e3c19ba86c
Add RestClient interceptor
...
Closes gh-13588
2024-08-16 17:15:18 -05:00
12a9f9240c
Fix: Adjusted code formatting to remaining code examples.
2024-08-12 12:59:36 -03:00
e40c98e6d7
Deprecate PrePostTemplateDefaults
...
Since there is nothing specific to configuring pre/post
annotations, there is no need for the extra class.
If a need like this does arise in the future,
either AnnotationTemplateExpressionDefaults can be sub-
classed, or it can have introduced a Map field holding
custom properties.
Issue gh-15286
2024-08-10 11:46:51 -06:00
f4d9d0d54f
Document @AuthenticationPrincipal meta-annotations
...
Issue gh-15286
2024-08-10 11:46:51 -06:00
96682a1d5c
Document OpenSAML 4 vs OpenSAML 5 Support
...
Closes gh-11658
2024-08-06 18:14:12 -06:00
1da383b360
Add OpenSAML 5 Support
...
Issue gh-11658
2024-08-06 18:14:11 -06:00
1be596bb2f
Use OpenSAML API for registration
...
Issue gh-11658
2024-08-06 18:14:11 -06:00
51fc05630d
Use OpenSAML API for web.authentication.logout
...
Issue gh-11658
2024-08-06 18:14:10 -06:00
ef35c4a64a
Merge branch '6.3.x'
2024-07-29 15:10:50 -06:00
97a49e18b9
Merge branch '6.2.x' into 6.3.x
2024-07-29 15:10:32 -06:00
e51507e32d
Polish Inline Code Formatting
2024-07-29 14:08:01 -07:00
bfee6927c2
Correct Explanation for HttpSessionCsrfTokenRepository
2024-07-29 14:08:01 -07:00
e0be46ea84
Merge branch '6.3.x'
2024-07-29 13:40:27 -06:00
da65830569
Use Correct Meta-Annotation in Kotlin Sample
2024-07-29 13:39:34 -06:00
8231b8a03b
Merge branch '6.3.x'
2024-07-29 14:56:16 -03:00
c1b3b329af
Merge branch '6.2.x' into 6.3.x
2024-07-29 14:56:09 -03:00
3d4bcf1b44
fix: Restrict automatic CORS configuration to UrlBasedCorsConfigurationSource
...
- Update CORS configuration logic to automatically enable .cors() only if a UrlBasedCorsConfigurationSource bean is present.
- Modify applyCorsIfAvailable method to check for UrlBasedCorsConfigurationSource instances.
2024-07-29 14:55:55 -03:00
9d8888c5f0
Use AssertingPartyMetadata
...
Issue gh-15394
2024-07-19 18:48:23 -07:00
e6dfb63bdf
Add OpenSamlAssertingPartyMetadataRepository
...
Closes gh-12116
Closes gh-15395
2024-07-19 18:48:23 -07:00
796e4d6b6c
Add query parameter support for authn requests
...
Closes gh-15017
2024-07-13 23:57:57 -06:00
5bd4db1a13
Use javadoc macro
...
Closes gh-15386
2024-07-09 22:35:01 -05:00
f184d13096
Update the OAuth2 jwt and opaque resource server documentation with the Lambda DSL
...
The OAuth2ResourceServerConfigurer::opaqueToken() and ::jwt() methods are deprecated since Spring Security 6.1
2024-07-09 07:25:13 -07:00
290cee238d
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15380
2024-07-08 20:52:46 -06:00
f4cbaaa2dd
Fix typos and formatting in documentation
...
Closes gh-15353
2024-07-08 20:52:06 -06:00
148e7843bf
Fix typos and formatting in documentation
2024-07-08 19:51:06 -07:00
7b39800606
Add CachingRelyingPartyRegistrationRepository
...
Closes gh-15341
2024-07-01 19:43:09 -06:00
f532807836
Merge branch '6.3.x'
2024-07-01 17:20:52 -06:00
4975254124
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15340
2024-07-01 17:19:51 -06:00
99cda31579
Update prerequisites documentation
...
Raises the minimum version of the Java runtime for Spring
Security from 8 to 17
Closes gh-15323
2024-07-01 17:19:22 -06:00
48826201b1
Update architecture.adoc
...
The list of filters is printed at DEBUG level on the application startup and not INFO level, see DefaultSecurityFilterChain
2024-07-01 15:19:50 -06:00
ceb278c908
Update events.adoc
...
Changes GenericAuthenticationFailureEvent to AbstractAuthenticationFailureEvent
The class GenericAuthenticationFailureEvent does not exist.
2024-07-01 15:19:00 -06:00
e7212b37f7
Update events.adoc
...
Changes type to DefaultAuthenticationEventPublisher
Only DefaultAuthenticationEventPublisher has the method
setDefaultAuthenticationFailureEvent, but not the interface
AuthenticationEventPublisher.
2024-07-01 15:19:00 -06:00
a9aefafb76
Fix malformed list in "Using Method Parameters" documentation
2024-07-01 15:18:17 -06:00
8572764583
Merge branch '6.3.x'
...
Closes gh-15322
2024-06-28 15:34:28 -03:00
113e72f18e
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15321
2024-06-28 15:34:14 -03:00
462ce1ee91
Merge branch '5.8.x' into 6.2.x
...
Closes gh-15320
2024-06-28 15:33:59 -03:00
779030b6cd
Document the role of CredentialsContainer
...
Closes gh-15319
2024-06-28 15:33:34 -03:00
dd7472272a
Merge branch '6.3.x'
...
Closes gh-15306
2024-06-26 14:04:27 -03:00
e16ce57fbb
Use AuthenticationFailureHandler instead of @ControllerAdvice
...
Closes gh-15305
2024-06-26 14:03:44 -03:00
d5328df82d
Merge branch '6.3.x'
2024-06-24 13:02:15 -06:00
345cd9976d
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15297
2024-06-24 13:02:05 -06:00
c4f70bee4b
Fix Broken Link
...
Closes gh-15288
2024-06-24 13:01:49 -06:00
8fd9997a47
Remove outdated note
...
Closes gh-15263
2024-06-17 08:12:54 -03:00
60a6b3845d
Merge branch '6.3.x'
...
Closes gh-15246
2024-06-13 16:04:30 -05:00
5c0f1730d6
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15245
2024-06-13 16:02:51 -05:00
e41771491b
Merge branch '5.8.x' into 6.2.x
...
Closes gh-15244
2024-06-13 16:02:05 -05:00
f622d8e2e2
Polish gh-15235
2024-06-13 16:00:03 -05:00
92cab2b678
Add 'Required Dependencies' section in ldap.adoc file
...
Closes gh-14699
2024-06-13 16:00:02 -05:00
68aef2056e
Fix wrong explanation for @PostAuthorize annotation
2024-06-12 11:15:51 -03:00
725e35977b
Removed extra import word
2024-06-10 15:27:19 -06:00
5bffa4e454
Fix import for example
2024-06-10 15:27:19 -06:00
7c43fc111f
Support RoleHierarchy Bean in authorizeHttpRequests Kotlin DSL
...
Closes gh-15136
2024-06-10 15:41:28 -03:00
aa9e1b5088
Merge branch '6.3.x'
2024-06-06 17:30:15 -06:00
c3f766f3b3
Update RoleHierarchy Documentation
...
Closes gh-15208
2024-06-06 17:25:28 -06:00
24e3bb11bc
Merge branch '6.3.x'
2024-06-06 13:46:08 -06:00
bce8035bb6
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15212
2024-06-06 13:45:56 -06:00
0532659245
Fix Typo in Oidc Logout Docs
...
Closes gh-15198
2024-06-06 13:45:35 -06:00
0cbec13f87
Merge branch '6.3.x'
...
Closes gh-15206
2024-06-05 13:59:47 -03:00
e013d96758
Clarify the behavior of Concurrent Session Management when an IdP is involved
...
Closes gh-15071
2024-06-05 13:59:24 -03:00
63f48167bd
Add Kotlin support to PreFilter and PostFilter annotations
...
Closes gh-15093
2024-05-31 12:32:28 -06:00
b5e9c4cb9f
Fix wrong Kotlin syntax
2024-05-30 17:24:54 -05:00
3cd9b77273
Remove nullable from Kotlin example
...
Use `lateinit` instead of allowing NullPointerExceptions.
2024-05-30 17:24:54 -05:00
ee9f5a2d5e
Improve CSRF example for single-page apps
...
Closes gh-15105
2024-05-29 11:54:08 -05:00
67853d585e
docs: add correction to java example in multitenanci.adoc
2024-05-24 16:59:13 -06:00
9b1e9c5db9
Polish and sync java and kotlin configuration docs
...
Issue gh-15029
2024-05-24 16:30:59 -05:00
133c87a643
Merge branch '6.3.x'
2024-05-24 15:06:47 -06:00
1c6726d20a
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15167
2024-05-24 15:06:34 -06:00
797550fee7
Merge branch '5.8.x' into 6.2.x
...
Closes gh-15166
2024-05-24 15:04:04 -06:00
e7ea4091a0
Migrate SampleLDIF to UnboundID
...
Closes gh-15089
2024-05-24 15:03:53 -06:00
5e2209aeef
Fix xref link
...
Issue gh-15029
2024-05-24 15:11:47 -05:00
2482e8e446
Polish gh-15029
2024-05-24 14:58:45 -05:00
046a1fc811
Update description of securityMatcher and multiple filter chains
...
Closes gh-14419
2024-05-24 12:55:41 -05:00
3af85a562a
GH-14688 Use inter-document xref to fix Username and password link
...
GH-14688 Use inter-document xref to fix username and password link
2024-05-24 13:52:10 -03:00
1d3cb3f28e
Support RoleHierarchy in AclAuthorizationStrategyImpl
...
Closes gh-4186
2024-05-24 13:49:48 -03:00
f6ea99d8a3
Prepare for Spring Security 6.4
...
Closes gh-15155
2024-05-24 11:41:28 -03:00
da1869c271
Merge branch '6.2.x'
...
Closes gh-15151
2024-05-23 14:17:20 -03:00
58cbc47376
Merge branch '5.8.x' into 6.2.x
...
Closes gh-15150
2024-05-23 14:17:09 -03:00
896dd93313
fix: add correction to java example in multitenancy.adoc
...
Closes gh-15146
2024-05-23 14:16:59 -03:00
0acf6cca6e
Merge branch '6.2.x'
...
Closes gh-15149
2024-05-23 14:05:06 -03:00
47ad405063
Merge branch '5.8.x' into 6.2.x
...
Closes gh-15148
2024-05-23 14:04:35 -03:00
c7b739eb3f
Fix broken link to jaspan article
...
Closes gh-14358
2024-05-23 14:04:10 -03:00
df59516b18
Fix Kotlin example in authorize-http-requests.adoc
...
- Consistency: Replaced mix of tabs/spaces with spaces indentation
2024-05-23 13:57:32 -03:00
9744cc44d2
Merge branch '6.2.x'
...
Closes gh-15144
2024-05-23 08:17:26 -03:00
bd72741879
Fix wrong class on documentation
...
Closes gh-15045
2024-05-23 08:15:56 -03:00
5d6ba3015a
Merge branch '6.2.x'
...
Closes gh-15113
2024-05-20 11:11:38 -03:00
364f5b9829
Add OIDC Logout section to navbar
...
Closes gh-15112
2024-05-20 11:11:21 -03:00
0a6e50d892
Minor code fix
2024-05-15 13:36:54 -03:00
76ca0ee52f
Merge branch '6.2.x'
...
Closes gh-15065
2024-05-13 11:23:34 -03:00
963cdc7b2a
Merge branch '6.1.x' into 6.2.x
...
Closes gh-15063
2024-05-13 11:22:19 -03:00
f5b9dc3282
Merge branch '5.8.x' into 6.1.x
...
Closes gh-15062
2024-05-13 11:22:09 -03:00
1ebd663253
doc: added hint to declare GrantedAuthorityDefaults as infrastructure bean
...
Closes gh-14779
2024-05-13 11:19:41 -03:00
08f11f06ab
Revert unnecessary commits from main
...
Issue gh-15016
2024-05-08 13:49:18 -03:00
a48b17d016
Merge branch '6.2.x'
...
Closes gh-14996
2024-04-30 08:59:19 -03:00
d678fce67f
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14995
2024-04-30 08:59:11 -03:00
93aa48f863
Merge branch '5.8.x' into 6.1.x
...
Closes gh-14994
2024-04-30 08:58:59 -03:00
ce995a0178
Correct a mistake in the documentation related to RequestCacheAwareFilter
...
Corrected a mistake in the documentation for the Spring Architecture where it was mentioned that RequestCacheAwareFilter is used to save the HttpServletRequest instead of the ExceptionTranslationFilter
Closes gh-14855
2024-04-30 08:58:25 -03:00
1ae99be1cf
Clarify Package Import
...
Provide more explict instructions regarding the necessary import
to make the Kotlin DSL work. For some reason it took me 10 minutes
to figure this out based on the existing doc.
2024-04-30 08:48:57 -03:00
d8fe5e7b88
Update What's New for 6.3
2024-04-29 15:26:46 -05:00
2dd908dff8
Document additional client authenticating methods
...
Issue gh-11440
Closes gh-14982
2024-04-29 15:07:46 -05:00
2598bf8c37
Polish gh-14859
2024-04-29 15:07:45 -05:00
d0adb2aa70
Simplify Disabling Encoding Client ID and Secret
...
Closes gh-11440
2024-04-29 14:46:12 -05:00
af4a6978ca
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14972
2024-04-26 15:38:10 -06:00
2477c22674
Fix Role Name Typo
...
Closes gh-14965
2024-04-26 15:37:51 -06:00
8893f60157
Fix http Link
...
Issue gh-14944
2024-04-23 08:07:45 -06:00
74fb626f74
Revisit Saml2Logout Docs
...
Issue gh-14944
2024-04-22 11:12:45 -06:00
8397dfe3b2
Polish whats-new.adoc
2024-04-18 16:51:46 -05:00
5f6df21ed4
Update What's New for 6.3
2024-04-18 16:51:46 -05:00
1657296bb7
Replace "Spring Boot 2.x" with "Spring Boot"
...
Closes gh-14917
2024-04-18 16:01:54 -05:00
a4dbf458ab
Add relying-party-registrations#id
...
Closes gh-14487
2024-04-18 12:56:56 -06:00
4c44de7db2
Update What's New in 6.3
...
Closes gh-14918
2024-04-17 10:13:49 -06:00
2fbbcc4bd0
Polish Method Authorization Denied Handling
...
- Renamed @AuthorizationDeniedHandler to @HandleAuthorizationDenied
- Merged the post processor interface into MethodAuthorizationDeniedHandler , it now has two methods handleDeniedInvocation and handleDeniedInvocationResult
- @HandleAuthorizationDenied now handles AuthorizationDeniedException thrown from the method
Issue gh-14601
2024-04-12 15:55:25 -03:00
b5c9ba6c1c
Update Documentation about Kotlin Coroutine Support
...
Closes gh-14646
2024-04-12 11:29:38 -05:00
2d24e09665
Polish link about SpEL beans
2024-04-10 16:38:10 -06:00
50b85aea0d
Handle SpEL AuthorizationDeniedExceptions
...
Closes gh-14600
2024-04-10 15:36:23 -07:00
8d914ef145
Add @AuthorizationDeniedHandler for Method Authorization Denied Handling
...
Issue gh-14601
2024-04-08 14:42:13 -03:00
6f07d63938
Support SpEL Returning AuthorizationDecision
...
Closes gh-14598
2024-04-04 11:32:00 -06:00
0a9c482f62
Revert "Support SpEL Returning AuthorizationDecision"
...
This reverts commit 77f2977c55
2024-04-04 11:31:45 -06:00
77f2977c55
Support SpEL Returning AuthorizationDecision
...
Closes gh-14599
2024-04-04 09:52:15 -07:00
d85857f905
Add Authorization Denied Handlers for Method Security
...
Closes gh-14601
2024-04-03 09:25:12 -03:00
7d66525e23
Add Compromised Password Checker
...
Closes gh-7395
2024-04-01 09:48:07 -03:00
89175dfed0
making sure it is in sync with servlet page
2024-03-29 11:16:08 -05:00
313619fec3
Polish OAuth2 Client docs
...
Issue gh-14698
2024-03-26 16:00:29 -05:00
f3c745c65b
Add reference documentation for Token Exchange
...
Closes gh-14698
2024-03-26 16:00:29 -05:00
be340a0085
Polish servlet OAuth2 docs landing page
...
Issue gh-14758
2024-03-26 16:00:28 -05:00
22f84cf3f3
Update reactive OAuth2 docs landing page
...
Closes gh-14758
2024-03-26 16:00:28 -05:00
b3e1b4e5ba
Merge branch '6.2.x'
...
Closes gh-14806
2024-03-26 12:19:33 -05:00
6f8cc920cd
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14805
2024-03-26 12:18:42 -05:00
80845d0c9a
Fix NPE in Kotlin docs example
...
Closes gh-14634
2024-03-26 12:18:06 -05:00
ba575e8564
Add tests for invalid/missing token
...
Issue gh-14634
2024-03-26 12:18:06 -05:00
9898e0e993
Move AuthorizationAdvisorProxyFactory
...
To prevent package tangles
Issue gh-14596
2024-03-22 11:00:39 -06:00
795e44d11f
Add Value-Type Ignore Support
...
Issue gh-14597
2024-03-22 11:00:39 -06:00
d169d5a835
Add AuthorizeReturnObject
...
Closes gh-14597
2024-03-19 10:27:03 -06:00
52dfbfb5b3
Add Authorization Proxy Support
...
Closes gh-14596
2024-03-13 14:35:07 -06:00
0c419176f2
Polish whats-new.adoc
2024-03-11 12:22:06 -05:00
0c2b6f3e2f
Update What's New for 6.3
2024-03-11 12:21:44 -05:00
9751636735
Polish gh-12281
2024-03-07 16:26:26 -06:00
488901dd4e
Fix Delegation-based Strategy examples
...
Fix examples not copying userNameAttributeName
Issue gh-12275
Issue gh-12282
Issue gh-14672
2024-03-07 16:26:24 -06:00
69527f9a9c
Merge branch '6.2.x'
2024-03-04 15:43:07 -07:00
386e0a7b46
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14682
2024-03-04 15:42:48 -07:00
0ab9ad774d
Merge branch '5.8.x' into 6.1.x
...
Closes gh-14681
2024-03-04 15:42:35 -07:00
e1c4177cd8
Fix ServerLogoutHandler Order in Docs
...
Closes gh-14379
2024-03-04 15:42:09 -07:00
f8ff056eb6
Update Max Sessions on WebFlux
...
Delete WebSessionStoreReactiveSessionRegistry.java and gives the responsibility to remove the sessions from the WebSessionStore to the handler
Issue gh-6192
2024-02-28 10:06:45 -03:00
f3bcf7ed5d
Revert "Update max sessions docs"
...
This reverts commit c86fd99c8f
2024-02-28 08:30:05 -03:00
c86fd99c8f
Update max sessions docs
...
Add WebSessionStore constructor parameter to the handler
Issue gh-6192
2024-02-27 13:36:43 -03:00
16155537a5
Merge branch '6.2.x'
2024-02-26 11:10:49 -07:00
aedffa7919
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14653
2024-02-26 11:10:38 -07:00
ddd5d2e9cd
Fix Observability Typo
...
Closes gh-14651
2024-02-26 11:09:57 -07:00
4d383023cb
Add meta-annotation parameter support
...
Closes gh-14480
2024-02-26 10:50:35 -07:00
34526c3e01
Merge branch '6.2.x'
2024-02-12 12:54:29 -07:00
3ab323663a
Do Not Wire Default OidcSessionStrategy without OidcLogoutConfigurer
...
Closes gh-14558
2024-02-12 12:53:48 -07:00
Steve Riesenberg
Robert Danczak
Josh Cummings
Junhyunny
Taha Körkem
Marcus Hert Da Coregio
baezzys
Rob Winch
Antoine Rey
Seungrae
Dumitru Boldureanu
Stefan Ganzer
Marcono1234
Harsh4902
Ivanov Maxim Romanovich
Blagoja Stamatovski
Stian Jørgensrud
Caio Henrique
Abimael Sergio
Lukas Dohmen
Alexander Münch
douxf
vvaadd
Patrick Schmidt
Angel Gruevski
madorb
Crain-32
MrJovanovic13
Sarvajith Adyanthaya
Krishna Chaitanya Surapaneni
Daniel Shuy