dcc85d8df4
Add generic request validator for refresh token
...
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
6 months ago
727f0e27d6
Merge branch '6.5.x'
6 months ago
f548aaf5c5
Merge branch '6.4.x' into 6.5.x
6 months ago
743817fc15
Add AuthorizationProxyMixin
...
This commit adds Jackson configuration specific to
authorization proxies created by Spring Security
Closes gh-18077
6 months ago
fb701e4615
Merge remote-tracking branch 'origin/6.5.x'
6 months ago
1c112005fa
Don't Attempt to Generate Token Without Valid Token Request
...
Closes gh-18088
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
6 months ago
e0a71eb00e
Fix GenerateOneTimeTokenRequestResolver ignored if username param not present
...
Signed-off-by: Marcus Hert da Coregio <marcusdacoregio@gmail.com>
6 months ago
69d28dc35b
Merge branch '6.5.x'
6 months ago
42ddaba870
Next Development Version
6 months ago
da46ba2619
Update Password Samples for Nullability
...
Issue gh-16226
6 months ago
a406f5fe2d
Merge remote-tracking branch 'origin/6.5.x'
6 months ago
dcb4e47cd5
Add Include-Code to the Password Storage page
...
References gh-16226
Signed-off-by: Himanshu Pareek <himanshupareekiit01@gmail.com>
6 months ago
82f87cf2b6
Next Development Version
6 months ago
0a2f55d485
Clarify Nullability in Granted Authority Lambda
...
Issue gh-17999
6 months ago
9b61533db2
Mark `GrantedAuthority#getAuthority` as `@Nullable`
...
Closes: gh-17999
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
6 months ago
eb43830260
Polish JavaDoc
...
1. Removed comment about not changing field name in a
serialized object as this is true for all fields in a
Java-serialize POJO
2. Added example value for the constructor that demonstrates
the relationship between a role and an authority
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
6 months ago
b55c28cf25
Polish SimpleGrantedAuthority
...
1. Add Javadoc to state that role is prefixed.
2. Rename constructor argument from `role` to `authority` for better readability.
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
6 months ago
0927bed66a
📔 Documentation
...
1. Correct the org.springframework.security.config.annotation.web.LogoutDsl's property description
Signed-off-by: Simon Von <g1672943850@gmail.com>
6 months ago
9ed446e6f5
Next Development Version
6 months ago
d5e6da5aba
Release 7.0.0-RC1
6 months ago
4d2bd30c75
Update to Reactor 2025.0.0-RC1
...
Closes gh-18087
6 months ago
5acad99852
Revert "Release 7.0.0-RC1"
...
This reverts commit e616688f56cb8be6b8ce4d96ea3815ddfe34d6bf.
6 months ago
e616688f56
Release 7.0.0-RC1
6 months ago
56a23d9ddc
Release 6.5.6
6 months ago
dc5aed9b5f
Release 6.4.12
6 months ago
9c7b34a48b
Favor Relative Redirects by Default
...
Closes gh-16300
6 months ago
d5d7fd414d
Update What's New
6 months ago
491a3e8f68
Update to Spring LDAP 4.0.0-RC1
...
Closes gh-18086
6 months ago
43d20ea91f
Update to Spring Data 2025.1.0-RC1
...
Closes gh-18085
6 months ago
24241d0384
Update to Spring Framework 7.0.0-RC1
...
Closes gh-18084
6 months ago
cb8c2b090c
Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.19 to 1.5.20.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.19...v_1.5.20 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
e94de4d0e3
Merge branch '6.5.x'
6 months ago
cb994aad6c
Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
6 months ago
6f6ee0c060
Bump org.springframework.data:spring-data-bom from 2024.1.10 to 2024.1.11
6 months ago
9cecc2cf09
Merge branch '6.4.x' into 6.5.x
6 months ago
f19c9c8625
Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
6 months ago
95abf61c88
Refine Jackson 3 format description
6 months ago
22cbb13f7d
Add comments to SQL-scripts to ensure robust timezone handling
...
Issue https://github.com/spring-projects/spring-authorization-server/pull/2217
6 months ago
fc8b6b5863
Return PAR endpoint metadata only when enabled
...
Issue https://github.com/spring-projects/spring-authorization-server/issues/2219
6 months ago
8b89e31e3d
Bump org.springframework.data:spring-data-bom
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2024.1.10 to 2024.1.11.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2024.1.10...2024.1.11 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2024.1.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
67b15be917
Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.19 to 1.5.20.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.19...v_1.5.20 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
217a29e6ba
Bump org.springframework.data:spring-data-bom
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2024.1.10 to 2024.1.11.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2024.1.10...2024.1.11 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2024.1.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
b2d6380633
Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.19 to 1.5.20.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.19...v_1.5.20 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
9dc27bee03
Link to gh-18077
6 months ago
a181733365
Encapsulate GenericHttpMessageConverterAdapter
...
This will allow its removal in gh-18073
6 months ago
51e8f8f1c6
Deprecate WebAuthnAuthenticationFilter.setConverter(GenericHttpMessageConverter)
...
This makes sense given that Framework's new Jackson support is a
SmartHttpMessageConverter. Additionally,
GenericHttpMessageConverterAdapter is now package private to encapsulate
it.
Issue gh-18073
6 months ago
d309f1887e
Remove Extra Blank Line from CoreJacksonModule
6 months ago
5e851e0b26
Remove JdbcOAuth2AuthorizationService.Mapper
...
- We should not introduce an unnecessary public API
- It would need to be removed when Jackson 2 support was removed, but
was required to configure Jackson 3 support
- There are already existing interfaces that could be used
- OAuth2AuthorizationRowMapper & OAuth2AuthorizationParametersMapper had
unnecessary breaking changes by removing getter/setter for ObjectMapper
- To prevent NoClassDefFoundErrors all optional (Jackson) dependencies
need to be on different classes & we wish to preserve the existing
accessors for ObjectMapper which is this uses subclasses
- With added TestAuthenticationTokenMixin support, no need to explicitly
add it in tests
6 months ago
803936cfbe
JacksonDelegate uses SecurityJacksonModules
6 months ago
50568da1e5
Add Jackson 3 TestingAuthenticationToken Support
...
Without this many of the tests fail when using Jackson 3
6 months ago
Andrey Litvitski
Josh Cummings
Marcus Hert da Coregio
Himanshu Pareek
Rob Winch
Yanming Zhou
Simon Von
github-actions[bot]
dependabot[bot]
Joe Grandja