Go to file
dependabot[bot] 6d6552a602
Deploy Docs / build (push) Has been cancelled Details
Release Scheduler / Dispatch scheduled releases (6.3.x) (push) Has been cancelled Details
Release Scheduler / Dispatch scheduled releases (6.4.x) (push) Has been cancelled Details
Release Scheduler / Dispatch scheduled releases (6.5.x) (push) Has been cancelled Details
Release Scheduler / Dispatch scheduled releases (main) (push) Has been cancelled Details
Execute Gradle Wrapper Upgrade / Execution (push) Has been cancelled Details
CodeQL Advanced / codeql-analysis-call (push) Has been cancelled Details
Update Antora UI Spring / Update on Supported Branches (5.8.x) (push) Has been cancelled Details
Update Antora UI Spring / Update on Supported Branches (6.2.x) (push) Has been cancelled Details
Update Antora UI Spring / Update on Supported Branches (6.3.x) (push) Has been cancelled Details
Update Antora UI Spring / Update on Supported Branches (main) (push) Has been cancelled Details
Update Antora UI Spring / Update on docs-build (push) Has been cancelled Details
CI / Build (17, ubuntu-latest) (push) Has been cancelled Details
CI / Build (17, windows-latest) (push) Has been cancelled Details
Clean build artifacts / main (push) Has been cancelled Details
CI / Test Against Snapshots (17, 17) (push) Has been cancelled Details
CI / Test Against Snapshots (21-ea, 21) (push) Has been cancelled Details
CI / Deploy Artifacts (push) Has been cancelled Details
CI / Deploy Schema (push) Has been cancelled Details
CI / Perform Release (push) Has been cancelled Details
CI / Send Notification (push) Has been cancelled Details
Bump org-aspectj from 1.9.25 to 1.9.25.1
Bumps `org-aspectj` from 1.9.25 to 1.9.25.1.

Updates `org.aspectj:aspectjrt` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

Updates `org.aspectj:aspectjweaver` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

---
updated-dependencies:
- dependency-name: org.aspectj:aspectjrt
  dependency-version: 1.9.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.aspectj:aspectjweaver
  dependency-version: 1.9.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-19 17:13:40 -06:00
.github Remove 6.3.x from dependabot 2025-12-01 14:55:16 -06:00
.idea Fix checkstyle rules could not be parsed 2020-11-23 14:33:18 -05:00
.vscode Make eclipse/vscode project import work 2023-06-05 13:34:30 -06:00
access Fix-typos 2025-10-16 14:03:19 -05:00
acl Fix-typos 2025-10-16 14:03:19 -05:00
aspects Move Core Access API 2025-09-12 10:32:38 -06:00
bom fix bom 2021-05-17 22:29:45 -05:00
buildSrc Merge branch '6.5.x' 2025-11-19 15:27:11 -07:00
cas Deprecate Jackson 2 support 2025-10-19 17:03:19 -05:00
config Restore Check for DispatcherServlet on Classpath 2025-12-15 12:18:22 -07:00
core Fix OAuth2AuthorizationServerJacksonModule type validator configuration 2025-10-30 07:19:45 -04:00
crypto Merge branch '6.5.x' 2025-11-04 14:04:56 -07:00
data Add AuthorizationManagerFactory 2025-09-09 15:36:49 -05:00
dependencies Add Jackson 3 BOM 2025-10-19 17:03:19 -05:00
docs Update Antora Spring UI to v0.4.25 2025-12-19 16:57:20 -06:00
etc Remove JdbcOAuth2AuthorizationService.Mapper 2025-10-19 17:03:19 -05:00
git/hooks Update to 7.0.0-SNAPSHOT 2025-05-06 13:26:14 -05:00
gradle Bump org-aspectj from 1.9.25 to 1.9.25.1 2025-12-19 17:13:40 -06:00
itest Move Core Access API 2025-09-12 10:32:38 -06:00
javascript Bump js-yaml from 4.1.0 to 4.1.1 in /javascript 2025-11-21 10:27:09 -06:00
kerberos Add Spring Security Kerberos 2025-09-12 14:25:20 -05:00
ldap Deprecate Jackson 2 support 2025-10-19 17:03:19 -05:00
messaging Update to Reactor 2025.0.0-SNAPSHOT 2025-10-13 11:16:27 -05:00
oauth2 Polish Tests 2025-12-15 09:43:07 -07:00
rsocket Update to Reactor 2025.0.0-SNAPSHOT 2025-10-13 11:16:27 -05:00
saml2/saml2-service-provider Deprecate Jackson 2 support 2025-10-19 17:03:19 -05:00
scripts Add Build Updates section to generated release notes 2024-05-09 13:40:25 -05:00
taglibs Move Web Access API 2025-09-12 10:32:38 -06:00
test Mark `GrantedAuthority#getAuthority` as `@Nullable` 2025-10-20 15:22:24 -06:00
web Added test scope for NPE in RequestMethod 2025-12-01 18:06:42 -06:00
webauthn Bump org.springframework:spring-framework-bom from 7.0.1 to 7.0.2 2025-12-15 11:25:19 -06:00
.editorconfig Fixed link in .editorconfig 2021-10-13 15:36:10 -06:00
.gitattributes Add .serialized suffix and consider them as binary in Git 2024-01-05 15:14:22 -03:00
.gitignore Add .kotlin/ to .gitignore 2025-10-19 17:03:19 -05:00
.sdkmanrc Update java version to 17.0.3-tem 2022-06-14 14:43:34 -05:00
CONTRIBUTING.adoc Polish Stream Advice 2025-06-20 14:01:19 -06:00
LICENSE.txt Add LICENSE.txt 2020-04-15 16:44:13 -05:00
README.adoc Add What's New Link to Landing Pages 2024-11-18 15:51:25 -07:00
RELEASE.adoc Polish RELEASE.adoc 2024-05-06 16:04:35 -05:00
build.gradle Stop Deploying JavaDoc Outside of Antora 2025-11-19 15:23:50 -07:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Next development version 2025-12-15 20:58:49 +00:00
gradlew Bump Gradle Wrapper from 8.13 to 8.14. 2025-04-29 14:48:42 -06:00
gradlew.bat Merge Use 2004-present Copyright Header 2025-07-29 10:52:42 -05:00
notice.txt URL Cleanup 2019-03-19 23:53:23 -05:00
settings.gradle Enable SNAPSHOT builds 2025-10-13 11:15:53 -05:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://github.com/spring-projects/spring-security/actions/workflows/continuous-integration-workflow.yml/badge.svg?branch=main["Build Status", link="https://github.com/spring-projects/spring-security/actions/workflows/continuous-integration-workflow.yml"]

image:https://img.shields.io/badge/Revved%20up%20by-Develocity-06A0CE?logo=Gradle&labelColor=02303A["Revved up by Develocity", link="https://ge.spring.io/scans?search.rootProjectNames=spring-security"]

= Spring Security

Spring Security provides security services for the https://docs.spring.io[Spring IO Platform]. Spring Security 6.0 requires Spring 6.0 as
a minimum and also requires Java 17.

For a detailed list of features and access to the latest release, please visit https://spring.io/projects[Spring projects].

== Code of Conduct
Please see our https://github.com/spring-projects/.github/blob/main/CODE_OF_CONDUCT.md[code of conduct]

== Downloading Artifacts
See https://docs.spring.io/spring-security/reference/getting-spring-security.html[Getting Spring Security] for how to obtain Spring Security.

== Documentation
Be sure to read the https://docs.spring.io/spring-security/reference/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the https://docs.spring.io/spring-security/site/docs/current/api/[Spring Security API Documentation].

You may also want to check out https://docs.spring.io/spring-security/reference/whats-new.html[what's new in the latest release].

== Quick Start
See https://docs.spring.io/spring-security/reference/servlet/getting-started.html[Hello Spring Security] to get started with a "Hello, World" application.

== Building from Source
Spring Security uses a https://gradle.org[Gradle]-based build system.
In the instructions below, https://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
https://docs.github.com/en/get-started/quickstart/set-up-git[Git] and the https://www.oracle.com/java/technologies/downloads/#java17[JDK17 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk-17` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all `spring-*.jar` into your local Maven repository.

[indent=0]
----
./gradlew publishToMavenLocal
----

=== Compile and test; build all JARs, distribution zips, and docs

[indent=0]
----
./gradlew build
----

The reference docs are not currently included in the distribution zip.
You can build the reference docs for this branch by running the following command:

----
./gradlew :spring-security-docs:antora
----

That command publishes the docs site to the `_docs/build/site_` directory.
The https://github.com/spring-projects/spring-security/tree/docs-build[playbook branch] describes how to build the reference docs in detail.

Discover more commands with `./gradlew tasks`.

== Getting Support
Check out the https://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
https://spring.io/support[Commercial support] is available too.

== Contributing
https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-a-pull-request[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/main/CONTRIBUTING.adoc[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
https://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].