spring-security

Commit Graph

Author	SHA1	Message	Date
Elayne Bloom	2c97b3376b	Document Client PKCE settings Updated the documentation to reflect recent changes to enable PKCE by default for `authorization_code` flows in the documentation for the client. Closes gh-18304 Signed-off-by: Elayne Bloom <5840349+bloomsei@users.noreply.github.com>	2 months ago
Vyacheslav	e029b3ac6f	Update authorize-http-requests.adoc Comma added for java configuration Signed-off-by: Vyacheslav <43342280+cmmttd@users.noreply.github.com>	2 months ago
Tran Ngoc Nhan	8bafd94b1f	Add `compile-warnings-error` Closes gh-18424 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Robert Winch	74b93a19f6	Externalize java-toolchain configuration We should not use subprojects to perform configuration becaause it does not allow for lazy loading and it can cause ordering problems. In this case, the toolchain was not being used but instead it was using the JAVA_HOME. By splitting the configuration into a plugin and applying it to each project it fixes the toolchain configuration	2 months ago
Robert Winch	35d103843b	Externalize java-toolchain configuration We should not use subprojects to perform configuration becaause it does not allow for lazy loading and it can cause ordering problems. In this case, the toolchain was not being used but instead it was using the JAVA_HOME. By splitting the configuration into a plugin and applying it to each project it fixes the toolchain configuration	2 months ago
songhee	fee6a9bb0e	docs: add CurrentSecurityContext section and link references Signed-off-by: songhee <songhee9327@gmail.com>	2 months ago
Tran Ngoc Nhan	cfe13c7c76	Fix typos Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Guillaume Husta	508b3f26e3	docs: Typo in page Preparing for 7.0 / Web (version 6.5) In section 'Include the Servlet Path Prefix in Authorization Rules', `PathPatternRequestParser` should be replaced by `PathPatternRequestMatcher`. Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>	2 months ago
$박기현\qkrrl$ 박기현\qkrrl	91d8a04ec2	Fix duplicated use-authorization-manager in docs Signed-off-by: 박기현\qkrrl <qkrrlgus114@naver.com>	2 months ago
Robert Winch	63c99b9438	Revert "Update to 7.1.0-SNAPSHOT" This reverts commit `b77ea8d3a3`.	2 months ago
Robert Winch	b77ea8d3a3	Update to 7.1.0-SNAPSHOT	2 months ago
Fr05ty-hub	e9a92a8e9a	Replacing use of deprecated 'check' in authorization documentation check() was deprecated in Spring Security 7, but is referenced in documentation Signed-off-by: Fr05ty-hub <frostylucas@gmail.com>	2 months ago
Fr05ty-hub	ed774d3595	Replacing use of deprecated 'check' in authorization documentation check() was deprecated in Spring Security 7, but was referenced in documentation Signed-off-by: Fr05ty-hub <frostylucas@gmail.com>	2 months ago
github-actions[bot]	e588a3528f	Update Antora Spring UI to v0.4.25	2 months ago
github-actions[bot]	7ea5be4b98	Update Antora Spring UI to v0.4.25	2 months ago
Robert Winch	3833650d33	Update to 7.1.0-SNAPSHOT	2 months ago
Robert Winch	2344fe5ebb	Use proper xref syntax Incldue the required resource id and required # of the fragment. See - https://docs.antora.org/antora/latest/page/xref/#xref-macro - https://docs.antora.org/antora/latest/page/resource-id-coordinates/#id-resource	2 months ago
Tran Ngoc Nhan	ba18f681e5	Use xref anchor id Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Tran Ngoc Nhan	3d9bc6a5cf	Update mfa.adoc Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Martin Boulais	1d8ea63a9e	Fix typo in HTTP Basic Auth Provider documentation The documentation states that setting the header `X-Requested-By` will remove the `WWW-Authenticate` header from the response. However, after testing this and reading the library code it looks like the header to set is `X-Requested-With` (X-Requested-By is mentioned nowhere except in this documentation file), so I propose this simple PR to fix this. Signed-off-by: Martin Boulais <31805063+martinboulais@users.noreply.github.com>	2 months ago
Tran Ngoc Nhan	79815e044e	Fix typos Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
github-actions[bot]	ac9c0a4313	Update Antora Spring UI to v0.4.25	3 months ago
Josh Cummings	765abe534e	Add Missing Migration Pages to Side Navigation Closes gh-18313	3 months ago
Josh Cummings	afb0c59875	Add request-matcher XML Migration Steps Closes gh-18211	3 months ago
kucoll	10edc14d7e	Fix typo in AnnotationTemplateExpressionDefaults The AnnotationTemplateExpressionDeafults was wrong，and right is AnnotationTemplateExpressionDefaults Signed-off-by: kucoll <kucoll@163.com>	4 months ago
kucoll	7503d8018d	Fix typo in AnnotationTemplateExpressionDefaults The AnnotationTemplateExpressionDeafults was wrong，and right is AnnotationTemplateExpressionDefaults Signed-off-by: kucoll <kucoll@163.com>	4 months ago
Guillaume Husta	1ce73dd45a	docs: Fix example in Custom DSLs for http.csrf() It should use lambda dsl to compile Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>	4 months ago
Guillaume Husta	bb7fcb27ef	docs: Fix example in MyCustomDsl to remove throws Exception In `init` and `configure`, throws Exception has been removed in the super interface `SecurityConfigurer`, since Spring Security 7.0. This change is the consequence of https://github.com/spring-projects/spring-security/issues/17957 Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>	4 months ago
sach429	19cbd9c570	Update OAuth2 Client to OAuth2 Resource Server Fix section title to match the corresponding example Signed-off-by: sach429 <satrajit.acharya@gmail.com>	4 months ago
L33gn21	b37c5584f9	Fix broken link to Spring Boot docs Signed-off-by: L33gn21 <l33gn21@gmail.com>	4 months ago
dependabot[bot]	09e80aafe8	Bump antora from 3.2.0-alpha.10 to 3.2.0-alpha.11 in /docs Bumps [antora](https://gitlab.com/antora/antora) from 3.2.0-alpha.10 to 3.2.0-alpha.11. - [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc) - [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-alpha.10...v3.2.0-alpha.11) --- updated-dependencies: - dependency-name: antora dependency-version: 3.2.0-alpha.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Peter Potrowl	d84d0ca22e	Fix typo in ldap.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	f1793f5047	Fix typo in passkeys.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	4b227649f0	Fix typo in ldap.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	cfc27f8cc3	Fix typo in passkeys.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	5baff27ffb	Fix typo in ldap.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	39aaf25b60	Fix typo in passkeys.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Joe Grandja	b130e728b7	Polish gh-18153 Issue gh-18144	4 months ago
Andrey Litvitski	e6db56ab4f	Add a minimal authorization server configuration Closes gh-18144 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	4 months ago
Joe Grandja	571bd60d82	Document OAuth 2.0 Protected Resource Metadata support Issue gh-17244	5 months ago
Daniel Garnier-Moiroux	fed6df5167	Default WebAuthnConfigurer#rpName to rpId In WebAuthn L3 spec, PublicKeyCredentialEntity.name is deprecated: > This member is deprecated because many clients do not display it, > but it remains a required dictionary member for backwards compatibility. > Relying Parties MAY, as a safe default, set this equal to the RP ID. Source: https://www.w3.org/TR/webauthn-3/#dictdef-publickeycredentialentity Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	5 months ago
Daniel Garnier-Moiroux	4feeb0f843	Docs: document effects of disabling CORS configurer Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	5 months ago
Rob Winch	884cf0d62e	EnableGlobalMultiFactorAuthentication->EnableMultiFactorAuthentication Closes gh-18127	5 months ago
Joe Grandja	b6ed037c39	Document device_code grant disabled by default Issue gh-17998	5 months ago
Joe Grandja	5da0cbea4b	Document OAuth 2.0 Dynamic Client Registration support Issue gh-17964	5 months ago
Joe Grandja	e6b4d461e7	Fix OAuth2AuthorizationServerJacksonModule type validator configuration Closes gh-18102	5 months ago
Josh Cummings	da46ba2619	Update Password Samples for Nullability Issue gh-16226	5 months ago
Himanshu Pareek	dcb4e47cd5	Add Include-Code to the Password Storage page References gh-16226 Signed-off-by: Himanshu Pareek <himanshupareekiit01@gmail.com>	5 months ago
Josh Cummings	9c7b34a48b	Favor Relative Redirects by Default Closes gh-16300	5 months ago
Josh Cummings	d5d7fd414d	Update What's New	5 months ago

1 2 3 4 5 ...

2739 Commits (8f22fd44075fb4c7136bbed73dc266027e4ffddd)