Steve Riesenberg
5d8cf6a8bc
Polish gh-13588
1 year ago
ReGius-igmt
4a9a350ed0
Update websocket integration docs
1 year ago
Josh Cummings
1a0203ecf6
Fix AuthorizationManager API Documentation Typo
...
Closes gh-15704
1 year ago
Josh Cummings
8bb5875595
Expose OidcBackChannelLogoutHandler
...
This component already uses by default a URI that doesn't require
a CSRF token and aalready allows for configuring a cookie name.
So, by making it public and configurable in the DSL, both
of these tickets quite naturally close.
Closes gh-13841
Closes gh-14904
1 year ago
Steve Riesenberg
0a4eb0f09a
Update credential erasure examples
...
Closes gh-15683
1 year ago
Steve Riesenberg
243f0f87cd
Update credential erasure examples
...
Closes gh-15683
1 year ago
Steve Riesenberg
f8a78f1864
Update What's New
1 year ago
Steve Riesenberg
8bab9bcce8
Polish whats-new.adoc
1 year ago
Marcus Hert Da Coregio
0618d4e03f
Provide Runtime Hints for Beans used in Pre/PostAuthorize Expressions
...
Closes gh-14652
1 year ago
Josh Cummings
fc3de5e41a
Rework Method Security Reactive Docs
1 year ago
Josh Cummings
784e074a48
Document Programmatic Authorization in Reactive
1 year ago
DingHao
ef8b0addbb
Support custom MethodSecurityExpressionHandler
...
Closes gh-15715
1 year ago
Josh Cummings
fd5d03d384
Add AuthorizeReturnObject Hints
...
Closes gh-15709
1 year ago
Tran Ngoc Nhan
b9f051d15b
docs: update
1 year ago
Xi Minghui
64920c12de
Correct Title in logout.adoc
1 year ago
Marcus Hert Da Coregio
6417eb7159
Document how to customize OneTimeTokenService
...
Closes gh-15743
1 year ago
Max Batischev
81e4c7273a
Add One-Time Token Login support to Kotlin DSL
...
Closes gh-15698
1 year ago
Xi Minghui
0b98eb4139
Correct ObservationRegistry Type Reference
1 year ago
Tran Ngoc Nhan
febe5e6ddf
docs: update
1 year ago
Xi Minghui
d23f283598
Corrected AuthenticationEventPublisher Type
1 year ago
Marcus Hert Da Coregio
00e4a8fb54
Add support for One-Time Token Login
...
Closes gh-15114
1 year ago
Josh Cummings
add5c56136
Update AuthorizeReturnObject Jackson Docs
...
Now instructs to use MethodAuthorizationDeniedHandler
Issue gh-14601
1 year ago
DingHao
fd05c5ad76
Remove Advised Methods from Authorization Proxy Objects
...
Closes gh-15561
1 year ago
Xi Minghui
e39b39dada
Corrected Reference to HttpServletRequest#authenticate
1 year ago
Hero Wanders
2ba9b6821a
Fix OIDC Logout Code Snippets
1 year ago
Hero Wanders
f372f5cf52
Replace OidcSessionStrategy References with OidcSessionRegistry
1 year ago
Junhyunny
47723f6d39
Fix code format in OIDC Logout docs
1 year ago
Steve Riesenberg
8318a42959
Update What's New for 6.4
...
Issue gh-15437
1 year ago
Josh Cummings
06febf7857
Update What's New
1 year ago
Steve Riesenberg
e3c19ba86c
Add RestClient interceptor
...
Closes gh-13588
1 year ago
Robert Danczak
12a9f9240c
Fix: Adjusted code formatting to remaining code examples.
1 year ago
Josh Cummings
e40c98e6d7
Deprecate PrePostTemplateDefaults
...
Since there is nothing specific to configuring pre/post
annotations, there is no need for the extra class.
If a need like this does arise in the future,
either AnnotationTemplateExpressionDefaults can be sub-
classed, or it can have introduced a Map field holding
custom properties.
Issue gh-15286
1 year ago
Josh Cummings
f4d9d0d54f
Document @AuthenticationPrincipal meta-annotations
...
Issue gh-15286
1 year ago
Josh Cummings
96682a1d5c
Document OpenSAML 4 vs OpenSAML 5 Support
...
Closes gh-11658
1 year ago
Josh Cummings
1da383b360
Add OpenSAML 5 Support
...
Issue gh-11658
1 year ago
Josh Cummings
1be596bb2f
Use OpenSAML API for registration
...
Issue gh-11658
1 year ago
Josh Cummings
51fc05630d
Use OpenSAML API for web.authentication.logout
...
Issue gh-11658
1 year ago
Josh Cummings
e51507e32d
Polish Inline Code Formatting
1 year ago
Junhyunny
bfee6927c2
Correct Explanation for HttpSessionCsrfTokenRepository
1 year ago
Taha Körkem
da65830569
Use Correct Meta-Annotation in Kotlin Sample
1 year ago
baezzys
3d4bcf1b44
fix: Restrict automatic CORS configuration to UrlBasedCorsConfigurationSource
...
- Update CORS configuration logic to automatically enable .cors() only if a UrlBasedCorsConfigurationSource bean is present.
- Modify applyCorsIfAvailable method to check for UrlBasedCorsConfigurationSource instances.
1 year ago
Josh Cummings
9d8888c5f0
Use AssertingPartyMetadata
...
Issue gh-15394
1 year ago
Josh Cummings
e6dfb63bdf
Add OpenSamlAssertingPartyMetadataRepository
...
Closes gh-12116
Closes gh-15395
1 year ago
Josh Cummings
796e4d6b6c
Add query parameter support for authn requests
...
Closes gh-15017
1 year ago
Rob Winch
5bd4db1a13
Use javadoc macro
...
Closes gh-15386
1 year ago
Antoine Rey
f184d13096
Update the OAuth2 jwt and opaque resource server documentation with the Lambda DSL
...
The OAuth2ResourceServerConfigurer::opaqueToken() and ::jwt() methods are deprecated since Spring Security 6.1
1 year ago
Seungrae
f4cbaaa2dd
Fix typos and formatting in documentation
...
Closes gh-15353
1 year ago
Seungrae
148e7843bf
Fix typos and formatting in documentation
1 year ago
Josh Cummings
7b39800606
Add CachingRelyingPartyRegistrationRepository
...
Closes gh-15341
1 year ago
Antoine Rey
99cda31579
Update prerequisites documentation
...
Raises the minimum version of the Java runtime for Spring
Security from 8 to 17
Closes gh-15323
1 year ago