spring-security

Author	SHA1	Message	Date
Josh Cummings	eaab42a73c	Polish BearerTokenAuthenticationConverter Support - Moved to BearerTokenAuthenticationFilter constructor to align with AuthenticationFilter - Undeprecated BearerTokenResolver to reduce number of migration scenarios - Updated to 7.0 schema - Added migration docs Issue gh-14750	9 months ago
Max Batischev	4967f3feee	Add Support BearerTokenAuthenticationConverter Closes gh-14750 Signed-off-by: Max Batischev <mblancer@mail.ru>	9 months ago
Josh Cummings	492444c588	Update shouldConvertGetRequests Migration Steps Issue gh-17099	9 months ago
Josh Cummings	4ed131f6ab	Add shouldConvertGetRequests Migration Steps Issue gh-17099	9 months ago
Josh Cummings	6d3b54df21	Change Type Validation Default NimbusJwtDecoder and NimbusReactiveJwtDecoder now use Spring Security's JwtTypeValidator by default instead of Nimbus's type validator. Closes gh-17181	10 months ago
Josh Cummings	37a814bc29	Add 7.0 -> 8.0 Migration Guide Closes gh-17182	10 months ago
Felix Hagemans	1a4de49977	Create CsrfCustomizer for SPA configuration Closes gh-14149 Signed-off-by: Felix Hagemans <felixhagemans@gmail.com>	10 months ago
Rob Winch	6eee256e12	Demonstrate include-code usage Closes gh-17161	10 months ago
Rob Winch	0fecaf4924	Add include-code extension setup for docs Closes gh-17160	10 months ago
Gurunathan	a4cd6f4278	Advise Overriding equals() and hashCode() in UserDetails Implementations This commit adds a documentation note explaining the importance of overriding equals() and hashCode() in custom UserDetails implementations. The default SessionRegistryImpl in Spring Security uses an in-memory ConcurrentMap<Object, Set<String>>, Map<String,SessionInformation> to associate principals with sessions. If a custom UserDetails class does not properly override equals() and hashCode(), user sessions may not be tracked or matched correctly. I believe this helps developers avoid subtle session management issues when implementing custom authentication logic. Signed-off-by: Gurunathan <129361658+Gurunathan16@users.noreply.github.com>	10 months ago
Josh Cummings	e772025646	Update What's New in 6.5	10 months ago
Josh Cummings	eb30fd7f59	Add Missing Header Issue gh-11161	10 months ago
snowykte0426	260d298cc5	Add Migration Guide from Spring Security SAML Extension This adds a dedicated migration guide for users moving from the Spring Security SAML Extension to the built-in SAML 2.0 support. Includes: - Content migrated from the project wiki - xref links for `saml2Login`, `saml2Logout`, and `saml2Metadata` - Metadata example moved to Examples Matrix - Cleanup and naming per review feedback Closes gh-11161 Signed-off-by: snowykte0426 <snowykte0426@naver.com>	10 months ago
Danilo Piazzalunga	27319e3f9b	Add missing registration property in YAML listing Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>	10 months ago
Danilo Piazzalunga	ec462e8bc5	Update assertingparty property usage in YAML snippets Spring Boot 2.7 renamed spring.security.saml2.relyingparty.registration..identityprovider. to spring.security.saml2.relyingparty.registration..assertingparty.. Closes gh-12810. Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>	10 months ago
Joe Grandja	e3c39f02bc	Add documentation for DPoP support Closes gh-17072	10 months ago
Rob Winch	f13836c9c8	Add X to CommonOAuth2Provider Reference Issue gh-16510 Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	10 months ago
Josh Cummings	211b1b7285	Update Method Security Migration Steps	10 months ago
Josh Cummings	84db5bb312	Add Cookie Customizer Migration Steps	10 months ago
Josh Cummings	74a25c3fc1	Add shouldFilterAllDispatcherTypes Migration Steps	10 months ago
Josh Cummings	084990736e	Move Opaque Token Migration Steps	10 months ago
Josh Cummings	c6bba38458	Update SAML 2.0 Migration Steps	10 months ago
Josh Cummings	45b453f59b	Add ACL Migration Steps	10 months ago
Rob Winch	5abbcecccc	Update to 7.0.0-SNAPSHOT Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	10 months ago
Tran Ngoc Nhan	505fe3abed	Correct method name Closes gh-17031 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	10 months ago
Josh Cummings	51239359ed	Fix ClearSiteData Code Snippet Closes gh-16948	10 months ago
Soumik Sarker	bcef6ed74f	Reformatted lines in x509 overview documentation Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>	10 months ago
Yanming Zhou	9c76ab69f0	Use proper configuration key the getter method is `getOpaquetoken()` not `getOpaqueToken()` See `c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51)` Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	10 months ago
Yanming Zhou	ce5a12b2f7	Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	11 months ago
Josh Cummings	61d6fbc2a9	Update Documentation for PathPatternRequestMatcher Issue gh-16765	11 months ago
Steve Riesenberg	15c2b156f1	Update Client Authentication examples Closes gh-16925 987d9c9788ba0343f543083c87613fb5	11 months ago
Josh Cummings	6438603cb6	Pick Up TargetVisitor Beans Closes gh-16923	11 months ago
Josh Cummings	3869b13e68	Add ResponseAuthenticationConverter Aside from simplifying configuration, this commit also makes it possible to provide a response authentication converter that doesn't need the NameID element to be present. Closes gh-12136	11 months ago
Josh Cummings	3e686abf50	Add ResponseValidator Issue gh-14264 Closes gh-16915	11 months ago
Steve Riesenberg	43ef4262da	Update whats-new.adoc Issue gh-16913	11 months ago
Michael Samborski	bfb4878e29	Update kotlin.adoc to add required spread operator(*) Signed-off-by: Michael Samborski <msamborski@orbiscommunications.com>	11 months ago
Josh Cummings	f93a7a2f85	Deprecate HandlerMappingIntrospectorRequestTransformer Closes gh-16536	11 months ago
Josh Cummings	a283700ef8	Add CacheSaml2AuthenticationRequestRepository Closes gh-14793	11 months ago
Josh Cummings	67c21de1cf	Support Continue Filter Chain When No Relying Party Closes gh-16000	11 months ago
Josh Cummings	f280593566	Move Preparation Steps Closes gh-16873	11 months ago
Josh Cummings	616b43f261	Restore 6.x Migration Steps Issue gh-16873	11 months ago
Josh Cummings	91b0936189	Add AssertionValidator - Ships with support for customizing the OpenSAML validators to use - Or, you can supply your own instance of SAML20AssertionValidator Closes gh-15578	11 months ago
Tran Ngoc Nhan	ee84d37435	Use SpringCacheBasedTicketCache Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	11 months ago
Tran Ngoc Nhan	3be8e92187	Fix typo Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	12 months ago
Hao	6159e089d4	Fix inline code formatting in documentation Signed-off-by: Hao <kyrieeeee2@gmail.com>	12 months ago
Hao	8c7d2e8922	Fix typo in multitenancy documentation Signed-off-by: Hao <kyrieeeee2@gmail.com>	12 months ago
Josh Cummings	99345537d6	Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter Issue gh-16417	12 months ago
Josh Cummings	91ee5e7f2b	Add RequestMatcher Migration Path for CAS Issue gh-16417	12 months ago
Josh Cummings	15d9c13984	Add RequestMatcher MigrationPath for SwitchUserFilter To simplify migration, the filter's setter methods still use AntPathRequestMatcher. Users can call the equivalent RequestMatcher setter methods to opt-in to the change early. Issue gh-16417	12 months ago
Josh Cummings	ff52e05b24	Favor PathPatternRequestMatcher in XML Configuration Update BeanDefinitionParsers to use PathPatternRequestMatcher conditionally on the presence of a PathPatternRequestMatcher.Builder bean Closes gh-16828	12 months ago

1 2 3 4 5 ...

1219 Commits (adca1b31be5569be03b1af3d79b8a82e99a7cb40)