1233 Commits

Author	SHA1	Message	Date
Josh Cummings	45b453f59b	Add ACL Migration Steps	2025-05-06 16:38:19 -06:00
Rob Winch	5abbcecccc	Update to 7.0.0-SNAPSHOT ... Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	2025-05-06 13:26:14 -05:00
Rob Winch	9b79b99150	Merge branch '6.4.x' ... - Correct method name in logout.adoc Closes gh-17049	2025-05-06 10:24:14 -05:00
Rob Winch	63d79a97db	Merge branch '6.3.x' into 6.4.x ... - Correct method name in logout.adoc Closes gh-17048	2025-05-06 10:23:58 -05:00
Tran Ngoc Nhan	505fe3abed	Correct method name ... Closes gh-17031 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-05-06 10:17:29 -05:00
Josh Cummings	df640f22dc	Merge branch '6.4.x'	2025-05-02 15:59:13 -06:00
Josh Cummings	92160fa26f	Merge branch '6.3.x' into 6.4.x ... Closes gh-17034	2025-05-02 15:58:58 -06:00
Josh Cummings	51239359ed	Fix ClearSiteData Code Snippet ... Closes gh-16948	2025-05-02 15:57:31 -06:00
Josh Cummings	28091c8563	Merge branch '6.4.x'	2025-05-01 12:03:19 -06:00
Josh Cummings	c4a0dfe838	Merge remote-tracking branch 'origin/6.3.x' into 6.4.x	2025-05-01 12:03:05 -06:00
Soumik Sarker	bcef6ed74f	Reformatted lines in x509 overview documentation ... Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>	2025-05-01 12:02:45 -06:00
Josh Cummings	d0a97917ad	Merge branch '6.4.x'	2025-04-29 13:39:00 -06:00
Josh Cummings	d76ccc6856	Merge branch '6.3.x' into 6.4.x	2025-04-29 13:38:41 -06:00
Yanming Zhou	9c76ab69f0	Use proper configuration key ... the getter method is `getOpaquetoken()` not `getOpaqueToken()` See c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51) Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	2025-04-29 13:37:51 -06:00
Yanming Zhou	ce5a12b2f7	Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector ... Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	2025-04-23 14:10:02 -06:00
Josh Cummings	61d6fbc2a9	Update Documentation for PathPatternRequestMatcher ... Issue gh-16765	2025-04-23 12:11:09 -06:00
Steve Riesenberg	15c2b156f1	Update Client Authentication examples ... Closes gh-16925 987d9c9788ba0343f543083c87613fb5	2025-04-11 15:10:05 -05:00
Josh Cummings	6438603cb6	Pick Up TargetVisitor Beans ... Closes gh-16923	2025-04-10 15:48:09 -06:00
Josh Cummings	3869b13e68	Add ResponseAuthenticationConverter ... Aside from simplifying configuration, this commit also makes it possible to provide a response authentication converter that doesn't need the NameID element to be present. Closes gh-12136	2025-04-09 17:38:24 -06:00
Josh Cummings	3e686abf50	Add ResponseValidator ... Issue gh-14264 Closes gh-16915	2025-04-09 17:32:40 -06:00
Steve Riesenberg	43ef4262da	Update whats-new.adoc ... Issue gh-16913	2025-04-09 11:19:50 -05:00
Michael Samborski	bfb4878e29	Update kotlin.adoc to add required spread operator(*) ... Signed-off-by: Michael Samborski <msamborski@orbiscommunications.com>	2025-04-08 14:12:09 -05:00
Josh Cummings	f93a7a2f85	Deprecate HandlerMappingIntrospectorRequestTransformer ... Closes gh-16536	2025-04-07 13:56:18 -06:00
Josh Cummings	a283700ef8	Add CacheSaml2AuthenticationRequestRepository ... Closes gh-14793	2025-04-03 17:43:48 -06:00
Josh Cummings	67c21de1cf	Support Continue Filter Chain When No Relying Party ... Closes gh-16000	2025-04-03 15:32:23 -06:00
Josh Cummings	f280593566	Move Preparation Steps ... Closes gh-16873	2025-04-03 11:08:24 -06:00
Josh Cummings	09b75719c2	Merge branch '6.4.x'	2025-04-03 11:08:11 -06:00
Josh Cummings	5ecf093025	Merge branch '6.3.x' into 6.4.x	2025-04-03 11:06:24 -06:00
Josh Cummings	616b43f261	Restore 6.x Migration Steps ... Issue gh-16873	2025-04-03 11:05:53 -06:00
Josh Cummings	91b0936189	Add AssertionValidator ... - Ships with support for customizing the OpenSAML validators to use - Or, you can supply your own instance of SAML20AssertionValidator Closes gh-15578	2025-04-02 17:44:40 -06:00
Tran Ngoc Nhan	ee84d37435	Use SpringCacheBasedTicketCache ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-31 13:54:48 -06:00
Tran Ngoc Nhan	3be8e92187	Fix typo ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-27 16:40:35 -06:00
Hao	6159e089d4	Fix inline code formatting in documentation ... Signed-off-by: Hao <kyrieeeee2@gmail.com>	2025-03-26 21:51:52 -06:00
Hao	8c7d2e8922	Fix typo in multitenancy documentation ... Signed-off-by: Hao <kyrieeeee2@gmail.com>	2025-03-26 21:51:52 -06:00
Josh Cummings	99345537d6	Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter ... Issue gh-16417	2025-03-26 16:38:39 -06:00
Josh Cummings	91ee5e7f2b	Add RequestMatcher Migration Path for CAS ... Issue gh-16417	2025-03-26 16:38:38 -06:00
Josh Cummings	15d9c13984	Add RequestMatcher MigrationPath for SwitchUserFilter ... To simplify migration, the filter's setter methods still use AntPathRequestMatcher. Users can call the equivalent RequestMatcher setter methods to opt-in to the change early. Issue gh-16417	2025-03-26 16:38:38 -06:00
Josh Cummings	ff52e05b24	Favor PathPatternRequestMatcher in XML Configuration ... Update BeanDefinitionParsers to use PathPatternRequestMatcher conditionally on the presence of a PathPatternRequestMatcher.Builder bean Closes gh-16828	2025-03-26 13:40:04 -06:00
Josh Cummings	3aec6c2f6e	Deprecate Access API in ACL ... Issue gh-11302	2025-03-25 12:21:13 -06:00
Josh Cummings	05fdcd6a08	Deprecate MvcRequestMatcher ... Closes gh-16631	2025-03-24 22:03:22 -06:00
Rob Winch	c032b20178	Merge branch '6.3.x' into 6.4.x	2025-03-21 15:59:51 -05:00
Rob Winch	58e7ba4a4b	https docs download	2025-03-21 15:59:39 -05:00
Rob Winch	b9a8da0a45	Merge branch '6.4.x'	2025-03-21 15:59:19 -05:00
Rob Winch	4fa5b45745	Merge branch '6.3.x' into 6.4.x	2025-03-21 15:59:02 -05:00
Rob Winch	d14a9ae068	https docs download	2025-03-21 15:58:53 -05:00
Josh Cummings	f910d47c67	Merge branch '6.4.x'	2025-03-21 14:47:33 -06:00
Josh Cummings	db8b6322e2	Merge branch '6.3.x' into 6.4.x	2025-03-21 14:47:24 -06:00
Bragolgirith	72554f7f36	Update authorize-http-requests.adoc ... Fix patterns in the Security Matchers documentation Signed-off-by: Bragolgirith <6455473+Bragolgirith@users.noreply.github.com>	2025-03-21 14:46:53 -06:00
Rob Winch	2a275b1966	Add link to docs zip ... Closes gh-16798	2025-03-21 15:12:28 -05:00
Rob Winch	af8786150e	Merge branch '6.3.x' into 6.4.x ... Closes gh-16799	2025-03-21 15:11:18 -05:00
Rob Winch	65e83f8e7a	Add link to docs zip ... Closes gh-16798	2025-03-21 15:10:52 -05:00
Steve Riesenberg	6745576186	Polish basic.adoc ... Signed-off-by: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com>	2025-03-21 15:05:22 -05:00
Steve Riesenberg	eb510ab59d	Polish gh-16280	2025-03-21 15:05:22 -05:00
Martin Emrich	21fb5f92cf	Explain behaviour with XMLHttpRequest on 401 response ... Relates to / Closes gh-16103	2025-03-21 15:05:22 -05:00
nobletrout	555fe1f147	Update anonymous.adoc ... make the example code return the same thing for the do and don't do. Signed-off-by: nobletrout <nobletrout@gmail.com>	2025-03-20 15:17:35 -05:00
Steve Riesenberg	3ebcbd4375	Merge branch '6.4.x' ... Closes gh-16788 Closes gh-16789 Closes gh-16790 Closes gh-16791 Closes gh-16792	2025-03-20 14:47:07 -05:00
Steve Riesenberg	96cfbd1e6c	Merge branch '6.3.x' into 6.4.x ... Closes gh-16782 Closes gh-16783 Closes gh-16784 Closes gh-16785 Closes gh-16786	2025-03-20 14:46:18 -05:00
Tran Ngoc Nhan	af40d7e35a	Fix typo ... Closes gh-16776 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-20 14:38:09 -05:00
Tran Ngoc Nhan	daf8cfe8d2	Fix Spring Framework reference link ... Closes gh-16699 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-20 14:38:08 -05:00
Tran Ngoc Nhan	75b537f99a	Fix WebFlux authentication reference link ... Closes gh-16702 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-03-20 14:38:07 -05:00
ayoub anbara	8167022ada	Update data.adoc ... No need to declare the method that create a bean as a public, and no need to declare interface that extends PagingAndSortingRepository with @Repository Signed-off-by: ayoub anbara <anbara.ayoub@gmail.com>	2025-03-20 12:47:33 -06:00
Josh Cummings	bb438578cb	Deprecate SecurityMetadataSource ... - Updated FAQ to replace SecurityMetadataSource recommendation with AuthorizationManager Issue gh-16772	2025-03-19 17:41:00 -06:00
Josh Cummings	a884c3c906	Address XsdDocumentedTests Errors ... Issue gh-16775	2025-03-19 16:39:27 -06:00
Josh Cummings	0091cf697c	Add RedirectToHttps Migration Doc ... Issue gh-16775 Issue gh-16678	2025-03-19 15:27:09 -06:00
Josh Cummings	e6008b6067	Add RedirectToHttps to XML ... Closes gh-16775	2025-03-19 15:26:05 -06:00
Steve Riesenberg	0938ca01a4	Add support for automatic context-propagation with Micrometer ... Closes gh-16665	2025-03-13 15:29:08 -05:00
mgreene57005	56d255018c	Fix ordering for security filter configuration ... Signed-off-by: Matthew Greene <mgreene57005@gmail.com> Signed-off-by: mgreene57005 <mgreene57005@gmail.com>	2025-03-07 14:00:22 -07:00
Juha-1	19a5a9c970	Update logout.adoc ... typos Signed-off-by: Juha-1 <52188855+Juha-1@users.noreply.github.com>	2025-03-07 13:59:05 -07:00
Josh Cummings	be23268c37	Add redirectToHttps DSL Configurer ... Closes gh-16679	2025-02-28 09:38:07 -07:00
Josh Cummings	ab43a660b9	Add RFC 9068 Support ... Closes gh-13185	2025-02-27 12:40:01 -07:00
Rob Winch	9417f02790	Deprecate PortResolver ... Closes gh-15972	2025-02-26 16:13:10 -06:00
Rob Winch	e64102b83c	Fix migration source type ... Previously the migration-7/web.adoc source type was kotlin for the xml source. This commit fixes that. Closes gh-16662	2025-02-26 16:13:09 -06:00
Rob Winch	3e0be28602	Ad section summary toc ... Closes gh-16663	2025-02-26 16:13:09 -06:00
Rob Winch	615d302e50	Add migration-7/web.adoc to nav ... Closes gh-16661	2025-02-26 16:13:09 -06:00
Josh Cummings	ba273aba43	Merge branch '6.4.x'	2025-02-24 12:54:21 -07:00
Olivier	71e12bb42e	Fix @PostResult example in method-security ... Replace @PreFilter with @Postfilter in example Signed-off-by: Olivier <Kuba15@users.noreply.github.com>	2025-02-24 12:54:05 -07:00
Josh Cummings	55b83a0346	Merge branch '6.4.x'	2025-02-24 12:50:11 -07:00
Josh Cummings	d607364b50	Merge branch '6.3.x' into 6.4.x	2025-02-24 12:49:42 -07:00
Tran Ngoc Nhan	a0cfb2777c	Fix typo ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-02-24 12:49:18 -07:00
Josh Cummings	7d301f87d6	Add Opt-in PathPattern Strategy ... Closes gh-16573	2025-02-21 13:40:24 -07:00
Josh Cummings	588220a020	Add PathPatterRequestMatcher ... Closes gh-16429 Clsoes gh-16430	2025-02-21 13:40:23 -07:00
Steve Riesenberg	7fc5d50adf	Polish gh-16551	2025-02-19 13:53:30 -06:00
Max Batischev	0ccbd20f0a	Add Support ServerFormPostRedirectStrategy ... Closes gh-16542 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-19 13:53:30 -06:00
Tran Ngoc Nhan	92c2e21522	Use Spring Framework Url attribute ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-02-14 09:56:22 -07:00
Tran Ngoc Nhan	396b04f355	Update reference Spring Framwork links ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-02-14 09:56:22 -07:00
Tran Ngoc Nhan	839269dbf5	Update Spring Security javadocs ... Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2025-02-13 16:19:56 -07:00
patpatpat123	b6f8046b2f	Fix type for rest-client-access-token-response-client.adoc ... In line 260, there is the mention of "=== Customizing the `WebClient`" while it should be "=== Customizing the `RestClient`" Signed-off-by: patpatpat123 <43899031+patpatpat123@users.noreply.github.com>	2025-02-10 10:11:06 -06:00
Daniel Garnier-Moiroux	238f47ce5e	One Time Token login registers the default login page ... closes gh-16414 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2025-02-10 09:55:51 -06:00
Max Batischev	be81377235	Add Support ServerGenerateOneTimeTokenRequestResolver ... Closes gh-16488 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-02-05 14:14:16 -07:00
Steve Riesenberg	54a6a19e05	Polish gh-16214 ... This commit applies the following changes: * Added local Content-Security-Policy with script-src nonce directive * Removed form-redirect.js and associated changes * Renamed to FormPostRedirectStrategy * Removed HtmlUtils usage * Moved to same package as DefaultRedirectStrategy	2025-02-03 14:52:30 -06:00
Craig Andrews	58534e7f60	Add FormRedirectStrategy to enable POST OIDC Logout ... FormRedirectStrategy redirects using an autosubmitting HTML form using the POST method versus DefaultRedirectStrategy which redirects using the GET method. Can be used to implement POST binding for relying party initiated OIDC logout by setting FormRedirectStrategy as the redirection strategy on OidcClientInitiatedLogoutSuccessHandler. Closes gh-13002 Signed-off-by: Craig Andrews <candrews@integralblue.com>	2025-02-03 14:52:30 -06:00
Max Batischev	474b5e151a	Add Support GenerateOneTimeTokenRequestResolver ... Closes gh-16291 Signed-off-by: Max Batischev <mblancer@mail.ru>	2025-01-22 17:09:55 -06:00
Rob Winch	d3332e1956	Document JDBC Persistence for WebAuthn ... Issue gh-16282	2025-01-17 21:37:27 -06:00
Rob Winch	1f9845485c	Document custom HttpMessageConverter support for WebAuthn ... Issue gh-16397	2025-01-17 21:08:16 -06:00
Rob Winch	718c90d7ad	Document PublicKeyCredentialCreationOptionsRepository ... Issue gh-16396	2025-01-17 20:51:43 -06:00
Rob Winch	85d7cc1335	Document requireProofKey ... Issue gh-16386	2025-01-17 17:26:48 -06:00
Josh Cummings	aea7f333f7	Document OpaqueTokenIntrospector Migration ... Issue gh-15988	2025-01-16 20:41:56 -07:00
Josh Cummings	a5af8503df	Update OpaqueTokenIntrospector Documentation ... Issue gh-15988	2025-01-16 16:46:46 -07:00
Marco Haase	7c4448c588	Fix broken link to MockMvc documentation ... Link to Test chapter of Spring Framework documentation is broken, this commit fixes it. Signed-off-by: Marco Haase <marco.haase@de.bosch.com>	2025-01-16 16:30:47 -07:00
Josh Cummings	352a6a0d53	Add Breaking Change Section for 6.5 ... Issue gh-16422	2025-01-16 14:30:12 -07:00