spring-boot

Spring Boot

Andy Wilkinson beba1f176a Do not enable WebFlux security unless other configuration is active Following the changes in gh-37504, the reactive resource server auto-configuration could enable WebFlux security in situations where it was otherwise in active. This could then result in an application failing to start as no authentication manager is available. This commit updates the configurations that enable WebFlux security so that they fully back off unless their related configurations are active. Previously, only the configuration of the SecurityWebFilterChain would back off. This has been expanded to cover `@EnableWebFluxSecurity` as well. This has required splitting the configuration classes up so that the condition evaluation order can be controlled more precisely. We need to ensure that the JWT decoder bean or the opaque token introspector bean has been defined before evaluation of the conditions for `@EnableWebFluxSecurity`. Without this control, the import through `@EnableWebFluxSecurity` in one location where the conditions do not matchcan prevent a successful import in another where they do. Fixes gh-38713		2 years ago
..
spring-boot	Merge branch '3.1.x'	2 years ago
spring-boot-actuator	…
spring-boot-actuator-autoconfigure	Disable propagation of traces if tracing is disabled	2 years ago
spring-boot-autoconfigure	Do not enable WebFlux security unless other configuration is active	2 years ago
spring-boot-dependencies	Start building against Spring Security 6.2.1 snapshots	2 years ago
spring-boot-devtools	…
spring-boot-docker-compose	Merge branch '3.1.x'	2 years ago
spring-boot-docs	Merge branch '3.1.x'	2 years ago
spring-boot-parent	…
spring-boot-starters	…
spring-boot-test	Merge branch '3.1.x'	2 years ago
spring-boot-test-autoconfigure	…
spring-boot-testcontainers	…
spring-boot-tools	Merge branch '3.1.x'	2 years ago