Gurunathan
a4cd6f4278
Advise Overriding equals() and hashCode() in UserDetails Implementations
...
This commit adds a documentation note explaining the importance of
overriding equals() and hashCode() in custom UserDetails implementations.
The default SessionRegistryImpl in Spring Security uses an in-memory
ConcurrentMap<Object, Set<String>>, Map<String,SessionInformation> to
associate principals with sessions. If a custom UserDetails class does
not properly override equals() and hashCode(), user sessions may not
be tracked or matched correctly.
I believe this helps developers avoid subtle session management issues
when implementing custom authentication logic.
Signed-off-by: Gurunathan <129361658+Gurunathan16@users.noreply.github.com>
7 months ago
Josh Cummings
eb30fd7f59
Add Missing Header
...
Issue gh-11161
7 months ago
snowykte0426
260d298cc5
Add Migration Guide from Spring Security SAML Extension
...
This adds a dedicated migration guide for users moving from the Spring Security SAML Extension to the built-in SAML 2.0 support.
Includes:
- Content migrated from the project wiki
- xref links for `saml2Login`, `saml2Logout`, and `saml2Metadata`
- Metadata example moved to Examples Matrix
- Cleanup and naming per review feedback
Closes gh-11161
Signed-off-by: snowykte0426 <snowykte0426@naver.com>
7 months ago
Danilo Piazzalunga
27319e3f9b
Add missing registration property in YAML listing
...
Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>
7 months ago
Danilo Piazzalunga
ec462e8bc5
Update assertingparty property usage in YAML snippets
...
Spring Boot 2.7 renamed spring.security.saml2.relyingparty.registration.*.identityprovider.*
to spring.security.saml2.relyingparty.registration.*.assertingparty.*.
Closes gh-12810.
Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>
7 months ago
Tran Ngoc Nhan
505fe3abed
Correct method name
...
Closes gh-17031
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
8 months ago
Josh Cummings
51239359ed
Fix ClearSiteData Code Snippet
...
Closes gh-16948
8 months ago
Soumik Sarker
bcef6ed74f
Reformatted lines in x509 overview documentation
...
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
8 months ago
Yanming Zhou
9c76ab69f0
Use proper configuration key
...
the getter method is `getOpaquetoken()` not `getOpaqueToken()`
See c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51)
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
8 months ago
Bragolgirith
72554f7f36
Update authorize-http-requests.adoc
...
Fix patterns in the Security Matchers documentation
Signed-off-by: Bragolgirith <6455473+Bragolgirith@users.noreply.github.com>
9 months ago
Tran Ngoc Nhan
af40d7e35a
Fix typo
...
Closes gh-16776
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
Tran Ngoc Nhan
daf8cfe8d2
Fix Spring Framework reference link
...
Closes gh-16699
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
Tran Ngoc Nhan
a0cfb2777c
Fix typo
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
10 months ago
Josh Cummings
8b9fe13c88
Document Messaging SpEL Migration
...
Issue gh-12650
1 year ago
Harpreet Singh
68d91916e2
Polish Dark Mode for CSRF and Method Security diagrams
...
Closes gh-16151
1 year ago
Josh Cummings
85248083c0
Add Dark Mode CSS Style
...
Closes gh-14834
1 year ago
ImHyuk
4ac092c803
Update logout.adoc: Fix Customizing Logout Success Example
1 year ago
Tran Ngoc Nhan
f7b85ed314
Fix Broken Resource Server Doc Links
1 year ago
Josh Cummings
1a0203ecf6
Fix AuthorizationManager API Documentation Typo
...
Closes gh-15704
1 year ago
Steve Riesenberg
0a4eb0f09a
Update credential erasure examples
...
Closes gh-15683
1 year ago
Tran Ngoc Nhan
b9f051d15b
docs: update
1 year ago
Hero Wanders
2ba9b6821a
Fix OIDC Logout Code Snippets
1 year ago
Hero Wanders
f372f5cf52
Replace OidcSessionStrategy References with OidcSessionRegistry
1 year ago
Junhyunny
47723f6d39
Fix code format in OIDC Logout docs
1 year ago
Josh Cummings
e51507e32d
Polish Inline Code Formatting
1 year ago
Junhyunny
bfee6927c2
Correct Explanation for HttpSessionCsrfTokenRepository
1 year ago
Taha Körkem
da65830569
Use Correct Meta-Annotation in Kotlin Sample
1 year ago
baezzys
3d4bcf1b44
fix: Restrict automatic CORS configuration to UrlBasedCorsConfigurationSource
...
- Update CORS configuration logic to automatically enable .cors() only if a UrlBasedCorsConfigurationSource bean is present.
- Modify applyCorsIfAvailable method to check for UrlBasedCorsConfigurationSource instances.
1 year ago
Seungrae
f4cbaaa2dd
Fix typos and formatting in documentation
...
Closes gh-15353
1 year ago
Marcus Hert Da Coregio
779030b6cd
Document the role of CredentialsContainer
...
Closes gh-15319
1 year ago
Josh Cummings
c4f70bee4b
Fix Broken Link
...
Closes gh-15288
2 years ago
Steve Riesenberg
f622d8e2e2
Polish gh-15235
2 years ago
Harsh4902
92cab2b678
Add 'Required Dependencies' section in ldap.adoc file
...
Closes gh-14699
2 years ago
Josh Cummings
c3f766f3b3
Update RoleHierarchy Documentation
...
Closes gh-15208
2 years ago
Josh Cummings
0532659245
Fix Typo in Oidc Logout Docs
...
Closes gh-15198
2 years ago
Josh Cummings
e7ea4091a0
Migrate SampleLDIF to UnboundID
...
Closes gh-15089
2 years ago
Caio Henrique
896dd93313
fix: add correction to java example in multitenancy.adoc
...
Closes gh-15146
2 years ago
Marcus Hert Da Coregio
c7b739eb3f
Fix broken link to jaspan article
...
Closes gh-14358
2 years ago
Alexander Münch
df59516b18
Fix Kotlin example in authorize-http-requests.adoc
...
- Consistency: Replaced mix of tabs/spaces with spaces indentation
2 years ago
douxf
bd72741879
Fix wrong class on documentation
...
Closes gh-15045
2 years ago
vvaadd
0a6e50d892
Minor code fix
2 years ago
Patrick Schmidt
1ebd663253
doc: added hint to declare GrantedAuthorityDefaults as infrastructure bean
...
Closes gh-14779
2 years ago
Marcus Hert Da Coregio
08f11f06ab
Revert unnecessary commits from main
...
Issue gh-15016
2 years ago
Angel Gruevski
ce995a0178
Correct a mistake in the documentation related to RequestCacheAwareFilter
...
Corrected a mistake in the documentation for the Spring Architecture where it was mentioned that RequestCacheAwareFilter is used to save the HttpServletRequest instead of the ExceptionTranslationFilter
Closes gh-14855
2 years ago
madorb
1ae99be1cf
Clarify Package Import
...
Provide more explict instructions regarding the necessary import
to make the Kotlin DSL work. For some reason it took me 10 minutes
to figure this out based on the existing doc.
2 years ago
Steve Riesenberg
2dd908dff8
Document additional client authenticating methods
...
Issue gh-11440
Closes gh-14982
2 years ago
Steve Riesenberg
2598bf8c37
Polish gh-14859
2 years ago
Crain-32
d0adb2aa70
Simplify Disabling Encoding Client ID and Secret
...
Closes gh-11440
2 years ago
Josh Cummings
2477c22674
Fix Role Name Typo
...
Closes gh-14965
2 years ago
Josh Cummings
8893f60157
Fix http Link
...
Issue gh-14944
2 years ago