1329 Commits

Author	SHA1	Message	Date
Josh Cummings	6ddb964c61	Remove ApacheDS Support ... Closes gh-13852	2025-06-19 11:55:34 -06:00
Rob Winch	b2325e4176	Add OAuth Support for HTTP Interface Client ... Closes gh-16858	2025-06-17 09:53:51 -05:00
Rob Winch	040ffe17e5	Add SubjectX500PrincipalExtractor to Whats New ... Issue gh-16984	2025-06-12 12:19:37 -05:00
Rob Winch	e3add59550	Update x509 Reference ... - Use include-code - Demo how to customize SubjectX500PrincipalExtractor	2025-06-12 12:09:20 -05:00
Rob Winch	7bf2730a53	Add x509@principal-extractor-ref ... Enables customizing the X500PrincipalExtractor	2025-06-12 12:09:20 -05:00
Rob Winch	88ed4a5ccf	Use principalExtractor reference instead of properties	2025-06-12 12:09:20 -05:00
Max Batischev	aba437d469	Add Support SubjectX500PrincipalExtractor ... Closes gh-16980 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-06-12 12:09:20 -05:00
Josh Cummings	9b724377ce	Rework Saml2 Authentication Statement ... This commit separates the authentication principal, the assertion details, and the relying party tenant into separate components. This allows the principal to be completely decoupled from how Spring Security triggers and processes SLO. Specifically, it adds Saml2AssertionAuthentication, a new authentication implementation that allows an Object principal and a Saml2ResponseAssertionAccessor credential. It also moves the relying party registration id from Saml2AuthenticatedPrincipal to Saml2AssertionAuthentication. As such, Saml2AuthenticatedPrincipal is now deprecated in favor of placing its assertion components in Saml2ResponseAssertionAccessor and the relying party registration id in Saml2AssertionAuthentication. Closes gh-10820	2025-06-10 17:21:03 -06:00
Lidoca	d0db5e3ea3	Update database-schema.adoc ... docs: match the database schema with https://github.com/spring-projects/spring-security/blob/6.5.0/docs/modules/ROOT/pages/servlet/authentication/passwords/jdbc.adoc Signed-off-by: Lidoca <32785562+Lidoca@users.noreply.github.com>	2025-06-09 22:17:57 -05:00
Josh Cummings	aa3135169d	Polish Documentation ... Closes gh-14635	2025-06-09 16:49:36 -06:00
Josh Cummings	eaab42a73c	Polish BearerTokenAuthenticationConverter Support ... - Moved to BearerTokenAuthenticationFilter constructor to align with AuthenticationFilter - Undeprecated BearerTokenResolver to reduce number of migration scenarios - Updated to 7.0 schema - Added migration docs Issue gh-14750	2025-06-04 18:17:17 -06:00
Max Batischev	4967f3feee	Add Support BearerTokenAuthenticationConverter ... Closes gh-14750 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-06-04 18:17:17 -06:00
Josh Cummings	492444c588	Update shouldConvertGetRequests Migration Steps ... Issue gh-17099	2025-06-03 13:12:38 -06:00
Josh Cummings	4ed131f6ab	Add shouldConvertGetRequests Migration Steps ... Issue gh-17099	2025-06-03 13:10:45 -06:00
Josh Cummings	6d3b54df21	Change Type Validation Default ... NimbusJwtDecoder and NimbusReactiveJwtDecoder now use Spring Security's JwtTypeValidator by default instead of Nimbus's type validator. Closes gh-17181	2025-05-28 16:11:13 -06:00
Josh Cummings	37a814bc29	Add 7.0 -> 8.0 Migration Guide ... Closes gh-17182	2025-05-28 16:11:12 -06:00
Felix Hagemans	1a4de49977	Create CsrfCustomizer for SPA configuration ... Closes gh-14149 Signed-off-by: Felix Hagemans <felixhagemans@gmail.com>	2025-05-27 11:44:33 -06:00
Rob Winch	cd27290260	Merge branch '6.5.x' ... Closes gh-17163	2025-05-22 15:01:27 -05:00
Rob Winch	e686621e92	Merge branch '6.5.x' ... Closes gh-17162	2025-05-22 15:01:13 -05:00
Rob Winch	6eee256e12	Demonstrate include-code usage ... Closes gh-17161	2025-05-22 14:59:35 -05:00
Rob Winch	0fecaf4924	Add include-code extension setup for docs ... Closes gh-17160	2025-05-22 14:59:35 -05:00
Josh Cummings	45e81c2d0a	Merge branch '6.5.x'	2025-05-21 14:44:23 -06:00
Josh Cummings	7d49c41e03	Merge branch '6.4.x' into 6.5.x	2025-05-21 14:44:03 -06:00
Josh Cummings	fbfb28456a	Merge branch '6.3.x' into 6.4.x	2025-05-21 14:43:44 -06:00
Gurunathan	a4cd6f4278	Advise Overriding equals() and hashCode() in UserDetails Implementations ... This commit adds a documentation note explaining the importance of overriding equals() and hashCode() in custom UserDetails implementations. The default SessionRegistryImpl in Spring Security uses an in-memory ConcurrentMap<Object, Set<String>>, Map<String,SessionInformation> to associate principals with sessions. If a custom UserDetails class does not properly override equals() and hashCode(), user sessions may not be tracked or matched correctly. I believe this helps developers avoid subtle session management issues when implementing custom authentication logic. Signed-off-by: Gurunathan <129361658+Gurunathan16@users.noreply.github.com>	2025-05-21 12:41:44 -06:00
Josh Cummings	07a50b460a	Merge branch '6.5.x'	2025-05-15 18:17:05 -06:00
Josh Cummings	02a516d7f2	Merge branch '6.4.x' into 6.5.x	2025-05-15 18:16:53 -06:00
Josh Cummings	70c940fd4f	Merge branch '6.3.x' into 6.4.x	2025-05-15 18:16:44 -06:00
Josh Cummings	eb30fd7f59	Add Missing Header ... Issue gh-11161	2025-05-15 18:16:36 -06:00
Josh Cummings	b5db32994f	Merge branch '6.5.x'	2025-05-15 17:20:23 -06:00
Josh Cummings	8548d8e18a	Merge branch '6.4.x' into 6.5.x	2025-05-15 17:20:08 -06:00
Josh Cummings	fbdf4a88a0	Merge branch '6.3.x' into 6.4.x	2025-05-15 17:19:55 -06:00
snowykte0426	260d298cc5	Add Migration Guide from Spring Security SAML Extension ... This adds a dedicated migration guide for users moving from the Spring Security SAML Extension to the built-in SAML 2.0 support. Includes: - Content migrated from the project wiki - xref links for `saml2Login`, `saml2Logout`, and `saml2Metadata` - Metadata example moved to Examples Matrix - Cleanup and naming per review feedback Closes gh-11161 Signed-off-by: snowykte0426 <snowykte0426@naver.com>	2025-05-15 17:17:43 -06:00
Josh Cummings	0698d3527d	Merge branch '6.5.x'	2025-05-13 11:18:43 -06:00
Josh Cummings	26f359a4db	Merge branch '6.4.x' into 6.5.x	2025-05-13 11:18:31 -06:00
Josh Cummings	5ba4ab5e11	Merge branch '6.3.x' into 6.4.x	2025-05-13 11:18:02 -06:00
Danilo Piazzalunga	27319e3f9b	Add missing registration property in YAML listing ... Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>	2025-05-13 11:17:35 -06:00
Danilo Piazzalunga	ec462e8bc5	Update assertingparty property usage in YAML snippets ... Spring Boot 2.7 renamed spring.security.saml2.relyingparty.registration.*.identityprovider.* to spring.security.saml2.relyingparty.registration.*.assertingparty.*. Closes gh-12810. Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>	2025-05-13 11:17:35 -06:00
Joe Grandja	ba7be9c8b9	Merge branch '6.5.x'	2025-05-09 16:14:34 -04:00
Joe Grandja	e3c39f02bc	Add documentation for DPoP support ... Closes gh-17072	2025-05-09 16:02:14 -04:00
Rob Winch	f13836c9c8	Add X to CommonOAuth2Provider Reference ... Issue gh-16510 Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	2025-05-07 11:31:28 -05:00
Josh Cummings	211b1b7285	Update Method Security Migration Steps	2025-05-06 16:44:20 -06:00
Josh Cummings	84db5bb312	Add Cookie Customizer Migration Steps	2025-05-06 16:43:04 -06:00
Josh Cummings	74a25c3fc1	Add shouldFilterAllDispatcherTypes Migration Steps	2025-05-06 16:40:10 -06:00
Josh Cummings	084990736e	Move Opaque Token Migration Steps	2025-05-06 16:39:16 -06:00
Josh Cummings	c6bba38458	Update SAML 2.0 Migration Steps	2025-05-06 16:38:32 -06:00
Josh Cummings	45b453f59b	Add ACL Migration Steps	2025-05-06 16:38:19 -06:00
Rob Winch	5abbcecccc	Update to 7.0.0-SNAPSHOT ... Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	2025-05-06 13:26:14 -05:00
Rob Winch	9b79b99150	Merge branch '6.4.x' ... - Correct method name in logout.adoc Closes gh-17049	2025-05-06 10:24:14 -05:00
Rob Winch	63d79a97db	Merge branch '6.3.x' into 6.4.x ... - Correct method name in logout.adoc Closes gh-17048	2025-05-06 10:23:58 -05:00
Tran Ngoc Nhan	505fe3abed	Correct method name ... Closes gh-17031 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-05-06 10:17:29 -05:00
Josh Cummings	df640f22dc	Merge branch '6.4.x'	2025-05-02 15:59:13 -06:00
Josh Cummings	92160fa26f	Merge branch '6.3.x' into 6.4.x ... Closes gh-17034	2025-05-02 15:58:58 -06:00
Josh Cummings	51239359ed	Fix ClearSiteData Code Snippet ... Closes gh-16948	2025-05-02 15:57:31 -06:00
Josh Cummings	28091c8563	Merge branch '6.4.x'	2025-05-01 12:03:19 -06:00
Josh Cummings	c4a0dfe838	Merge remote-tracking branch 'origin/6.3.x' into 6.4.x	2025-05-01 12:03:05 -06:00
Soumik Sarker	bcef6ed74f	Reformatted lines in x509 overview documentation ... Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>	2025-05-01 12:02:45 -06:00
Josh Cummings	d0a97917ad	Merge branch '6.4.x'	2025-04-29 13:39:00 -06:00
Josh Cummings	d76ccc6856	Merge branch '6.3.x' into 6.4.x	2025-04-29 13:38:41 -06:00
Yanming Zhou	9c76ab69f0	Use proper configuration key ... the getter method is `getOpaquetoken()` not `getOpaqueToken()` See c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51) Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	2025-04-29 13:37:51 -06:00
Yanming Zhou	ce5a12b2f7	Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector ... Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	2025-04-23 14:10:02 -06:00
Josh Cummings	61d6fbc2a9	Update Documentation for PathPatternRequestMatcher ... Issue gh-16765	2025-04-23 12:11:09 -06:00
Steve Riesenberg	15c2b156f1	Update Client Authentication examples ... Closes gh-16925 987d9c9788ba0343f543083c87613fb5	2025-04-11 15:10:05 -05:00
Josh Cummings	6438603cb6	Pick Up TargetVisitor Beans ... Closes gh-16923	2025-04-10 15:48:09 -06:00
Josh Cummings	3869b13e68	Add ResponseAuthenticationConverter ... Aside from simplifying configuration, this commit also makes it possible to provide a response authentication converter that doesn't need the NameID element to be present. Closes gh-12136	2025-04-09 17:38:24 -06:00
Josh Cummings	3e686abf50	Add ResponseValidator ... Issue gh-14264 Closes gh-16915	2025-04-09 17:32:40 -06:00
Steve Riesenberg	43ef4262da	Update whats-new.adoc ... Issue gh-16913	2025-04-09 11:19:50 -05:00
Michael Samborski	bfb4878e29	Update kotlin.adoc to add required spread operator(*) ... Signed-off-by: Michael Samborski <msamborski@orbiscommunications.com>	2025-04-08 14:12:09 -05:00
Josh Cummings	f93a7a2f85	Deprecate HandlerMappingIntrospectorRequestTransformer ... Closes gh-16536	2025-04-07 13:56:18 -06:00
Josh Cummings	a283700ef8	Add CacheSaml2AuthenticationRequestRepository ... Closes gh-14793	2025-04-03 17:43:48 -06:00
Josh Cummings	67c21de1cf	Support Continue Filter Chain When No Relying Party ... Closes gh-16000	2025-04-03 15:32:23 -06:00
Josh Cummings	f280593566	Move Preparation Steps ... Closes gh-16873	2025-04-03 11:08:24 -06:00
Josh Cummings	09b75719c2	Merge branch '6.4.x'	2025-04-03 11:08:11 -06:00
Josh Cummings	5ecf093025	Merge branch '6.3.x' into 6.4.x	2025-04-03 11:06:24 -06:00
Josh Cummings	616b43f261	Restore 6.x Migration Steps ... Issue gh-16873	2025-04-03 11:05:53 -06:00
Josh Cummings	91b0936189	Add AssertionValidator ... - Ships with support for customizing the OpenSAML validators to use - Or, you can supply your own instance of SAML20AssertionValidator Closes gh-15578	2025-04-02 17:44:40 -06:00
Tran Ngoc Nhan	ee84d37435	Use SpringCacheBasedTicketCache ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-31 13:54:48 -06:00
Tran Ngoc Nhan	3be8e92187	Fix typo ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-27 16:40:35 -06:00
Hao	6159e089d4	Fix inline code formatting in documentation ... Signed-off-by: Hao <kyrieeeee2@gmail.com>	2025-03-26 21:51:52 -06:00
Hao	8c7d2e8922	Fix typo in multitenancy documentation ... Signed-off-by: Hao <kyrieeeee2@gmail.com>	2025-03-26 21:51:52 -06:00
Josh Cummings	99345537d6	Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter ... Issue gh-16417	2025-03-26 16:38:39 -06:00
Josh Cummings	91ee5e7f2b	Add RequestMatcher Migration Path for CAS ... Issue gh-16417	2025-03-26 16:38:38 -06:00
Josh Cummings	15d9c13984	Add RequestMatcher MigrationPath for SwitchUserFilter ... To simplify migration, the filter's setter methods still use AntPathRequestMatcher. Users can call the equivalent RequestMatcher setter methods to opt-in to the change early. Issue gh-16417	2025-03-26 16:38:38 -06:00
Josh Cummings	ff52e05b24	Favor PathPatternRequestMatcher in XML Configuration ... Update BeanDefinitionParsers to use PathPatternRequestMatcher conditionally on the presence of a PathPatternRequestMatcher.Builder bean Closes gh-16828	2025-03-26 13:40:04 -06:00
Josh Cummings	3aec6c2f6e	Deprecate Access API in ACL ... Issue gh-11302	2025-03-25 12:21:13 -06:00
Josh Cummings	05fdcd6a08	Deprecate MvcRequestMatcher ... Closes gh-16631	2025-03-24 22:03:22 -06:00
Rob Winch	c032b20178	Merge branch '6.3.x' into 6.4.x	2025-03-21 15:59:51 -05:00
Rob Winch	58e7ba4a4b	https docs download	2025-03-21 15:59:39 -05:00
Rob Winch	b9a8da0a45	Merge branch '6.4.x'	2025-03-21 15:59:19 -05:00
Rob Winch	4fa5b45745	Merge branch '6.3.x' into 6.4.x	2025-03-21 15:59:02 -05:00
Rob Winch	d14a9ae068	https docs download	2025-03-21 15:58:53 -05:00
Josh Cummings	f910d47c67	Merge branch '6.4.x'	2025-03-21 14:47:33 -06:00
Josh Cummings	db8b6322e2	Merge branch '6.3.x' into 6.4.x	2025-03-21 14:47:24 -06:00
Bragolgirith	72554f7f36	Update authorize-http-requests.adoc ... Fix patterns in the Security Matchers documentation Signed-off-by: Bragolgirith <6455473+Bragolgirith@users.noreply.github.com>	2025-03-21 14:46:53 -06:00
Rob Winch	2a275b1966	Add link to docs zip ... Closes gh-16798	2025-03-21 15:12:28 -05:00
Rob Winch	af8786150e	Merge branch '6.3.x' into 6.4.x ... Closes gh-16799	2025-03-21 15:11:18 -05:00
Rob Winch	65e83f8e7a	Add link to docs zip ... Closes gh-16798	2025-03-21 15:10:52 -05:00
Steve Riesenberg	6745576186	Polish basic.adoc ... Signed-off-by: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com>	2025-03-21 15:05:22 -05:00
Steve Riesenberg	eb510ab59d	Polish gh-16280	2025-03-21 15:05:22 -05:00
Martin Emrich	21fb5f92cf	Explain behaviour with XMLHttpRequest on 401 response ... Relates to / Closes gh-16103	2025-03-21 15:05:22 -05:00
nobletrout	555fe1f147	Update anonymous.adoc ... make the example code return the same thing for the do and don't do. Signed-off-by: nobletrout <nobletrout@gmail.com>	2025-03-20 15:17:35 -05:00
Steve Riesenberg	3ebcbd4375	Merge branch '6.4.x' ... Closes gh-16788 Closes gh-16789 Closes gh-16790 Closes gh-16791 Closes gh-16792	2025-03-20 14:47:07 -05:00
Steve Riesenberg	96cfbd1e6c	Merge branch '6.3.x' into 6.4.x ... Closes gh-16782 Closes gh-16783 Closes gh-16784 Closes gh-16785 Closes gh-16786	2025-03-20 14:46:18 -05:00
Tran Ngoc Nhan	af40d7e35a	Fix typo ... Closes gh-16776 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-20 14:38:09 -05:00
Tran Ngoc Nhan	daf8cfe8d2	Fix Spring Framework reference link ... Closes gh-16699 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-20 14:38:08 -05:00
Tran Ngoc Nhan	75b537f99a	Fix WebFlux authentication reference link ... Closes gh-16702 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-20 14:38:07 -05:00
ayoub anbara	8167022ada	Update data.adoc ... No need to declare the method that create a bean as a public, and no need to declare interface that extends PagingAndSortingRepository with @Repository Signed-off-by: ayoub anbara <anbara.ayoub@gmail.com>	2025-03-20 12:47:33 -06:00
Josh Cummings	bb438578cb	Deprecate SecurityMetadataSource ... - Updated FAQ to replace SecurityMetadataSource recommendation with AuthorizationManager Issue gh-16772	2025-03-19 17:41:00 -06:00
Josh Cummings	a884c3c906	Address XsdDocumentedTests Errors ... Issue gh-16775	2025-03-19 16:39:27 -06:00
Josh Cummings	0091cf697c	Add RedirectToHttps Migration Doc ... Issue gh-16775 Issue gh-16678	2025-03-19 15:27:09 -06:00
Josh Cummings	e6008b6067	Add RedirectToHttps to XML ... Closes gh-16775	2025-03-19 15:26:05 -06:00
Steve Riesenberg	0938ca01a4	Add support for automatic context-propagation with Micrometer ... Closes gh-16665	2025-03-13 15:29:08 -05:00
mgreene57005	56d255018c	Fix ordering for security filter configuration ... Signed-off-by: Matthew Greene <mgreene57005@gmail.com> Signed-off-by: mgreene57005 <mgreene57005@gmail.com>	2025-03-07 14:00:22 -07:00
Juha-1	19a5a9c970	Update logout.adoc ... typos Signed-off-by: Juha-1 <52188855+Juha-1@users.noreply.github.com>	2025-03-07 13:59:05 -07:00
Josh Cummings	be23268c37	Add redirectToHttps DSL Configurer ... Closes gh-16679	2025-02-28 09:38:07 -07:00
Josh Cummings	ab43a660b9	Add RFC 9068 Support ... Closes gh-13185	2025-02-27 12:40:01 -07:00
Rob Winch	9417f02790	Deprecate PortResolver ... Closes gh-15972	2025-02-26 16:13:10 -06:00
Rob Winch	e64102b83c	Fix migration source type ... Previously the migration-7/web.adoc source type was kotlin for the xml source. This commit fixes that. Closes gh-16662	2025-02-26 16:13:09 -06:00
Rob Winch	3e0be28602	Ad section summary toc ... Closes gh-16663	2025-02-26 16:13:09 -06:00
Rob Winch	615d302e50	Add migration-7/web.adoc to nav ... Closes gh-16661	2025-02-26 16:13:09 -06:00
Josh Cummings	ba273aba43	Merge branch '6.4.x'	2025-02-24 12:54:21 -07:00
Olivier	71e12bb42e	Fix @PostResult example in method-security ... Replace @PreFilter with @Postfilter in example Signed-off-by: Olivier <Kuba15@users.noreply.github.com>	2025-02-24 12:54:05 -07:00
Josh Cummings	55b83a0346	Merge branch '6.4.x'	2025-02-24 12:50:11 -07:00
Josh Cummings	d607364b50	Merge branch '6.3.x' into 6.4.x	2025-02-24 12:49:42 -07:00
Tran Ngoc Nhan	a0cfb2777c	Fix typo ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-02-24 12:49:18 -07:00
Josh Cummings	7d301f87d6	Add Opt-in PathPattern Strategy ... Closes gh-16573	2025-02-21 13:40:24 -07:00
Josh Cummings	588220a020	Add PathPatterRequestMatcher ... Closes gh-16429 Clsoes gh-16430	2025-02-21 13:40:23 -07:00
Steve Riesenberg	7fc5d50adf	Polish gh-16551	2025-02-19 13:53:30 -06:00
Max Batischev	0ccbd20f0a	Add Support ServerFormPostRedirectStrategy ... Closes gh-16542 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-19 13:53:30 -06:00
Tran Ngoc Nhan	92c2e21522	Use Spring Framework Url attribute ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-02-14 09:56:22 -07:00
Tran Ngoc Nhan	396b04f355	Update reference Spring Framwork links ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-02-14 09:56:22 -07:00
Tran Ngoc Nhan	839269dbf5	Update Spring Security javadocs ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-02-13 16:19:56 -07:00
patpatpat123	b6f8046b2f	Fix type for rest-client-access-token-response-client.adoc ... In line 260, there is the mention of "=== Customizing the `WebClient`" while it should be "=== Customizing the `RestClient`" Signed-off-by: patpatpat123 <43899031+patpatpat123@users.noreply.github.com>	2025-02-10 10:11:06 -06:00
Daniel Garnier-Moiroux	238f47ce5e	One Time Token login registers the default login page ... closes gh-16414 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-02-10 09:55:51 -06:00
Max Batischev	be81377235	Add Support ServerGenerateOneTimeTokenRequestResolver ... Closes gh-16488 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-05 14:14:16 -07:00
Steve Riesenberg	54a6a19e05	Polish gh-16214 ... This commit applies the following changes: * Added local Content-Security-Policy with script-src nonce directive * Removed form-redirect.js and associated changes * Renamed to FormPostRedirectStrategy * Removed HtmlUtils usage * Moved to same package as DefaultRedirectStrategy	2025-02-03 14:52:30 -06:00
Craig Andrews	58534e7f60	Add FormRedirectStrategy to enable POST OIDC Logout ... FormRedirectStrategy redirects using an autosubmitting HTML form using the POST method versus DefaultRedirectStrategy which redirects using the GET method. Can be used to implement POST binding for relying party initiated OIDC logout by setting FormRedirectStrategy as the redirection strategy on OidcClientInitiatedLogoutSuccessHandler. Closes gh-13002 Signed-off-by: Craig Andrews <candrews@integralblue.com>	2025-02-03 14:52:30 -06:00
Max Batischev	474b5e151a	Add Support GenerateOneTimeTokenRequestResolver ... Closes gh-16291 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-22 17:09:55 -06:00
Rob Winch	d3332e1956	Document JDBC Persistence for WebAuthn ... Issue gh-16282	2025-01-17 21:37:27 -06:00
Rob Winch	1f9845485c	Document custom HttpMessageConverter support for WebAuthn ... Issue gh-16397	2025-01-17 21:08:16 -06:00
Rob Winch	718c90d7ad	Document PublicKeyCredentialCreationOptionsRepository ... Issue gh-16396	2025-01-17 20:51:43 -06:00
Rob Winch	85d7cc1335	Document requireProofKey ... Issue gh-16386	2025-01-17 17:26:48 -06:00
Josh Cummings	aea7f333f7	Document OpaqueTokenIntrospector Migration ... Issue gh-15988	2025-01-16 20:41:56 -07:00
Josh Cummings	a5af8503df	Update OpaqueTokenIntrospector Documentation ... Issue gh-15988	2025-01-16 16:46:46 -07:00
Marco Haase	7c4448c588	Fix broken link to MockMvc documentation ... Link to Test chapter of Spring Framework documentation is broken, this commit fixes it. Signed-off-by: Marco Haase <marco.haase@de.bosch.com>	2025-01-16 16:30:47 -07:00
Josh Cummings	352a6a0d53	Add Breaking Change Section for 6.5 ... Issue gh-16422	2025-01-16 14:30:12 -07:00
Tran Ngoc Nhan	38006fea2c	Fix broken link ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-01-16 14:24:07 -07:00
Josh Cummings	7b8ff72c4e	Fix MVC Documentation for Kotlin ... Closes gh-16426	2025-01-15 17:45:05 -07:00
Muhammad N. Fadhil	b7b915d7c9	Improved sentence phrasing in the docs.	2025-01-12 22:25:22 -06:00
Muhammad N. Fadhil	a78e888ce0	Fixed grammatical mistakes in the docs.	2025-01-12 22:25:22 -06:00