` re-publishes each pre/post annotation interceptor also as an `Advisor`, this resulted in a duplicate advisor for `@PostFilter`. Closes gh-15651	2024-08-22 12:10:25 -06:00
Josh Cummings	f398be793d	Simplify AuthorizationAdvisorProxyFactory Configuration ... Closes gh-15497	2024-08-19 12:34:38 -06:00
Josh Cummings	6352877bc4	Merge branch '6.3.x'	2024-08-19 12:34:32 -06:00
Josh Cummings	ae8e4d148e	Produce Exactly One AuthorizationAdvisor Per Annotation ... Closes gh-15592	2024-08-19 12:30:03 -06:00
Josh Cummings	27af1df87d	Simplify Method Interceptor Configuration ... Simplifies to use only one ObjectProvider for easier future maintenance Issue gh-15592	2024-08-19 12:27:56 -06:00