Commit Graph

698 Commits

Author SHA1 Message Date
Steve Riesenberg e3c19ba86c Add RestClient interceptor
Closes gh-13588
2024-08-16 17:15:18 -05:00
Robert Danczak 12a9f9240c Fix: Adjusted code formatting to remaining code examples. 2024-08-12 12:59:36 -03:00
Josh Cummings e40c98e6d7 Deprecate PrePostTemplateDefaults
Since there is nothing specific to configuring pre/post
annotations, there is no need for the extra class.

If a need like this does arise in the future,
either AnnotationTemplateExpressionDefaults can be sub-
classed, or it can have introduced a Map field holding
custom properties.

Issue gh-15286
2024-08-10 11:46:51 -06:00
Josh Cummings f4d9d0d54f Document @AuthenticationPrincipal meta-annotations
Issue gh-15286
2024-08-10 11:46:51 -06:00
Josh Cummings 96682a1d5c
Document OpenSAML 4 vs OpenSAML 5 Support
Closes gh-11658
2024-08-06 18:14:12 -06:00
Josh Cummings 1da383b360
Add OpenSAML 5 Support
Issue gh-11658
2024-08-06 18:14:11 -06:00
Josh Cummings 1be596bb2f
Use OpenSAML API for registration
Issue gh-11658
2024-08-06 18:14:11 -06:00
Josh Cummings 51fc05630d
Use OpenSAML API for web.authentication.logout
Issue gh-11658
2024-08-06 18:14:10 -06:00
Josh Cummings ef35c4a64a
Merge branch '6.3.x' 2024-07-29 15:10:50 -06:00
Josh Cummings 97a49e18b9
Merge branch '6.2.x' into 6.3.x 2024-07-29 15:10:32 -06:00
Josh Cummings e51507e32d Polish Inline Code Formatting 2024-07-29 14:08:01 -07:00
Junhyunny bfee6927c2 Correct Explanation for HttpSessionCsrfTokenRepository 2024-07-29 14:08:01 -07:00
Josh Cummings e0be46ea84
Merge branch '6.3.x' 2024-07-29 13:40:27 -06:00
Taha Körkem da65830569
Use Correct Meta-Annotation in Kotlin Sample 2024-07-29 13:39:34 -06:00
Marcus Hert Da Coregio 8231b8a03b Merge branch '6.3.x' 2024-07-29 14:56:16 -03:00
Marcus Hert Da Coregio c1b3b329af Merge branch '6.2.x' into 6.3.x 2024-07-29 14:56:09 -03:00
baezzys 3d4bcf1b44 fix: Restrict automatic CORS configuration to UrlBasedCorsConfigurationSource
- Update CORS configuration logic to automatically enable .cors() only if a UrlBasedCorsConfigurationSource bean is present.
- Modify applyCorsIfAvailable method to check for UrlBasedCorsConfigurationSource instances.
2024-07-29 14:55:55 -03:00
Josh Cummings 9d8888c5f0 Use AssertingPartyMetadata
Issue gh-15394
2024-07-19 18:48:23 -07:00
Josh Cummings e6dfb63bdf Add OpenSamlAssertingPartyMetadataRepository
Closes gh-12116
Closes gh-15395
2024-07-19 18:48:23 -07:00
Josh Cummings 796e4d6b6c
Add query parameter support for authn requests
Closes gh-15017
2024-07-13 23:57:57 -06:00
Rob Winch 5bd4db1a13 Use javadoc macro
Closes gh-15386
2024-07-09 22:35:01 -05:00
Antoine Rey f184d13096 Update the OAuth2 jwt and opaque resource server documentation with the Lambda DSL
The OAuth2ResourceServerConfigurer::opaqueToken() and ::jwt() methods are deprecated since Spring Security 6.1
2024-07-09 07:25:13 -07:00
Josh Cummings 290cee238d
Merge branch '6.2.x' into 6.3.x
Closes gh-15380
2024-07-08 20:52:46 -06:00
Seungrae f4cbaaa2dd
Fix typos and formatting in documentation
Closes gh-15353
2024-07-08 20:52:06 -06:00
Seungrae 148e7843bf Fix typos and formatting in documentation 2024-07-08 19:51:06 -07:00
Josh Cummings 7b39800606
Add CachingRelyingPartyRegistrationRepository
Closes gh-15341
2024-07-01 19:43:09 -06:00
Dumitru Boldureanu 48826201b1 Update architecture.adoc
The list of filters is printed at DEBUG level on the application startup and not INFO level, see DefaultSecurityFilterChain
2024-07-01 15:19:50 -06:00
Stefan Ganzer ceb278c908 Update events.adoc
Changes GenericAuthenticationFailureEvent to AbstractAuthenticationFailureEvent

The class GenericAuthenticationFailureEvent does not exist.
2024-07-01 15:19:00 -06:00
Stefan Ganzer e7212b37f7 Update events.adoc
Changes type to DefaultAuthenticationEventPublisher

Only DefaultAuthenticationEventPublisher has the method
setDefaultAuthenticationFailureEvent, but not the interface
AuthenticationEventPublisher.
2024-07-01 15:19:00 -06:00
Marcono1234 a9aefafb76 Fix malformed list in "Using Method Parameters" documentation 2024-07-01 15:18:17 -06:00
Marcus Hert Da Coregio 8572764583 Merge branch '6.3.x'
Closes gh-15322
2024-06-28 15:34:28 -03:00
Marcus Hert Da Coregio 113e72f18e Merge branch '6.2.x' into 6.3.x
Closes gh-15321
2024-06-28 15:34:14 -03:00
Marcus Hert Da Coregio 462ce1ee91 Merge branch '5.8.x' into 6.2.x
Closes gh-15320
2024-06-28 15:33:59 -03:00
Marcus Hert Da Coregio 779030b6cd Document the role of CredentialsContainer
Closes gh-15319
2024-06-28 15:33:34 -03:00
Josh Cummings d5328df82d
Merge branch '6.3.x' 2024-06-24 13:02:15 -06:00
Josh Cummings 345cd9976d
Merge branch '6.2.x' into 6.3.x
Closes gh-15297
2024-06-24 13:02:05 -06:00
Josh Cummings c4f70bee4b
Fix Broken Link
Closes gh-15288
2024-06-24 13:01:49 -06:00
Steve Riesenberg 60a6b3845d
Merge branch '6.3.x'
Closes gh-15246
2024-06-13 16:04:30 -05:00
Steve Riesenberg 5c0f1730d6
Merge branch '6.2.x' into 6.3.x
Closes gh-15245
2024-06-13 16:02:51 -05:00
Steve Riesenberg e41771491b
Merge branch '5.8.x' into 6.2.x
Closes gh-15244
2024-06-13 16:02:05 -05:00
Steve Riesenberg f622d8e2e2
Polish gh-15235 2024-06-13 16:00:03 -05:00
Harsh4902 92cab2b678
Add 'Required Dependencies' section in ldap.adoc file
Closes gh-14699
2024-06-13 16:00:02 -05:00
Junhyunny 68aef2056e Fix wrong explanation for @PostAuthorize annotation 2024-06-12 11:15:51 -03:00
Josh Cummings aa9e1b5088
Merge branch '6.3.x' 2024-06-06 17:30:15 -06:00
Josh Cummings c3f766f3b3
Update RoleHierarchy Documentation
Closes gh-15208
2024-06-06 17:25:28 -06:00
Josh Cummings 24e3bb11bc
Merge branch '6.3.x' 2024-06-06 13:46:08 -06:00
Josh Cummings bce8035bb6
Merge branch '6.2.x' into 6.3.x
Closes gh-15212
2024-06-06 13:45:56 -06:00
Josh Cummings 0532659245
Fix Typo in Oidc Logout Docs
Closes gh-15198
2024-06-06 13:45:35 -06:00
Blagoja Stamatovski 63f48167bd Add Kotlin support to PreFilter and PostFilter annotations
Closes gh-15093
2024-05-31 12:32:28 -06:00
Stian Jørgensrud b5e9c4cb9f Fix wrong Kotlin syntax 2024-05-30 17:24:54 -05:00
Stian Jørgensrud 3cd9b77273 Remove nullable from Kotlin example
Use `lateinit` instead of allowing NullPointerExceptions.
2024-05-30 17:24:54 -05:00
Steve Riesenberg ee9f5a2d5e
Improve CSRF example for single-page apps
Closes gh-15105
2024-05-29 11:54:08 -05:00
Caio Henrique 67853d585e docs: add correction to java example in multitenanci.adoc 2024-05-24 16:59:13 -06:00
Steve Riesenberg 9b1e9c5db9
Polish and sync java and kotlin configuration docs
Issue gh-15029
2024-05-24 16:30:59 -05:00
Josh Cummings 133c87a643
Merge branch '6.3.x' 2024-05-24 15:06:47 -06:00
Josh Cummings 1c6726d20a
Merge branch '6.2.x' into 6.3.x
Closes gh-15167
2024-05-24 15:06:34 -06:00
Josh Cummings 797550fee7
Merge branch '5.8.x' into 6.2.x
Closes gh-15166
2024-05-24 15:04:04 -06:00
Josh Cummings e7ea4091a0
Migrate SampleLDIF to UnboundID
Closes gh-15089
2024-05-24 15:03:53 -06:00
Steve Riesenberg 5e2209aeef
Fix xref link
Issue gh-15029
2024-05-24 15:11:47 -05:00
Steve Riesenberg 2482e8e446
Polish gh-15029 2024-05-24 14:58:45 -05:00
Abimael Sergio 046a1fc811
Update description of securityMatcher and multiple filter chains
Closes gh-14419
2024-05-24 12:55:41 -05:00
Lukas Dohmen 3af85a562a GH-14688 Use inter-document xref to fix Username and password link
GH-14688 Use inter-document xref to fix username and password link
2024-05-24 13:52:10 -03:00
Marcus Hert Da Coregio f6ea99d8a3 Prepare for Spring Security 6.4
Closes gh-15155
2024-05-24 11:41:28 -03:00
Marcus Hert Da Coregio da1869c271 Merge branch '6.2.x'
Closes gh-15151
2024-05-23 14:17:20 -03:00
Marcus Hert Da Coregio 58cbc47376 Merge branch '5.8.x' into 6.2.x
Closes gh-15150
2024-05-23 14:17:09 -03:00
Caio Henrique 896dd93313 fix: add correction to java example in multitenancy.adoc
Closes gh-15146
2024-05-23 14:16:59 -03:00
Marcus Hert Da Coregio 0acf6cca6e Merge branch '6.2.x'
Closes gh-15149
2024-05-23 14:05:06 -03:00
Marcus Hert Da Coregio 47ad405063 Merge branch '5.8.x' into 6.2.x
Closes gh-15148
2024-05-23 14:04:35 -03:00
Marcus Hert Da Coregio c7b739eb3f Fix broken link to jaspan article
Closes gh-14358
2024-05-23 14:04:10 -03:00
Alexander Münch df59516b18 Fix Kotlin example in authorize-http-requests.adoc
- Consistency: Replaced mix of tabs/spaces with spaces indentation
2024-05-23 13:57:32 -03:00
Marcus Hert Da Coregio 9744cc44d2 Merge branch '6.2.x'
Closes gh-15144
2024-05-23 08:17:26 -03:00
douxf bd72741879 Fix wrong class on documentation
Closes gh-15045
2024-05-23 08:15:56 -03:00
vvaadd 0a6e50d892 Minor code fix 2024-05-15 13:36:54 -03:00
Patrick Schmidt 1ebd663253 doc: added hint to declare GrantedAuthorityDefaults as infrastructure bean
Closes gh-14779
2024-05-13 11:19:41 -03:00
Marcus Hert Da Coregio 08f11f06ab Revert unnecessary commits from main
Issue gh-15016
2024-05-08 13:49:18 -03:00
Marcus Hert Da Coregio a48b17d016 Merge branch '6.2.x'
Closes gh-14996
2024-04-30 08:59:19 -03:00
Marcus Hert Da Coregio d678fce67f Merge branch '6.1.x' into 6.2.x
Closes gh-14995
2024-04-30 08:59:11 -03:00
Marcus Hert Da Coregio 93aa48f863 Merge branch '5.8.x' into 6.1.x
Closes gh-14994
2024-04-30 08:58:59 -03:00
Angel Gruevski ce995a0178 Correct a mistake in the documentation related to RequestCacheAwareFilter
Corrected a mistake in the documentation for the Spring Architecture where it was mentioned that RequestCacheAwareFilter is used to save the HttpServletRequest instead of the ExceptionTranslationFilter

Closes gh-14855
2024-04-30 08:58:25 -03:00
madorb 1ae99be1cf Clarify Package Import
Provide more explict instructions regarding the necessary import
to make the Kotlin DSL work. For some reason it took me 10 minutes
to figure this out based on the existing doc.
2024-04-30 08:48:57 -03:00
Steve Riesenberg 2dd908dff8
Document additional client authenticating methods
Issue gh-11440
Closes gh-14982
2024-04-29 15:07:46 -05:00
Steve Riesenberg 2598bf8c37
Polish gh-14859 2024-04-29 15:07:45 -05:00
Crain-32 d0adb2aa70
Simplify Disabling Encoding Client ID and Secret
Closes gh-11440
2024-04-29 14:46:12 -05:00
Josh Cummings af4a6978ca
Merge branch '6.1.x' into 6.2.x
Closes gh-14972
2024-04-26 15:38:10 -06:00
Josh Cummings 2477c22674
Fix Role Name Typo
Closes gh-14965
2024-04-26 15:37:51 -06:00
Josh Cummings 8893f60157
Fix http Link
Issue gh-14944
2024-04-23 08:07:45 -06:00
Josh Cummings 74fb626f74
Revisit Saml2Logout Docs
Issue gh-14944
2024-04-22 11:12:45 -06:00
MrJovanovic13 1657296bb7 Replace "Spring Boot 2.x" with "Spring Boot"
Closes gh-14917
2024-04-18 16:01:54 -05:00
Josh Cummings a4dbf458ab
Add relying-party-registrations#id
Closes gh-14487
2024-04-18 12:56:56 -06:00
Josh Cummings 4c44de7db2
Update What's New in 6.3
Closes gh-14918
2024-04-17 10:13:49 -06:00
Marcus Hert Da Coregio 2fbbcc4bd0 Polish Method Authorization Denied Handling
- Renamed @AuthorizationDeniedHandler to @HandleAuthorizationDenied
- Merged the post processor interface into MethodAuthorizationDeniedHandler , it now has two methods handleDeniedInvocation and handleDeniedInvocationResult
- @HandleAuthorizationDenied now handles AuthorizationDeniedException thrown from the method

Issue gh-14601
2024-04-12 15:55:25 -03:00
Josh Cummings 2d24e09665
Polish link about SpEL beans 2024-04-10 16:38:10 -06:00
Josh Cummings 50b85aea0d Handle SpEL AuthorizationDeniedExceptions
Closes gh-14600
2024-04-10 15:36:23 -07:00
Marcus Hert Da Coregio 8d914ef145 Add @AuthorizationDeniedHandler for Method Authorization Denied Handling
Issue gh-14601
2024-04-08 14:42:13 -03:00
Josh Cummings 6f07d63938
Support SpEL Returning AuthorizationDecision
Closes gh-14598
2024-04-04 11:32:00 -06:00
Josh Cummings 0a9c482f62
Revert "Support SpEL Returning AuthorizationDecision"
This reverts commit 77f2977c55.
2024-04-04 11:31:45 -06:00
Josh Cummings 77f2977c55 Support SpEL Returning AuthorizationDecision
Closes gh-14599
2024-04-04 09:52:15 -07:00
Marcus Hert Da Coregio d85857f905 Add Authorization Denied Handlers for Method Security
Closes gh-14601
2024-04-03 09:25:12 -03:00
Steve Riesenberg 313619fec3
Polish OAuth2 Client docs
Issue gh-14698
2024-03-26 16:00:29 -05:00
Steve Riesenberg f3c745c65b
Add reference documentation for Token Exchange
Closes gh-14698
2024-03-26 16:00:29 -05:00