spring-security

Commit Graph

Author	SHA1	Message	Date
kucoll	10edc14d7e	Fix typo in AnnotationTemplateExpressionDefaults The AnnotationTemplateExpressionDeafults was wrong，and right is AnnotationTemplateExpressionDefaults Signed-off-by: kucoll <kucoll@163.com>	2 weeks ago
Peter Potrowl	4b227649f0	Fix typo in ldap.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 weeks ago
Peter Potrowl	cfc27f8cc3	Fix typo in passkeys.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 weeks ago
Peter Potrowl	5baff27ffb	Fix typo in ldap.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 weeks ago
Peter Potrowl	39aaf25b60	Fix typo in passkeys.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 weeks ago
Daniel Garnier-Moiroux	fed6df5167	Default WebAuthnConfigurer#rpName to rpId In WebAuthn L3 spec, PublicKeyCredentialEntity.name is deprecated: > This member is deprecated because many clients do not display it, > but it remains a required dictionary member for backwards compatibility. > Relying Parties MAY, as a safe default, set this equal to the RP ID. Source: https://www.w3.org/TR/webauthn-3/#dictdef-publickeycredentialentity Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2 months ago
Daniel Garnier-Moiroux	4feeb0f843	Docs: document effects of disabling CORS configurer Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2 months ago
Josh Cummings	8b2a453301	Advise Favoring PostAuthorize on Reads Closes gh-17797	4 months ago
Joe Kuhel	d002e68231	Update servlet test method docs to use include-code References gh-16226 Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	4 months ago
Joe Kuhel	0179a811c7	Update servlet test method docs to use include-code References gh-16226 Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	4 months ago
Michał Sobkiewicz	c963f4250e	Update Angular documentation links in csrf.adoc Replaced `angular.io` links with their corresponding `angular.dev` URLs. This change ensures that users referencing CSRF documentation are directed to the most current Angular resources. Signed-off-by: Michał Sobkiewicz <perceptron8@users.noreply.github.com>	5 months ago
Bernie Schelberg	edcb3b024e	Update Shibboleth repository URL Signed-off-by: Bernie Schelberg <bernard.schelberg@invicara.com>	5 months ago
Josh Cummings	9209a33678	Remove References to Deprecated OpenSaml Components Issue gh-11658	5 months ago
Rob Winch	6eee256e12	Demonstrate include-code usage Closes gh-17161	7 months ago
Gurunathan	a4cd6f4278	Advise Overriding equals() and hashCode() in UserDetails Implementations This commit adds a documentation note explaining the importance of overriding equals() and hashCode() in custom UserDetails implementations. The default SessionRegistryImpl in Spring Security uses an in-memory ConcurrentMap<Object, Set<String>>, Map<String,SessionInformation> to associate principals with sessions. If a custom UserDetails class does not properly override equals() and hashCode(), user sessions may not be tracked or matched correctly. I believe this helps developers avoid subtle session management issues when implementing custom authentication logic. Signed-off-by: Gurunathan <129361658+Gurunathan16@users.noreply.github.com>	7 months ago
Josh Cummings	eb30fd7f59	Add Missing Header Issue gh-11161	7 months ago
snowykte0426	260d298cc5	Add Migration Guide from Spring Security SAML Extension This adds a dedicated migration guide for users moving from the Spring Security SAML Extension to the built-in SAML 2.0 support. Includes: - Content migrated from the project wiki - xref links for `saml2Login`, `saml2Logout`, and `saml2Metadata` - Metadata example moved to Examples Matrix - Cleanup and naming per review feedback Closes gh-11161 Signed-off-by: snowykte0426 <snowykte0426@naver.com>	7 months ago
Danilo Piazzalunga	27319e3f9b	Add missing registration property in YAML listing Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>	7 months ago
Danilo Piazzalunga	ec462e8bc5	Update assertingparty property usage in YAML snippets Spring Boot 2.7 renamed spring.security.saml2.relyingparty.registration..identityprovider. to spring.security.saml2.relyingparty.registration..assertingparty.. Closes gh-12810. Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>	7 months ago
Joe Grandja	e3c39f02bc	Add documentation for DPoP support Closes gh-17072	7 months ago
Tran Ngoc Nhan	505fe3abed	Correct method name Closes gh-17031 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	8 months ago
Josh Cummings	51239359ed	Fix ClearSiteData Code Snippet Closes gh-16948	8 months ago
Soumik Sarker	bcef6ed74f	Reformatted lines in x509 overview documentation Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>	8 months ago
Yanming Zhou	9c76ab69f0	Use proper configuration key the getter method is `getOpaquetoken()` not `getOpaqueToken()` See `c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51)` Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	8 months ago
Yanming Zhou	ce5a12b2f7	Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	8 months ago
Josh Cummings	61d6fbc2a9	Update Documentation for PathPatternRequestMatcher Issue gh-16765	8 months ago
Steve Riesenberg	15c2b156f1	Update Client Authentication examples Closes gh-16925 987d9c9788ba0343f543083c87613fb5	8 months ago
Josh Cummings	6438603cb6	Pick Up TargetVisitor Beans Closes gh-16923	8 months ago
Josh Cummings	3869b13e68	Add ResponseAuthenticationConverter Aside from simplifying configuration, this commit also makes it possible to provide a response authentication converter that doesn't need the NameID element to be present. Closes gh-12136	8 months ago
Josh Cummings	3e686abf50	Add ResponseValidator Issue gh-14264 Closes gh-16915	8 months ago
Michael Samborski	bfb4878e29	Update kotlin.adoc to add required spread operator(*) Signed-off-by: Michael Samborski <msamborski@orbiscommunications.com>	8 months ago
Josh Cummings	a283700ef8	Add CacheSaml2AuthenticationRequestRepository Closes gh-14793	9 months ago
Josh Cummings	91b0936189	Add AssertionValidator - Ships with support for customizing the OpenSAML validators to use - Or, you can supply your own instance of SAML20AssertionValidator Closes gh-15578	9 months ago
Tran Ngoc Nhan	ee84d37435	Use SpringCacheBasedTicketCache Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
Hao	6159e089d4	Fix inline code formatting in documentation Signed-off-by: Hao <kyrieeeee2@gmail.com>	9 months ago
Hao	8c7d2e8922	Fix typo in multitenancy documentation Signed-off-by: Hao <kyrieeeee2@gmail.com>	9 months ago
Josh Cummings	3aec6c2f6e	Deprecate Access API in ACL Issue gh-11302	9 months ago
Josh Cummings	05fdcd6a08	Deprecate MvcRequestMatcher Closes gh-16631	9 months ago
Bragolgirith	72554f7f36	Update authorize-http-requests.adoc Fix patterns in the Security Matchers documentation Signed-off-by: Bragolgirith <6455473+Bragolgirith@users.noreply.github.com>	9 months ago
Steve Riesenberg	6745576186	Polish basic.adoc Signed-off-by: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com>	9 months ago
Steve Riesenberg	eb510ab59d	Polish gh-16280	9 months ago
Martin Emrich	21fb5f92cf	Explain behaviour with XMLHttpRequest on 401 response Relates to / Closes gh-16103	9 months ago
nobletrout	555fe1f147	Update anonymous.adoc make the example code return the same thing for the do and don't do. Signed-off-by: nobletrout <nobletrout@gmail.com>	9 months ago
Tran Ngoc Nhan	af40d7e35a	Fix typo Closes gh-16776 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
Tran Ngoc Nhan	daf8cfe8d2	Fix Spring Framework reference link Closes gh-16699 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
ayoub anbara	8167022ada	Update data.adoc No need to declare the method that create a bean as a public, and no need to declare interface that extends PagingAndSortingRepository with @Repository Signed-off-by: ayoub anbara <anbara.ayoub@gmail.com>	9 months ago
Josh Cummings	bb438578cb	Deprecate SecurityMetadataSource - Updated FAQ to replace SecurityMetadataSource recommendation with AuthorizationManager Issue gh-16772	9 months ago
Josh Cummings	a884c3c906	Address XsdDocumentedTests Errors Issue gh-16775	9 months ago
Josh Cummings	e6008b6067	Add RedirectToHttps to XML Closes gh-16775	9 months ago
mgreene57005	56d255018c	Fix ordering for security filter configuration Signed-off-by: Matthew Greene <mgreene57005@gmail.com> Signed-off-by: mgreene57005 <mgreene57005@gmail.com>	10 months ago

1 2 3 4 5 ...

833 Commits (6.5.x)