Go to file
chanbinme c770667b57
Add null check for authentication token in JwtAuthenticationProvider
Add Assert.notNull validation to ensure the authentication token returned by jwtAuthenticationConverter is not null, preventing potential NullPointerException in subsequent operations.

Signed-off-by: chanbinme <gksmfcksqls@gmail.com>
2025-06-17 13:18:16 -05:00
.github Explicit Permissions for codeql.yml 2025-06-10 10:46:23 -05:00
.idea Fix checkstyle rules could not be parsed 2020-11-23 14:33:18 -05:00
.vscode Make eclipse/vscode project import work 2023-06-05 13:34:30 -06:00
acl Update Deprecated Spring Jdbc Usage 2025-04-23 11:29:18 -06:00
aspects Use .equals to Compare Methods 2025-05-19 09:26:30 -06:00
bom fix bom 2021-05-17 22:29:45 -05:00
buildSrc RepositoryConventionPlugin supports arbitrary repositories 2025-05-22 15:43:38 -05:00
cas Add RequestMatcher Migration Path for CAS 2025-03-26 16:38:38 -06:00
config Replace deprecated #check calls with #authorize 2025-06-12 11:11:49 -06:00
core ReactiveAuthorizationManager replace deprecated #check calls with #authorize 2025-06-12 11:11:49 -06:00
crypto remove 32-byte minimum keyLength restriction in `Base64StringKeyGenerator` (#17012) 2025-05-14 11:41:30 -05:00
data Merge branch '6.3.x' into 6.4.x 2025-03-17 14:18:49 -05:00
dependencies Add support for automatic context-propagation with Micrometer 2025-03-13 15:29:08 -05:00
docs Add OAuth Support for HTTP Interface Client 2025-06-17 09:53:51 -05:00
etc Polish AuthenticationRequest Property 2025-03-21 21:54:32 -06:00
git/hooks Update to 7.0.0-SNAPSHOT 2025-05-06 13:26:14 -05:00
gradle Merge branch 'gradle/main/org.hibernate.orm-hibernate-core-7.0.1.Final' 2025-06-12 12:22:35 -05:00
itest Add testRuntimeOnly junit-platform-launcher 2025-03-17 14:16:44 -05:00
javascript Bump serialize-javascript and mocha in /javascript 2025-02-12 02:28:05 -08:00
ldap Use UsernameNotFoundException Factory 2025-05-28 14:13:02 -06:00
messaging Replace deprecated #check calls with #authorize 2025-06-12 11:11:49 -06:00
oauth2 Add null check for authentication token in JwtAuthenticationProvider 2025-06-17 13:18:16 -05:00
rsocket ReactiveAuthorizationManager replace deprecated #check calls with #authorize 2025-06-12 11:11:49 -06:00
saml2/saml2-service-provider Polish JdbcAssertingPartyMetadataRepository 2025-06-11 18:08:31 -06:00
scripts Add Build Updates section to generated release notes 2024-05-09 13:40:25 -05:00
taglibs Update to 7.0.0-SNAPSHOT 2025-05-06 13:26:14 -05:00
test Remove deprecated `MemberCategory#DECLARED_FIELDS` 2025-05-23 14:36:54 -06:00
web ReactiveAuthorizationManager replace deprecated #check calls with #authorize 2025-06-12 11:11:49 -06:00
.editorconfig Fixed link in .editorconfig 2021-10-13 15:36:10 -06:00
.gitattributes Add .serialized suffix and consider them as binary in Git 2024-01-05 15:14:22 -03:00
.gitignore Use antora-extensions 1.10.0 2024-04-19 14:16:02 -05:00
.sdkmanrc Update java version to 17.0.3-tem 2022-06-14 14:43:34 -05:00
CONTRIBUTING.adoc Update format + check command 2025-03-31 14:06:45 -06:00
LICENSE.txt Add LICENSE.txt 2020-04-15 16:44:13 -05:00
README.adoc Add What's New Link to Landing Pages 2024-11-18 15:51:25 -07:00
RELEASE.adoc Polish RELEASE.adoc 2024-05-06 16:04:35 -05:00
build.gradle Merge branch '6.3.x' into 6.4.x 2025-03-20 13:25:04 -06:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Remove Conflict Markers 2025-05-22 12:29:05 -06:00
gradlew Bump Gradle Wrapper from 8.13 to 8.14. 2025-04-29 14:48:42 -06:00
gradlew.bat Bump Gradle Wrapper from 8.13 to 8.14. 2025-04-29 14:48:42 -06:00
notice.txt URL Cleanup 2019-03-19 23:53:23 -05:00
settings.gradle Bump io.spring.develocity.conventions from 0.0.22 to 0.0.23 2025-06-04 03:47:25 +00:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://github.com/spring-projects/spring-security/actions/workflows/continuous-integration-workflow.yml/badge.svg?branch=main["Build Status", link="https://github.com/spring-projects/spring-security/actions/workflows/continuous-integration-workflow.yml"]

image:https://img.shields.io/badge/Revved%20up%20by-Develocity-06A0CE?logo=Gradle&labelColor=02303A["Revved up by Develocity", link="https://ge.spring.io/scans?search.rootProjectNames=spring-security"]

= Spring Security

Spring Security provides security services for the https://docs.spring.io[Spring IO Platform]. Spring Security 6.0 requires Spring 6.0 as
a minimum and also requires Java 17.

For a detailed list of features and access to the latest release, please visit https://spring.io/projects[Spring projects].

== Code of Conduct
Please see our https://github.com/spring-projects/.github/blob/main/CODE_OF_CONDUCT.md[code of conduct]

== Downloading Artifacts
See https://docs.spring.io/spring-security/reference/getting-spring-security.html[Getting Spring Security] for how to obtain Spring Security.

== Documentation
Be sure to read the https://docs.spring.io/spring-security/reference/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the https://docs.spring.io/spring-security/site/docs/current/api/[Spring Security API Documentation].

You may also want to check out https://docs.spring.io/spring-security/reference/whats-new.html[what's new in the latest release].

== Quick Start
See https://docs.spring.io/spring-security/reference/servlet/getting-started.html[Hello Spring Security] to get started with a "Hello, World" application.

== Building from Source
Spring Security uses a https://gradle.org[Gradle]-based build system.
In the instructions below, https://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
https://docs.github.com/en/get-started/quickstart/set-up-git[Git] and the https://www.oracle.com/java/technologies/downloads/#java17[JDK17 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk-17` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all `spring-*.jar` into your local Maven repository.

[indent=0]
----
./gradlew publishToMavenLocal
----

=== Compile and test; build all JARs, distribution zips, and docs

[indent=0]
----
./gradlew build
----

The reference docs are not currently included in the distribution zip.
You can build the reference docs for this branch by running the following command:

----
./gradlew :spring-security-docs:antora
----

That command publishes the docs site to the `_docs/build/site_` directory.
The https://github.com/spring-projects/spring-security/tree/docs-build[playbook branch] describes how to build the reference docs in detail.

Discover more commands with `./gradlew tasks`.

== Getting Support
Check out the https://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
https://spring.io/support[Commercial support] is available too.

== Contributing
https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-a-pull-request[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/main/CONTRIBUTING.adoc[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
https://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].