spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	63f28a7e1f	Merge branch '6.5.x'	1 month ago
Josh Cummings	f988272fff	Merge branch '6.4.x' into 6.5.x	1 month ago
Josh Cummings	532d0bef14	Add Test to Confirm 72-byte BCrypt Password Limit Closes gh-18133	1 month ago
Joe Grandja	571bd60d82	Document OAuth 2.0 Protected Resource Metadata support Issue gh-17244	1 month ago
Rob Winch	6471a32d66	Merge branch '6.5.x' Closes gh-18132	1 month ago
Rob Winch	c1e9e10bf0	Merge branch '6.4.x' into 6.5.x Closes gh-18131	1 month ago
Daniel Garnier-Moiroux	fed6df5167	Default WebAuthnConfigurer#rpName to rpId In WebAuthn L3 spec, PublicKeyCredentialEntity.name is deprecated: > This member is deprecated because many clients do not display it, > but it remains a required dictionary member for backwards compatibility. > Relying Parties MAY, as a safe default, set this equal to the RP ID. Source: https://www.w3.org/TR/webauthn-3/#dictdef-publickeycredentialentity Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	1 month ago
Josh Cummings	20ae9dc6bc	Remove Stray Needs Declaration	1 month ago
Josh Cummings	03eadb846c	Add Workflow to Finalize a Release	1 month ago
Rob Winch	0928a60cd2	Post Process WebAuthnAuthenticationFilter This commit ensures that WebAuthnAuthenticationFilter is post processed by BeanPostProcessors and ObjectPostProcessor. Closes gh-18128	1 month ago
Rob Winch	322634ca6a	Next Development Version	1 month ago
Rob Winch	5213cc44fc	Merge branch '6.5.x'	1 month ago
Rob Winch	8fa2fc0e1e	Merge branch '6.4.x' into 6.5.x	1 month ago
Daniel Garnier-Moiroux	4feeb0f843	Docs: document effects of disabling CORS configurer Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	1 month ago
Daniel Garnier-Moiroux	ea88671f4c	Update webauthn4j usage, use non-deprecated methods Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	1 month ago
github-actions[bot]	9dde69746f	Release 7.0.0-RC2	1 month ago
Rob Winch	884cf0d62e	EnableGlobalMultiFactorAuthentication->EnableMultiFactorAuthentication Closes gh-18127	1 month ago
Rob Winch	aaf738f7ac	MFA is now Opt In This commit ensures that MFA is only performed when users opt in. By doing so, we allow users to decide if they will opt into the semantics of merging two Authentication instances. Closes gh-18126	1 month ago
Rob Winch	ccd39a23c9	Only perform MFA if Authentication.getName() is the same Closes gh-18112	1 month ago
Josh Cummings	793820acfa	Remove Authority Copying From Reactive We will re-address this when adding factors to ReactiveAuthenticationManager implementations. Issue gh-2603	1 month ago
Joe Grandja	b6ed037c39	Document device_code grant disabled by default Issue gh-17998	2 months ago
Joe Grandja	5da0cbea4b	Document OAuth 2.0 Dynamic Client Registration support Issue gh-17964	2 months ago
Joe Grandja	e6b4d461e7	Fix OAuth2AuthorizationServerJacksonModule type validator configuration Closes gh-18102	2 months ago
Josh Cummings	4daf089e46	Merge remote-tracking branch 'origin/6.5.x'	2 months ago
namest504	6501e97ece	Fix sensitive case in JwtTypeValidator Closes gh-18092 Signed-off-by: namest504 <namest504@gmail.com>	2 months ago
Josh Cummings	3a84894bf4	Revert "Add AuthorizationProxyMixin" This reverts commit `743817fc15`.	2 months ago
Joe Grandja	90855aa128	Missing response_type in POST authorization request returns invalid_request Issue https://github.com/spring-projects/spring-authorization-server/issues/2226	2 months ago
dependabot[bot]	9f7e92d6f2	Bump tools.jackson:jackson-bom from 3.0.0 to 3.0.1 Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 3.0.0 to 3.0.1. - [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-3.0.0...jackson-bom-3.0.1) --- updated-dependencies: - dependency-name: tools.jackson:jackson-bom dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Josh Cummings	727f0e27d6	Merge branch '6.5.x'	2 months ago
Josh Cummings	f548aaf5c5	Merge branch '6.4.x' into 6.5.x	2 months ago
Josh Cummings	743817fc15	Add AuthorizationProxyMixin This commit adds Jackson configuration specific to authorization proxies created by Spring Security Closes gh-18077	2 months ago
Josh Cummings	fb701e4615	Merge remote-tracking branch 'origin/6.5.x'	2 months ago
Josh Cummings	1c112005fa	Don't Attempt to Generate Token Without Valid Token Request Closes gh-18088 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 months ago
Marcus Hert da Coregio	e0a71eb00e	Fix GenerateOneTimeTokenRequestResolver ignored if username param not present Signed-off-by: Marcus Hert da Coregio <marcusdacoregio@gmail.com>	2 months ago
Josh Cummings	69d28dc35b	Merge branch '6.5.x'	2 months ago
Josh Cummings	42ddaba870	Next Development Version	2 months ago
Josh Cummings	da46ba2619	Update Password Samples for Nullability Issue gh-16226	2 months ago
Josh Cummings	a406f5fe2d	Merge remote-tracking branch 'origin/6.5.x'	2 months ago
Himanshu Pareek	dcb4e47cd5	Add Include-Code to the Password Storage page References gh-16226 Signed-off-by: Himanshu Pareek <himanshupareekiit01@gmail.com>	2 months ago
Rob Winch	82f87cf2b6	Next Development Version	2 months ago
Josh Cummings	0a2f55d485	Clarify Nullability in Granted Authority Lambda Issue gh-17999	2 months ago
Andrey Litvitski	9b61533db2	Mark `GrantedAuthority#getAuthority` as `@Nullable` Closes: gh-17999 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	2 months ago
Josh Cummings	eb43830260	Polish JavaDoc 1. Removed comment about not changing field name in a serialized object as this is true for all fields in a Java-serialize POJO 2. Added example value for the constructor that demonstrates the relationship between a role and an authority Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 months ago
Yanming Zhou	b55c28cf25	Polish SimpleGrantedAuthority 1. Add Javadoc to state that role is prefixed. 2. Rename constructor argument from `role` to `authority` for better readability. Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	2 months ago
Simon Von	0927bed66a	📔 Documentation 1. Correct the org.springframework.security.config.annotation.web.LogoutDsl's property description Signed-off-by: Simon Von <g1672943850@gmail.com>	2 months ago
Josh Cummings	9ed446e6f5	Next Development Version	2 months ago
github-actions[bot]	d5e6da5aba	Release 7.0.0-RC1	2 months ago
Rob Winch	4d2bd30c75	Update to Reactor 2025.0.0-RC1 Closes gh-18087	2 months ago
Rob Winch	5acad99852	Revert "Release 7.0.0-RC1" This reverts commit `e616688f56`.	2 months ago
github-actions[bot]	e616688f56	Release 7.0.0-RC1	2 months ago

1 2 3 4 5 ...

19758 Commits (63f28a7e1fda4750c216c97c9b0ab08cc96c6a93) All Branches Search

19758 Commits (63f28a7e1fda4750c216c97c9b0ab08cc96c6a93)

All Branches