spring-security

Commit Graph

Author	SHA1	Message	Date
Joe Grandja	b6ed037c39	Document device_code grant disabled by default Issue gh-17998	2 months ago
Joe Grandja	5da0cbea4b	Document OAuth 2.0 Dynamic Client Registration support Issue gh-17964	2 months ago
Rohan Naik	8c65dc93f2	Enable PKCE by default Closes gh-17507 Signed-off-by: Rohan Naik <rohan.nn1203@gmail.com>	3 months ago
Joe Grandja	681e166be8	Remove default HttpSecurity.securityMatcher() for authorization server Closes gh-17965	3 months ago
Rob Winch	4ef16b14d2	Update terminology to HTTP Service Clients Closes gh-17947	3 months ago
Josh Cummings	1e1cb0097a	Document Authentication Factors Issue gh-17933	3 months ago
Joe Grandja	7ef25cc101	Add HttpSecurity.oauth2AuthorizationServer() Issue gh-17880	3 months ago
Joe Grandja	e99ea033c5	Integrate Spring Authorization Server ref docs Issue gh-17880	3 months ago
Joe Grandja	93742a4db3	Manual move of spring-projects/spring-authorization-server docs Issue gh-17880	3 months ago
Josh Cummings	b09afb34cc	Document Authentication.Builder The commit documents the new Authentication Builder interface and its usage in the security filter chain. Closes gh-17861 Closes gh-17862	3 months ago
Josh Cummings	2c87270dbc	Use authorizeHttpRequests Issue gh-15174	5 months ago
Joe Grandja	e869bcdfa3	Remove deprecated implementations of OAuth2AccessTokenResponseClient Closes gh-16909	6 months ago
Joe Grandja	cfe38957d7	Remove Resource Owner Password Credentials grant Closes gh-17446	6 months ago
Josh Cummings	c43afbf5e1	Format Lambda Expressions This commit updats lambda expressions so that their variable is surrounded in parentheses. Issue gh-13067	6 months ago
Rob Winch	b2325e4176	Add OAuth Support for HTTP Interface Client Closes gh-16858	6 months ago
Joe Grandja	e3c39f02bc	Add documentation for DPoP support Closes gh-17072	8 months ago
Rob Winch	f13836c9c8	Add X to CommonOAuth2Provider Reference Issue gh-16510 Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	8 months ago
Yanming Zhou	9c76ab69f0	Use proper configuration key the getter method is `getOpaquetoken()` not `getOpaqueToken()` See `c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51)` Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	8 months ago
Yanming Zhou	ce5a12b2f7	Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	8 months ago
Steve Riesenberg	15c2b156f1	Update Client Authentication examples Closes gh-16925 987d9c9788ba0343f543083c87613fb5	8 months ago
Hao	6159e089d4	Fix inline code formatting in documentation Signed-off-by: Hao <kyrieeeee2@gmail.com>	9 months ago
Hao	8c7d2e8922	Fix typo in multitenancy documentation Signed-off-by: Hao <kyrieeeee2@gmail.com>	9 months ago
Juha-1	19a5a9c970	Update logout.adoc typos Signed-off-by: Juha-1 <52188855+Juha-1@users.noreply.github.com>	10 months ago
Josh Cummings	ab43a660b9	Add RFC 9068 Support Closes gh-13185	10 months ago
Steve Riesenberg	54a6a19e05	Polish gh-16214 This commit applies the following changes: * Added local Content-Security-Policy with script-src nonce directive * Removed form-redirect.js and associated changes * Renamed to FormPostRedirectStrategy * Removed HtmlUtils usage * Moved to same package as DefaultRedirectStrategy	11 months ago
Craig Andrews	58534e7f60	Add FormRedirectStrategy to enable POST OIDC Logout FormRedirectStrategy redirects using an autosubmitting HTML form using the POST method versus DefaultRedirectStrategy which redirects using the GET method. Can be used to implement POST binding for relying party initiated OIDC logout by setting FormRedirectStrategy as the redirection strategy on OidcClientInitiatedLogoutSuccessHandler. Closes gh-13002 Signed-off-by: Craig Andrews <candrews@integralblue.com>	11 months ago
Rob Winch	85d7cc1335	Document requireProofKey Issue gh-16386	11 months ago
Josh Cummings	a5af8503df	Update OpaqueTokenIntrospector Documentation Issue gh-15988	11 months ago
Tran Ngoc Nhan	5fdacef398	Remove obsolete typo in OAuth 2.0 Client page	12 months ago
Harpreet Singh Bhullar	f5eccf7cd3	Fix OAuth2 documentation: Corrected OAuth2ClientHttpRequestInterceptor usage Closes gh-16165	1 year ago
Josh Cummings	85248083c0	Add Dark Mode CSS Style Closes gh-14834	1 year ago
Steve Riesenberg	ea5bc28773	Polish OAuth2 docs	1 year ago
Steve Riesenberg	8982851355	Document RestClient-based implementations Closes gh-15938	1 year ago
Steve Riesenberg	d0fc4fe4dc	Document RestClient integration Closes gh-15894	1 year ago
Steve Riesenberg	9b89fc2f1f	Add example for setting up client credentials Closes gh-15304	1 year ago
Tran Ngoc Nhan	f7b85ed314	Fix Broken Resource Server Doc Links	1 year ago
Tran Ngoc Nhan	4e2cb8bc25	Fix Broken Resource Server Doc Links	1 year ago
Steve Riesenberg	5d8cf6a8bc	Polish gh-13588	1 year ago
Josh Cummings	8bb5875595	Expose OidcBackChannelLogoutHandler This component already uses by default a URI that doesn't require a CSRF token and aalready allows for configuring a cookie name. So, by making it public and configurable in the DSL, both of these tickets quite naturally close. Closes gh-13841 Closes gh-14904	1 year ago
Hero Wanders	2ba9b6821a	Fix OIDC Logout Code Snippets	1 year ago
Hero Wanders	f372f5cf52	Replace OidcSessionStrategy References with OidcSessionRegistry	1 year ago
Junhyunny	47723f6d39	Fix code format in OIDC Logout docs	1 year ago
Steve Riesenberg	e3c19ba86c	Add RestClient interceptor Closes gh-13588	1 year ago
Rob Winch	5bd4db1a13	Use javadoc macro Closes gh-15386	1 year ago
Antoine Rey	f184d13096	Update the OAuth2 jwt and opaque resource server documentation with the Lambda DSL The OAuth2ResourceServerConfigurer::opaqueToken() and ::jwt() methods are deprecated since Spring Security 6.1	1 year ago
Josh Cummings	0532659245	Fix Typo in Oidc Logout Docs Closes gh-15198	2 years ago
Caio Henrique	67853d585e	docs: add correction to java example in multitenanci.adoc	2 years ago
Caio Henrique	896dd93313	fix: add correction to java example in multitenancy.adoc Closes gh-15146	2 years ago
Marcus Hert Da Coregio	08f11f06ab	Revert unnecessary commits from main Issue gh-15016	2 years ago
Steve Riesenberg	2dd908dff8	Document additional client authenticating methods Issue gh-11440 Closes gh-14982	2 years ago

1 2 3 4

188 Commits (finalize)