Gurunathan
a4cd6f4278
Advise Overriding equals() and hashCode() in UserDetails Implementations
...
This commit adds a documentation note explaining the importance of
overriding equals() and hashCode() in custom UserDetails implementations.
The default SessionRegistryImpl in Spring Security uses an in-memory
ConcurrentMap<Object, Set<String>>, Map<String,SessionInformation> to
associate principals with sessions. If a custom UserDetails class does
not properly override equals() and hashCode(), user sessions may not
be tracked or matched correctly.
I believe this helps developers avoid subtle session management issues
when implementing custom authentication logic.
Signed-off-by: Gurunathan <129361658+Gurunathan16@users.noreply.github.com>
7 months ago
Josh Cummings
eb30fd7f59
Add Missing Header
...
Issue gh-11161
7 months ago
snowykte0426
260d298cc5
Add Migration Guide from Spring Security SAML Extension
...
This adds a dedicated migration guide for users moving from the Spring Security SAML Extension to the built-in SAML 2.0 support.
Includes:
- Content migrated from the project wiki
- xref links for `saml2Login`, `saml2Logout`, and `saml2Metadata`
- Metadata example moved to Examples Matrix
- Cleanup and naming per review feedback
Closes gh-11161
Signed-off-by: snowykte0426 <snowykte0426@naver.com>
7 months ago
Danilo Piazzalunga
27319e3f9b
Add missing registration property in YAML listing
...
Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>
7 months ago
Danilo Piazzalunga
ec462e8bc5
Update assertingparty property usage in YAML snippets
...
Spring Boot 2.7 renamed spring.security.saml2.relyingparty.registration.*.identityprovider.*
to spring.security.saml2.relyingparty.registration.*.assertingparty.*.
Closes gh-12810.
Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>
7 months ago
Tran Ngoc Nhan
505fe3abed
Correct method name
...
Closes gh-17031
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
8 months ago
Josh Cummings
51239359ed
Fix ClearSiteData Code Snippet
...
Closes gh-16948
8 months ago
Soumik Sarker
bcef6ed74f
Reformatted lines in x509 overview documentation
...
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
8 months ago
Yanming Zhou
9c76ab69f0
Use proper configuration key
...
the getter method is `getOpaquetoken()` not `getOpaqueToken()`
See c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51)
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
8 months ago
Rob Winch
58e7ba4a4b
https docs download
9 months ago
Bragolgirith
72554f7f36
Update authorize-http-requests.adoc
...
Fix patterns in the Security Matchers documentation
Signed-off-by: Bragolgirith <6455473+Bragolgirith@users.noreply.github.com>
9 months ago
Rob Winch
65e83f8e7a
Add link to docs zip
...
Closes gh-16798
9 months ago
Tran Ngoc Nhan
af40d7e35a
Fix typo
...
Closes gh-16776
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
Tran Ngoc Nhan
daf8cfe8d2
Fix Spring Framework reference link
...
Closes gh-16699
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
Tran Ngoc Nhan
75b537f99a
Fix WebFlux authentication reference link
...
Closes gh-16702
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
Tran Ngoc Nhan
a0cfb2777c
Fix typo
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
10 months ago
Josh Cummings
eb313ec901
Link to Messaging SpEL Migration Details
...
Issue gh-12650
1 year ago
Josh Cummings
8b9fe13c88
Document Messaging SpEL Migration
...
Issue gh-12650
1 year ago
Harpreet Singh
68d91916e2
Polish Dark Mode for CSRF and Method Security diagrams
...
Closes gh-16151
1 year ago
Josh Cummings
85248083c0
Add Dark Mode CSS Style
...
Closes gh-14834
1 year ago
Rob Winch
81e74e65d4
Support ServerExchangeRejectedHandler @Bean
...
Closes gh-16061
1 year ago
Rob Winch
c24b5ebe98
Support ServerExchangeRejectedHandler @Bean
...
Closes gh-15975
1 year ago
Rob Winch
e86d88d0cf
Support ServerExchangeRejectedHandler @Bean
...
Closes gh-15975
1 year ago
ImHyuk
4ac092c803
Update logout.adoc: Fix Customizing Logout Success Example
1 year ago
Rob Winch
0e257b56ce
Add Firewall for WebFlux
...
Closes gh-15967
1 year ago
Rob Winch
4ce7cde155
Add Firewall for WebFlux
...
Closes gh-15967
1 year ago
Tran Ngoc Nhan
f7b85ed314
Fix Broken Resource Server Doc Links
1 year ago
Josh Cummings
1a0203ecf6
Fix AuthorizationManager API Documentation Typo
...
Closes gh-15704
1 year ago
Steve Riesenberg
0a4eb0f09a
Update credential erasure examples
...
Closes gh-15683
1 year ago
Tran Ngoc Nhan
b9f051d15b
docs: update
1 year ago
Hero Wanders
2ba9b6821a
Fix OIDC Logout Code Snippets
1 year ago
Hero Wanders
f372f5cf52
Replace OidcSessionStrategy References with OidcSessionRegistry
1 year ago
Junhyunny
47723f6d39
Fix code format in OIDC Logout docs
1 year ago
Josh Cummings
e51507e32d
Polish Inline Code Formatting
1 year ago
Junhyunny
bfee6927c2
Correct Explanation for HttpSessionCsrfTokenRepository
1 year ago
Taha Körkem
da65830569
Use Correct Meta-Annotation in Kotlin Sample
1 year ago
baezzys
3d4bcf1b44
fix: Restrict automatic CORS configuration to UrlBasedCorsConfigurationSource
...
- Update CORS configuration logic to automatically enable .cors() only if a UrlBasedCorsConfigurationSource bean is present.
- Modify applyCorsIfAvailable method to check for UrlBasedCorsConfigurationSource instances.
1 year ago
Seungrae
f4cbaaa2dd
Fix typos and formatting in documentation
...
Closes gh-15353
1 year ago
Antoine Rey
99cda31579
Update prerequisites documentation
...
Raises the minimum version of the Java runtime for Spring
Security from 8 to 17
Closes gh-15323
1 year ago
Marcus Hert Da Coregio
779030b6cd
Document the role of CredentialsContainer
...
Closes gh-15319
1 year ago
Marcus Hert Da Coregio
e16ce57fbb
Use AuthenticationFailureHandler instead of @ControllerAdvice
...
Closes gh-15305
2 years ago
Josh Cummings
c4f70bee4b
Fix Broken Link
...
Closes gh-15288
2 years ago
Steve Riesenberg
f622d8e2e2
Polish gh-15235
2 years ago
Harsh4902
92cab2b678
Add 'Required Dependencies' section in ldap.adoc file
...
Closes gh-14699
2 years ago
Josh Cummings
c3f766f3b3
Update RoleHierarchy Documentation
...
Closes gh-15208
2 years ago
Josh Cummings
0532659245
Fix Typo in Oidc Logout Docs
...
Closes gh-15198
2 years ago
Marcus Hert Da Coregio
e013d96758
Clarify the behavior of Concurrent Session Management when an IdP is involved
...
Closes gh-15071
2 years ago
Josh Cummings
e7ea4091a0
Migrate SampleLDIF to UnboundID
...
Closes gh-15089
2 years ago
Caio Henrique
896dd93313
fix: add correction to java example in multitenancy.adoc
...
Closes gh-15146
2 years ago
Marcus Hert Da Coregio
c7b739eb3f
Fix broken link to jaspan article
...
Closes gh-14358
2 years ago