5f7155bfc7
Implement internal cache in JtiClaimValidator
...
Closes gh-17107
2025-05-14 05:21:00 -04:00
a265ac6ae7
Polish gh-17080
CodeQL Advanced / Analyze (${{ matrix.language }}) (none, actions) (push) Waiting to run
Details
CI / Build (17, ubuntu-latest) (push) Waiting to run
Details
CI / Build (17, windows-latest) (push) Waiting to run
Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run
Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run
Details
CI / Check Samples (push) Waiting to run
Details
CI / Deploy Artifacts (push) Blocked by required conditions
Details
CI / Deploy Docs (push) Blocked by required conditions
Details
CI / Deploy Schema (push) Blocked by required conditions
Details
CI / Perform Release (push) Blocked by required conditions
Details
CI / Send Notification (push) Blocked by required conditions
Details
Deploy Docs / build (push) Waiting to run
Details
2025-05-13 14:35:23 -04:00
2090f44f74
Fix DPoP jkt claim to be JWK SHA-256 thumbprint
...
Just used the nimbus JOSE library to do it, because it already has a
compliant implementation.
Closes gh-17080
Signed-off-by: David Kowis <david@kow.is>
2025-05-13 14:35:23 -04:00
e3c39f02bc
Add documentation for DPoP support
...
CodeQL Advanced / Analyze (${{ matrix.language }}) (none, actions) (push) Has been cancelled
Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled
Details
CI / Build (17, windows-latest) (push) Has been cancelled
Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled
Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled
Details
CI / Check Samples (push) Has been cancelled
Details
Deploy Docs / build (push) Has been cancelled
Details
CI / Deploy Artifacts (push) Has been cancelled
Details
CI / Deploy Docs (push) Has been cancelled
Details
CI / Deploy Schema (push) Has been cancelled
Details
CI / Perform Release (push) Has been cancelled
Details
CI / Send Notification (push) Has been cancelled
Details
Closes gh-17072
2025-05-09 16:02:14 -04:00
1a4602c8c3
Add mapping for DPoP in DefaultMapOAuth2AccessTokenResponseConverter
...
CI / Build (17, ubuntu-latest) (push) Waiting to run
Details
CI / Build (17, windows-latest) (push) Waiting to run
Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run
Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run
Details
CI / Check Samples (push) Waiting to run
Details
CI / Deploy Artifacts (push) Blocked by required conditions
Details
CI / Deploy Docs (push) Blocked by required conditions
Details
CI / Deploy Schema (push) Blocked by required conditions
Details
CI / Perform Release (push) Blocked by required conditions
Details
CI / Send Notification (push) Blocked by required conditions
Details
Deploy Docs / build (push) Waiting to run
Details
Closes gh-16806
Signed-off-by: muha <muha@kreftregisteret.no>
2025-04-30 10:09:41 -04:00
804d79d96a
Merge branch '6.4.x'
2025-04-29 14:27:47 -06:00
a4126aa27d
Merge branch '6.3.x' into 6.4.x
2025-04-29 14:27:40 -06:00
f631a0fcd5
Polish ClientRegistrationsTests
...
Simplified the assertion so that it is focused on the core
behavior being verified. This will likely also make the test
more stable when updating Spring Framework versions.
Issue gh-16860
2025-04-29 14:27:04 -06:00
fe6ddd0c8f
Merge branch '6.4.x'
2025-04-29 14:26:44 -06:00
656ad72608
Merge branch '6.3.x' into 6.4.x
...
Closes gh-17016
2025-04-29 14:22:52 -06:00
0e84f31a00
Add ClientRegistration's RestClient failed attempts information to exception message
...
Closes gh-16860
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>
2025-04-29 13:43:20 -06:00
eecd7d9559
Update Deprecated Reactor Usage
2025-04-23 12:11:08 -06:00
834370d8eb
Update Deprecated Spring Web Usage
2025-04-23 11:29:19 -06:00
19090e7873
Add request_uri in OAuth2ParameterNames
...
CI / Build (17, ubuntu-latest) (push) Waiting to run
Details
CI / Build (17, windows-latest) (push) Waiting to run
Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run
Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run
Details
CI / Check Samples (push) Waiting to run
Details
CI / Deploy Artifacts (push) Blocked by required conditions
Details
CI / Deploy Docs (push) Blocked by required conditions
Details
CI / Deploy Schema (push) Blocked by required conditions
Details
CI / Perform Release (push) Blocked by required conditions
Details
CI / Send Notification (push) Blocked by required conditions
Details
Deploy Docs / build (push) Waiting to run
Details
Closes gh-16947
2025-04-16 10:23:10 -04:00
791feee355
Prevent downgraded usage of DPoP-bound access tokens
...
Issue gh-16574
Closes gh-16937
2025-04-14 15:54:41 -04:00
1ca33cae70
Make DPoP IatClaimValidator public to allow configuring clock and clockSkew
...
Issue gh-16574
Closes gh-16921
2025-04-10 16:04:37 -04:00
47e1fc045f
Formatted
...
Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>
2025-04-09 17:09:54 -06:00
1db557e395
Replace ClientRegistrationMixinTests with StdConvertersTest
...
Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>
2025-04-09 17:09:54 -06:00
368fe2e7a0
Add missing ClientAuthenticationMethods to jackson2 converter
...
Closes gh-16825
Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>
2025-04-09 17:09:54 -06:00
9d442c13de
Mark password grant for removal
...
This commit also updates link to the document "Best Current Practice for
OAuth 2.0 Security" to point to RFC 9700.
Closes gh-16913
2025-04-09 11:15:09 -05:00
197ee38aa0
Mark deprecated response clients for removal
...
Issue gh-16913
2025-04-09 11:15:06 -05:00
d864e51ff6
Format OpaqueTokenIntrospector
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-04-08 13:56:54 -05:00
d899bc5240
Polish javadoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-04-08 13:56:54 -05:00
1fb3fc80f9
Polish gh-15819
...
Closes gh-15818
2025-04-07 10:57:49 -05:00
9674532f4d
Add support for access token in body parameter as per rfc 6750 Sec. 2.2
...
Issue gh-15818
2025-04-07 10:57:49 -05:00
03e090c2d7
Merge branch '6.4.x'
...
Closes gh-16902
2025-04-07 10:57:12 -05:00
db34de59bc
Merge branch '6.3.x' into 6.4.x
...
CI / Build (17, ubuntu-latest) (push) Has been cancelled
Details
CI / Build (17, windows-latest) (push) Has been cancelled
Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled
Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled
Details
CI / Check Samples (push) Has been cancelled
Details
Deploy Docs / build (push) Has been cancelled
Details
Trigger Dependabot Auto Merge Forward / Trigger Workflow (push) Has been cancelled
Details
CI / Deploy Artifacts (push) Has been cancelled
Details
CI / Deploy Docs (push) Has been cancelled
Details
CI / Deploy Schema (push) Has been cancelled
Details
CI / Perform Release (push) Has been cancelled
Details
CI / Send Notification (push) Has been cancelled
Details
Closes gh-16901
2025-04-07 10:55:51 -05:00
3c0fef59b5
Polish gh-16039
...
CI / Build (17, ubuntu-latest) (push) Has been cancelled
Details
CI / Build (17, windows-latest) (push) Has been cancelled
Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled
Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled
Details
CI / Check Samples (push) Has been cancelled
Details
Deploy Docs / build (push) Has been cancelled
Details
Trigger Dependabot Auto Merge Forward / Trigger Workflow (push) Has been cancelled
Details
CI / Deploy Artifacts (push) Has been cancelled
Details
CI / Deploy Docs (push) Has been cancelled
Details
CI / Deploy Schema (push) Has been cancelled
Details
CI / Perform Release (push) Has been cancelled
Details
CI / Send Notification (push) Has been cancelled
Details
Closes gh-16038
2025-04-07 10:54:09 -05:00
da94fbe431
Evaluate URI query parameter only if enabled
...
Issue gh-16038
2025-04-07 10:54:07 -05:00
2885b0f75f
Add valueOf
...
CI / Build (17, ubuntu-latest) (push) Waiting to run
Details
CI / Build (17, windows-latest) (push) Waiting to run
Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run
Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run
Details
CI / Check Samples (push) Waiting to run
Details
CI / Deploy Artifacts (push) Blocked by required conditions
Details
CI / Deploy Docs (push) Blocked by required conditions
Details
CI / Deploy Schema (push) Blocked by required conditions
Details
CI / Perform Release (push) Blocked by required conditions
Details
CI / Send Notification (push) Blocked by required conditions
Details
Deploy Docs / build (push) Waiting to run
Details
This commit adds a static factory for returning a constant
ClientAuthenticationMethod or creating a new one when there
is no match.
Issue gh-16825
2025-04-02 11:16:30 -06:00
7bca17cb5a
Polish
...
CI / Build (17, ubuntu-latest) (push) Waiting to run
Details
CI / Build (17, windows-latest) (push) Waiting to run
Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run
Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run
Details
CI / Check Samples (push) Waiting to run
Details
CI / Deploy Artifacts (push) Blocked by required conditions
Details
CI / Deploy Docs (push) Blocked by required conditions
Details
CI / Deploy Schema (push) Blocked by required conditions
Details
CI / Perform Release (push) Blocked by required conditions
Details
CI / Send Notification (push) Blocked by required conditions
Details
Deploy Docs / build (push) Waiting to run
Details
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-03-26 17:02:06 -06:00
99345537d6
Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter
...
Issue gh-16417
2025-03-26 16:38:39 -06:00
860f130bc4
Add additional validation when refreshing ID tokens
...
Issue gh-16589
2025-03-26 15:34:17 -05:00
5f98ce5ecc
Polish gh-16589
2025-03-26 15:34:17 -05:00
de07b1108f
Use PathPatternRequestMatcher in Web Components
...
This commit changes filters and resolvers that were using AntPathRequestMatcher as their
default to using PathPatternRequestMatcher.
Issue gh-16632
2025-03-26 13:28:58 -06:00
56e757a2a1
Provide Authentication to AuthenticationExceptions
...
Deploy Docs / build (push) Has been cancelled
Details
Execute Gradle Wrapper Upgrade / Execution (push) Has been cancelled
Details
Update Antora UI Spring / Update on Supported Branches (5.8.x) (push) Has been cancelled
Details
Update Antora UI Spring / Update on Supported Branches (6.2.x) (push) Has been cancelled
Details
Update Antora UI Spring / Update on Supported Branches (6.3.x) (push) Has been cancelled
Details
Update Antora UI Spring / Update on Supported Branches (main) (push) Has been cancelled
Details
Update Antora UI Spring / Update on docs-build (push) Has been cancelled
Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled
Details
CI / Build (17, windows-latest) (push) Has been cancelled
Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled
Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled
Details
CI / Check Samples (push) Has been cancelled
Details
Clean build artifacts / main (push) Has been cancelled
Details
CI / Deploy Artifacts (push) Has been cancelled
Details
CI / Deploy Docs (push) Has been cancelled
Details
CI / Deploy Schema (push) Has been cancelled
Details
CI / Perform Release (push) Has been cancelled
Details
CI / Send Notification (push) Has been cancelled
Details
Issue gh-16444
2025-03-21 21:54:32 -06:00
3ebcbd4375
Merge branch '6.4.x'
...
Closes gh-16788
Closes gh-16789
Closes gh-16790
Closes gh-16791
Closes gh-16792
2025-03-20 14:47:07 -05:00
96cfbd1e6c
Merge branch '6.3.x' into 6.4.x
...
CI / Build (17, ubuntu-latest) (push) Waiting to run
Details
CI / Build (17, windows-latest) (push) Waiting to run
Details
CI / Test Against Snapshots (17, 17) (push) Waiting to run
Details
CI / Test Against Snapshots (21-ea, 21) (push) Waiting to run
Details
CI / Check Samples (push) Waiting to run
Details
CI / Deploy Artifacts (push) Blocked by required conditions
Details
CI / Deploy Docs (push) Blocked by required conditions
Details
CI / Deploy Schema (push) Blocked by required conditions
Details
CI / Perform Release (push) Blocked by required conditions
Details
CI / Send Notification (push) Blocked by required conditions
Details
Deploy Docs / build (push) Waiting to run
Details
Trigger Dependabot Auto Merge Forward / Trigger Workflow (push) Waiting to run
Details
Closes gh-16782
Closes gh-16783
Closes gh-16784
Closes gh-16785
Closes gh-16786
2025-03-20 14:46:18 -05:00
a53ca7c3d0
Update ServerOAuth2AuthorizedClientExchangeFilterFunction javadoc
...
Closes gh-16555
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-03-20 14:38:09 -05:00
cfe70a5fc7
Restore authorizedClientParametersMapper Assertion
...
Issue gh-16726
2025-03-19 18:13:54 -06:00
6c24a1e717
Improve JdbcOAuth2AuthorizedClientService saveAuthorizedClient
...
Closes gh-16726
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-03-19 18:13:54 -06:00
5bb5d0f6be
Polish gh-16589
2025-03-18 18:07:56 -05:00
fc1469ad5e
Ensure ID Token is updated after refresh token
...
Signed-off-by: Hao <kyrieeeee2@gmail.com>
2025-03-18 18:07:56 -05:00
e6223dede3
Merge branch '6.4.x'
...
- adb303e
2025-03-17 14:34:18 -05:00
05116eabbd
Merge branch '6.3.x' into 6.4.x
...
- adb303e
2025-03-17 14:18:49 -05:00
adb303e152
Add testRuntimeOnly junit-platform-launcher
...
Closes gh-16755
2025-03-17 14:16:44 -05:00
0938ca01a4
Add support for automatic context-propagation with Micrometer
...
Closes gh-16665
2025-03-13 15:29:08 -05:00
401e237082
Introduce JwtAudienceValidator
...
Signed-off-by: Vedran Pavic <vedran@vedranpavic.com>
2025-02-28 12:38:18 -07:00
7df85a2ed9
Polish NimbusJwtDecoder
2025-02-27 12:40:01 -07:00
ab43a660b9
Add RFC 9068 Support
...
Closes gh-13185
2025-02-27 12:40:01 -07:00
Joe Grandja
David Kowis
hammadirshad
Josh Cummings
Evgeniy Cheban
Risto Virtanen
Steve Riesenberg
Tran Ngoc Nhan
Jonah Klöckner
Max Batischev
Hao
Rob Winch
Vedran Pavic