spring-security

Commit Graph

Author	SHA1	Message	Date
Joe Grandja	5fb2875f47	AOT hints for authorization server Jackson 3 types should be registered Closes gh-18146	2 months ago
Joe Grandja	27ae318992	JdbcRegisteredClientRepository should support Jackson 3 Issue gh-17832 Closes gh-18143	2 months ago
Joe Grandja	73840663b9	Polish JdbcOAuth2AuthorizationService	2 months ago
Josh Cummings	5662e17370	Add Nullable Annotations Added Nullable to methods that may return a null value Closes gh-18046	2 months ago
Josh Cummings	63f28a7e1f	Merge branch '6.5.x'	2 months ago
Josh Cummings	f988272fff	Merge branch '6.4.x' into 6.5.x	2 months ago
Josh Cummings	532d0bef14	Add Test to Confirm 72-byte BCrypt Password Limit Closes gh-18133	2 months ago
Joe Grandja	571bd60d82	Document OAuth 2.0 Protected Resource Metadata support Issue gh-17244	2 months ago
Rob Winch	6471a32d66	Merge branch '6.5.x' Closes gh-18132	2 months ago
Rob Winch	c1e9e10bf0	Merge branch '6.4.x' into 6.5.x Closes gh-18131	2 months ago
Daniel Garnier-Moiroux	fed6df5167	Default WebAuthnConfigurer#rpName to rpId In WebAuthn L3 spec, PublicKeyCredentialEntity.name is deprecated: > This member is deprecated because many clients do not display it, > but it remains a required dictionary member for backwards compatibility. > Relying Parties MAY, as a safe default, set this equal to the RP ID. Source: https://www.w3.org/TR/webauthn-3/#dictdef-publickeycredentialentity Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2 months ago
Josh Cummings	20ae9dc6bc	Remove Stray Needs Declaration	2 months ago
Josh Cummings	03eadb846c	Add Workflow to Finalize a Release	2 months ago
Rob Winch	0928a60cd2	Post Process WebAuthnAuthenticationFilter This commit ensures that WebAuthnAuthenticationFilter is post processed by BeanPostProcessors and ObjectPostProcessor. Closes gh-18128	2 months ago
Rob Winch	322634ca6a	Next Development Version	2 months ago
Rob Winch	5213cc44fc	Merge branch '6.5.x'	2 months ago
Rob Winch	8fa2fc0e1e	Merge branch '6.4.x' into 6.5.x	2 months ago
Daniel Garnier-Moiroux	4feeb0f843	Docs: document effects of disabling CORS configurer Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2 months ago
Daniel Garnier-Moiroux	ea88671f4c	Update webauthn4j usage, use non-deprecated methods Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	2 months ago
github-actions[bot]	9dde69746f	Release 7.0.0-RC2	2 months ago
Rob Winch	884cf0d62e	EnableGlobalMultiFactorAuthentication->EnableMultiFactorAuthentication Closes gh-18127	2 months ago
Rob Winch	aaf738f7ac	MFA is now Opt In This commit ensures that MFA is only performed when users opt in. By doing so, we allow users to decide if they will opt into the semantics of merging two Authentication instances. Closes gh-18126	2 months ago
Rob Winch	ccd39a23c9	Only perform MFA if Authentication.getName() is the same Closes gh-18112	2 months ago
Josh Cummings	793820acfa	Remove Authority Copying From Reactive We will re-address this when adding factors to ReactiveAuthenticationManager implementations. Issue gh-2603	2 months ago
Joe Grandja	b6ed037c39	Document device_code grant disabled by default Issue gh-17998	2 months ago
Joe Grandja	5da0cbea4b	Document OAuth 2.0 Dynamic Client Registration support Issue gh-17964	2 months ago
Joe Grandja	e6b4d461e7	Fix OAuth2AuthorizationServerJacksonModule type validator configuration Closes gh-18102	2 months ago
Josh Cummings	4daf089e46	Merge remote-tracking branch 'origin/6.5.x'	2 months ago
namest504	6501e97ece	Fix sensitive case in JwtTypeValidator Closes gh-18092 Signed-off-by: namest504 <namest504@gmail.com>	2 months ago
Josh Cummings	3a84894bf4	Revert "Add AuthorizationProxyMixin" This reverts commit `743817fc15`.	2 months ago
Joe Grandja	90855aa128	Missing response_type in POST authorization request returns invalid_request Issue https://github.com/spring-projects/spring-authorization-server/issues/2226	2 months ago
dependabot[bot]	9f7e92d6f2	Bump tools.jackson:jackson-bom from 3.0.0 to 3.0.1 Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 3.0.0 to 3.0.1. - [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-3.0.0...jackson-bom-3.0.1) --- updated-dependencies: - dependency-name: tools.jackson:jackson-bom dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Josh Cummings	727f0e27d6	Merge branch '6.5.x'	2 months ago
Josh Cummings	f548aaf5c5	Merge branch '6.4.x' into 6.5.x	2 months ago
Josh Cummings	743817fc15	Add AuthorizationProxyMixin This commit adds Jackson configuration specific to authorization proxies created by Spring Security Closes gh-18077	2 months ago
Josh Cummings	fb701e4615	Merge remote-tracking branch 'origin/6.5.x'	2 months ago
Josh Cummings	1c112005fa	Don't Attempt to Generate Token Without Valid Token Request Closes gh-18088 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 months ago
Marcus Hert da Coregio	e0a71eb00e	Fix GenerateOneTimeTokenRequestResolver ignored if username param not present Signed-off-by: Marcus Hert da Coregio <marcusdacoregio@gmail.com>	2 months ago
Josh Cummings	69d28dc35b	Merge branch '6.5.x'	2 months ago
Josh Cummings	42ddaba870	Next Development Version	2 months ago
Josh Cummings	da46ba2619	Update Password Samples for Nullability Issue gh-16226	2 months ago
Josh Cummings	a406f5fe2d	Merge remote-tracking branch 'origin/6.5.x'	2 months ago
Himanshu Pareek	dcb4e47cd5	Add Include-Code to the Password Storage page References gh-16226 Signed-off-by: Himanshu Pareek <himanshupareekiit01@gmail.com>	2 months ago
Rob Winch	82f87cf2b6	Next Development Version	2 months ago
Josh Cummings	0a2f55d485	Clarify Nullability in Granted Authority Lambda Issue gh-17999	2 months ago
Andrey Litvitski	9b61533db2	Mark `GrantedAuthority#getAuthority` as `@Nullable` Closes: gh-17999 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	2 months ago
Josh Cummings	eb43830260	Polish JavaDoc 1. Removed comment about not changing field name in a serialized object as this is true for all fields in a Java-serialize POJO 2. Added example value for the constructor that demonstrates the relationship between a role and an authority Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 months ago
Yanming Zhou	b55c28cf25	Polish SimpleGrantedAuthority 1. Add Javadoc to state that role is prefixed. 2. Rename constructor argument from `role` to `authority` for better readability. Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	2 months ago
Simon Von	0927bed66a	📔 Documentation 1. Correct the org.springframework.security.config.annotation.web.LogoutDsl's property description Signed-off-by: Simon Von <g1672943850@gmail.com>	2 months ago
Josh Cummings	9ed446e6f5	Next Development Version	2 months ago

1 2 3 4 5 ...

19762 Commits (5fb2875f4714ebb799dfdc2a8e338b8119c6c82a) All Branches Search

19762 Commits (5fb2875f4714ebb799dfdc2a8e338b8119c6c82a)

All Branches