d7ecb8fdcf
@gisu1102
...
Restore Jackson 2 module runtime hints for passivity
- Keep Jackson 2 module registrations when jackson2 is present
- Extract Jackson 2 hint registration into a dedicated method
- Suppress removal warnings only for the Jackson 2 registration
Closes spring-projectsgh-18432
Signed-off-by: gimgisu <gisu1102@gmail.com>
2 months ago
a9f9eba6ca
@gisu1102
...
Remove compiler warnings in spring-security-oauth2-authorization-server
- Remove ACCESS_DECLARED_FIELDS from AOT/runtime hints
- Add @SuppressWarnings("removal") for Jackson2 deprecated adapters
Closes spring-projectsgh-18432
Signed-off-by: gimgisu <gisu1102@gmail.com>
2 months ago
1a6f344196
Add security-nullability
...
Closes gh-17823
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
e771ec04b7
Add @Nullable Annotations to saml2-service-provider
...
Issue gh-17823
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
f3656b4991
Ensure saml_request in Tests
...
Issue gh-17823
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
8f22fd4407
Merge branch '7.0.x'
2 months ago
2c97b3376b
Document Client PKCE settings
...
Updated the documentation to reflect recent changes to enable PKCE by default for `authorization_code` flows in the documentation for the client.
Closes gh-18304
Signed-off-by: Elayne Bloom <5840349+bloomsei@users.noreply.github.com>
2 months ago
20493ef45f
Add `javadoc-warnings-error`
...
Closes gh-18461
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
e029b3ac6f
Update authorize-http-requests.adoc
...
Comma added for java configuration
Signed-off-by: Vyacheslav <43342280+cmmttd@users.noreply.github.com>
2 months ago
55ab498518
Add `javadoc-warnings-error`
...
Closes gh-18469
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
b0983e2f5e
Add `javadoc-warnings-error`
...
Closes gh-18466
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
992d8ca79b
fail build on javadoc warnings for spring-security-test
...
Signed-off-by: dohyunk58 <hedge3x@gmail.com>
2 months ago
4c012c59c9
Add `javadoc-warnings-error`
...
Closes gh-18464
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
2ee247f82e
Add `javadoc-warnings-error`
...
Closes gh-18464
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
0496c02c30
Polish gh-18542
2 months ago
93d8283e36
Add `javadoc-warnings-error`
...
Closes gh-18462
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
991b7d4dc2
Rollback setDefaultRolePrefix() call
...
- preserve setDefaultRolePrefix() in getRootObject()
Signed-off-by: pocj8ur4in <pocj8ur4in@gmail.com>
2 months ago
64e863e7df
Remove compiler warnings in spring-security-data
...
- Add
compile-warnings-error plugin to data module
- Remove
deprecated setDefaultRolePrefix() call in getRootObject()
- Add
@SuppressWarnings deprecation for tests using deprecated methods
- Add
tests using AuthorizationManagerFactory
Closes
spring-projectsgh-18422
Signed-off-by: pocj8ur4in <pocj8ur4in@gmail.com>
2 months ago
4957c5a7e9
Add BearerTokenAuthenticationEntryPoint#setResourceMetadataParameterResolver
...
Closes gh-18542
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
2 months ago
5b7c4ae8d8
Add `javadoc-warnings-error`
...
Closes gh-18459
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
8bafd94b1f
Add `compile-warnings-error`
...
Closes gh-18424
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
d244bcf76e
Suppress AspectJ compiler warnings in spring-security-aspects
...
- Added -Xlint:ignore to compileAspectj task
- Added -Xlint:ignore to compileTestAspectj task
Fixes the following AspectJ warnings:
- AnnotationSecurityAspect.aj:72 [warning] advice defined
- AbstractMethodInterceptorAspect.aj:36 [warning] advice defined
These warnings occur because the AspectJ compiler detects that
advice in deprecated aspect classes may not match any join points,
which is expected behavior for deprecated code maintained for
backward compatibility.
Contributes to gh-18405
Signed-off-by: Park JuHyeong <wngud5957@naver.com>
2 months ago
de23ade14b
Remove compiler warnings for spring-security-cas:check
...
Signed-off-by: jieun <jkdev1324@gmail.com>
2 months ago
afa3e2311c
Merge branch '7.0.x'
2 months ago
9273f411c1
Merge branch '6.5.x' into 7.0.x
2 months ago
d6e3ec78cd
Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
2 months ago
2a2f13fbd3
Polish Nullability for oauth2-core
...
Issue gh-17820
2 months ago
db5310bee8
Enable null-safety in spring-security-oauth2-core
...
Closes gh-17820
2 months ago
dfed528851
Remove checkstyle suppressions for spring-security-oauth2-core
...
Issue gh-17820
2 months ago
48c1023fd6
Bump org.hibernate.orm:hibernate-core from 6.6.41.Final to 6.6.42.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.41.Final to 6.6.42.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.42/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.41...6.6.42 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.42.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
04dbdc8588
Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.26 to 1.5.27.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.26...v_1.5.27 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.27
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
6a6c7a7a78
Add missing `@Nullable` to setters of Nullable Fields
...
There are setters and builder methods that initialize members that are
`@Nullable` but do not accept `@Nullable` parameters.
For example:
```
private @Nullable Object foo;
public void setFoo(Object foo) {
this.foo = foo;
}
```
It is an unnecessary restriction that the parameter is unable to be null
since the field can be null.
This commit fixes these inconsistencies.
Closes gh-18618
2 months ago
b591a0a757
TestingAuthenticationToken.credentials should be @Nullable
...
Closes gh-18615
2 months ago
c5632ccd83
Add security-nullability to ldap
...
Closes gh-17818
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2 months ago
a8b5c8fe02
Bump io.mockk:mockk from 1.14.7 to 1.14.9
2 months ago
054ff7421b
Merge branch '7.0.x'
2 months ago
6ca04d9b77
Merge branch '6.5.x' into 7.0.x
2 months ago
3960bf950d
Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
2 months ago
bc6ac7c8c6
Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
2 months ago
6e30cd5417
Merge branch '7.0.x'
2 months ago
74b93a19f6
Externalize java-toolchain configuration
...
We should not use subprojects to perform configuration becaause it
does not allow for lazy loading and it can cause ordering problems.
In this case, the toolchain was not being used but instead it was
using the JAVA_HOME.
By splitting the configuration into a plugin and applying it to each
project it fixes the toolchain configuration
2 months ago
c7d52242fb
Bump io.mockk:mockk from 1.14.7 to 1.14.9
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.7 to 1.14.9.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.7...1.14.9 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
6f6dbd5728
Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.25 to 1.5.26.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.25...v_1.5.26 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.26
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
99eb7b1e5c
Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
...
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj ) from 3.27.6 to 3.27.7.
- [Release notes](https://github.com/assertj/assertj/releases )
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7 )
---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
dependency-version: 3.27.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
89467605ca
Deprecate single-arg PasswordComparisonAuthenticator ctor
...
Add new constructor accepting PasswordEncoder to eventually
remove deprecated LdapShaPasswordEncoder usage.
Closes gh-18430
Signed-off-by: LeeJiWon <dlwldnjs1009@gmail.com>
2 months ago
9fa0a34b4c
Remove compiler warnings in spring-security-ldap
...
- Add
compile-warnings-error plugin to ldap module
- Replace
org.springframework.lang.NonNull with org.jspecify.annotations.NonNull
-
Add @SuppressWarnings for unchecked/rawtypes/deprecation warnings
Closes
gh-18405
Signed-off-by: LeeJiWon <dlwldnjs1009@gmail.com>
2 months ago
a23be5e625
Add `compile-warnings-error`
...
Closes gh-18439
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
c3240c4d2b
Remove compiler warnings for spring-security-rsocket
...
Closes gh-18437
Signed-off-by: jihunparkkk <pjh2996@naver.com>
2 months ago
3c0fd6d7ca
Add `compile-warnings-error`
...
Closes gh-18417
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
d526bb460f
Add `compile-warnings-error`
...
Closes gh-18438
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2 months ago
gimgisu
Josh Cummings
Joe Grandja
Elayne Bloom
Tran Ngoc Nhan
Vyacheslav
dohyunk58
pocj8ur4in
Daniel Garnier-Moiroux
Park JuHyeong
jieun
Robert Winch
dependabot[bot]
LeeJiWon
jihunparkkk