Yanming Zhou
9c76ab69f0
Use proper configuration key
...
the getter method is `getOpaquetoken()` not `getOpaqueToken()`
See c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51)
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
8 months ago
Yanming Zhou
ce5a12b2f7
Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector
...
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
8 months ago
Tran Ngoc Nhan
3be8e92187
Fix typo
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
Josh Cummings
ab43a660b9
Add RFC 9068 Support
...
Closes gh-13185
10 months ago
Steve Riesenberg
7fc5d50adf
Polish gh-16551
10 months ago
Max Batischev
0ccbd20f0a
Add Support ServerFormPostRedirectStrategy
...
Closes gh-16542
Signed-off-by: Max Batischev <mblancer@mail.ru>
10 months ago
Tran Ngoc Nhan
839269dbf5
Update Spring Security javadocs
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
10 months ago
Rob Winch
85d7cc1335
Document requireProofKey
...
Issue gh-16386
11 months ago
Josh Cummings
a5af8503df
Update OpaqueTokenIntrospector Documentation
...
Issue gh-15988
11 months ago
Tran Ngoc Nhan
40f8ac642a
Fix Documentation Typos
1 year ago
Martin Tarjányi
24ccac3555
Fix typo in documentation
1 year ago
Steve Riesenberg
ea5bc28773
Polish OAuth2 docs
1 year ago
Steve Riesenberg
d5cb41156c
Update reactive OAuth2 docs
...
Issue gh-15938
1 year ago
Steve Riesenberg
9b89fc2f1f
Add example for setting up client credentials
...
Closes gh-15304
1 year ago
Josh Cummings
8bb5875595
Expose OidcBackChannelLogoutHandler
...
This component already uses by default a URI that doesn't require
a CSRF token and aalready allows for configuring a cookie name.
So, by making it public and configurable in the DSL, both
of these tickets quite naturally close.
Closes gh-13841
Closes gh-14904
1 year ago
Hero Wanders
2ba9b6821a
Fix OIDC Logout Code Snippets
1 year ago
Hero Wanders
f372f5cf52
Replace OidcSessionStrategy References with OidcSessionRegistry
1 year ago
Junhyunny
47723f6d39
Fix code format in OIDC Logout docs
1 year ago
Rob Winch
5bd4db1a13
Use javadoc macro
...
Closes gh-15386
1 year ago
Marcus Hert Da Coregio
08f11f06ab
Revert unnecessary commits from main
...
Issue gh-15016
2 years ago
Steve Riesenberg
2dd908dff8
Document additional client authenticating methods
...
Issue gh-11440
Closes gh-14982
2 years ago
MrJovanovic13
1657296bb7
Replace "Spring Boot 2.x" with "Spring Boot"
...
Closes gh-14917
2 years ago
Krishna Chaitanya Surapaneni
89175dfed0
making sure it is in sync with servlet page
2 years ago
Steve Riesenberg
313619fec3
Polish OAuth2 Client docs
...
Issue gh-14698
2 years ago
Steve Riesenberg
f3c745c65b
Add reference documentation for Token Exchange
...
Closes gh-14698
2 years ago
Steve Riesenberg
22f84cf3f3
Update reactive OAuth2 docs landing page
...
Closes gh-14758
2 years ago
Steve Riesenberg
9751636735
Polish gh-12281
2 years ago
Daniel Shuy
488901dd4e
Fix Delegation-based Strategy examples
...
Fix examples not copying userNameAttributeName
Issue gh-12275
Issue gh-12282
Issue gh-14672
2 years ago
Josh Cummings
74d06f020d
Update to Latest Boot Property
...
Closes gh-14252
2 years ago
Steve Riesenberg
9db33f33c7
Revert unnecessary merges on 6.0.x
...
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:
- 5dce82c48b
2 years ago
Josh Cummings
a3227f041c
Polish OAuth2AuthorizationManagers
...
- Add OAuth2ReactiveAuthorizationManagers
- Code to interfaces
- Align error message with the same in
AuthorityAuthorizationManager
- Adjust expectations in tests to confirm an
appropriately constructed authorizaion manager
- Add JavaDoc and reference documentation
Issue gh-13654
2 years ago
Josh Cummings
af6fce4a71
Fix Documentation Errors
...
Issue gh-12570
(cherry picked from commit 6b0d82236d )
2 years ago
Josh Cummings
6b0d82236d
Fix Documentation Errors
...
Issue gh-12570
2 years ago
Josh Cummings
cb33fd7850
Add OIDC Back-Channel Logout Support
...
Closes gh-12570
2 years ago
Josh Cummings
3b7e7f63d8
Update Jwt Multi-tenancy Documentation
...
Issue gh-13427
2 years ago
Rob Winch
39c43159f4
Convert to Asciidoctor Tabs
...
Closes gh-13403
3 years ago
Rob Winch
04692d9ee8
Fix Antora Warnings
...
Closes gh-13210
3 years ago
Josh Cummings
3469bcb822
Address Antora Warnings
3 years ago
Josh Cummings
76eba9bd0c
Add withIssuerLocation
...
Closes gh-10309
3 years ago
Joe Grandja
e139f1c2ba
Polish gh-12438
3 years ago
Ger Roza
8315545144
Update RP-Initiated Logout target URLs.
...
The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs.
Fixes: gh-12081
3 years ago
Steve Riesenberg
181ee7410b
Change default authority for oauth2Login()
...
Previously, the default authority was ROLE_USER when using
oauth2Login() for both OAuth2 and OIDC providers.
* Default authority for OAuth2UserAuthority is now OAUTH2_USER
* Default authority for OidcUserAuthority is now OIDC_USER
Documentation has been updated to include this implementation detail.
Closes gh-7856
3 years ago
Joshua Sattler
040111ae9e
Remove Configuration meta-annotation from Enable* annotations
...
Before, Spring Security's @Enable* annotations were meta-annotated with @Configuration .
While convenient, this is not consistent with the rest of the Spring projects and most notably
Spring Framework's @Enable annotations. Additionally, the introduction of support for
@Configuration(proxyBeanMethods=false) in Spring Framework provides a compelling reason to
remove @Configuration meta-annotation from Spring Security's @Enable annotations and allow
users to opt into their preferred configuration mode.
Closes gh-6613
Signed-off-by: Joshua Sattler <joshua.sattler@mailbox.org>
3 years ago
André Luis Gomes
aca3fc2412
Update opaque-token.adoc
...
Fixing yaml sample in Servlet and Reactive pages
4 years ago
André Luis Gomes
0c31cb21dc
Update opaque-token.adoc
...
Fixing yaml sample in Servlet and Reactive pages
4 years ago
André Luis Gomes
24701b547f
Update opaque-token.adoc
...
Fixing yaml sample in Servlet and Reactive pages
4 years ago
André Luis Gomes
b9acdd5058
Update opaque-token.adoc
...
Fixing yaml sample in Servlet and Reactive pages
4 years ago
Steve Riesenberg
f0168c6c27
Add support for customizing claims in JWT Client Assertion
...
Closes gh-9855
4 years ago
Steve Riesenberg
428216b322
Add support for customizing claims in JWT Client Assertion
...
Closes gh-9855
4 years ago
Joe Grandja
54b033078b
Allow configuring PKCE for confidential clients
...
Closes gh-6548
4 years ago