spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	ea05089443	Polish Formatting Closes gh-18381 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	1 week ago
Giacomo Baso	7b282c3a17	Relax client_id validation in AtJwtBuilder RFC 9068 requires that access token JWTs include the `client_id` claim, but it does not require resource servers to validate it against a specific value. Relates to gh-18381 Signed-off-by: Giacomo Baso <gbaso@users.noreply.github.com>	1 week ago
Josh Cummings	78015d251c	Merge branch '7.0.x'	1 week ago
Josh Cummings	956561e143	Merge branch '6.5.x' into 7.0.x	1 week ago
Rob Winch	9fed1ac8c3	New line per sentence Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>	1 week ago
Josh Cummings	9dbe3bdcc0	Polish Session Management Persistence Docs Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	1 week ago
sankranti	d547ae0181	Fix defaults description in Session Management doc Corrected that starting from Spring Security 6 security context is not automatically saved by default. Signed-off-by: sankranti <sankranty@gmail.com>	1 week ago
Josh Cummings	e88cb81a7a	Merge branch '7.0.x'	1 week ago
dependabot[bot]	b8b1278e1f	Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.7 to 1.14.9. - [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.7...v1.14.9) --- updated-dependencies: - dependency-name: "@springio/antora-extensions" dependency-version: 1.14.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	381047e386	Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 Bumps [spring-io/spring-security-release-tools](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](`729fed56d4...b92832ecbc`) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
Josh Cummings	fbbbd46bee	Update asciidoctor-extensions to 1.0.0-alpha.18 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	1 week ago
Josh Cummings	fe0d7de41b	Update LDAP Nullability Checkstyle Rules Issue gh-17818 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	1 week ago
Josh Cummings	c2fd0f23fe	Merge branch '7.0.x'	1 week ago
Josh Cummings	8abffbd0df	Merge branch '6.5.x' into 7.0.x	1 week ago
dependabot[bot]	376b40a735	Bump io.spring.gradle:spring-security-release-plugin Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.14...v1.0.15) --- updated-dependencies: - dependency-name: io.spring.gradle:spring-security-release-plugin dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	89fa1cbdd2	Bump spring-io/spring-security-release-tools/.github/workflows/build.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/build.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](`729fed56d4...b92832ecbc`) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/build.yml dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	0d75e6d10c	Bump @springio/asciidoctor-extensions in /docs Bumps [@springio/asciidoctor-extensions](https://github.com/spring-io/asciidoctor-extensions) from 1.0.0-alpha.17 to 1.0.0-alpha.18. - [Changelog](https://github.com/spring-io/asciidoctor-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/asciidoctor-extensions/compare/v1.0.0-alpha.17...v1.0.0-alpha.18) --- updated-dependencies: - dependency-name: "@springio/asciidoctor-extensions" dependency-version: 1.0.0-alpha.18 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	01758c4c59	Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](`729fed56d4...b92832ecbc`) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	f37833a59c	Bump spring-io/spring-security-release-tools/.github/workflows/test.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/test.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](`729fed56d4...b92832ecbc`) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/test.yml dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	52e6c4c4be	Bump spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](`729fed56d4...b92832ecbc`) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/deploy-schema.yml dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	874dce4407	Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.7 to 1.14.9. - [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.7...v1.14.9) --- updated-dependencies: - dependency-name: "@springio/antora-extensions" dependency-version: 1.14.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	f21e8af830	Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](`729fed56d4...b92832ecbc`) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	4354e47b0a	Bump gradle-wrapper from 9.4.0 to 9.4.1 Bumps gradle-wrapper from 9.4.0 to 9.4.1. --- updated-dependencies: - dependency-name: gradle-wrapper dependency-version: 9.4.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	399ef5b663	Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15 Bumps [spring-io/spring-security-release-tools](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.14...b92832ecbc7cbe969201e6beafbde0ee400cf095) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	1f39525052	Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.7 to 1.14.9. - [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.7...v1.14.9) --- updated-dependencies: - dependency-name: "@springio/antora-extensions" dependency-version: 1.14.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	7a0a29b800	Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](`729fed56d4...b92832ecbc`) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	9dfbd681ab	Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/perform-release.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.14...b92832ecbc7cbe969201e6beafbde0ee400cf095) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/perform-release.yml dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	4e53ebb75b	Bump spring-io/spring-security-release-tools/.github/workflows/test.yml Bumps [spring-io/spring-security-release-tools/.github/workflows/test.yml](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15. - [Release notes](https://github.com/spring-io/spring-security-release-tools/releases) - [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc) - [Commits](`729fed56d4...b92832ecbc`) --- updated-dependencies: - dependency-name: spring-io/spring-security-release-tools/.github/workflows/test.yml dependency-version: 1.0.15 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
dependabot[bot]	7eed4641da	Bump flatted from 3.3.1 to 3.4.2 in /javascript Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.1 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	1 week ago
Joe Grandja	09ce639c4b	Enable null-safety in spring-security-oauth2-resource-server Closes gh-17822	2 weeks ago
Joe Grandja	1cb9db4f2d	Remove checkstyle suppressions for spring-security-oauth2-resource-server Issue gh-17822	2 weeks ago
Gasper Kojek	14d469cec1	Exclude target directories from checkstyleNohttp source inputs The kerberos-client/target and kerberos-test/target directories contain .keytab files generated during test execution. These directories only exist after the first build, causing a cache miss for checkstyleNohttp in subsequent builds since the source input set changes. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Gasper Kojek <gkojek@gradle.com>	2 weeks ago
Gasper Kojek	49bea1dd15	Exclude build output directories from nohttp source set The checkstyleNohttp task scans the entire project tree for non-HTTPS URLs. Without excluding /build/, subproject build output directories generated during the first build become additional source inputs for subsequent builds, changing the cache key and causing cache misses. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Gasper Kojek <gkojek@gradle.com>	2 weeks ago
Joe Grandja	baad23caab	Enable null-safety in spring-security-oauth2-client Closes gh-17819	2 weeks ago
Joe Grandja	bb062585a8	Remove checkstyle suppressions for spring-security-oauth2-client Issue gh-17819	2 weeks ago
Robert Winch	ea2f2302da	Add MultiFactorCondition.WEBAUTHN_REGISTERED Closes gh-18923	2 weeks ago
Robert Winch	bd7171140e	Support Customizer<AdditionalRequiredFactorsBuilder<Object>>> Closes gh-18922	2 weeks ago
Robert Winch	c71b178f63	Remove Unnecessary ObjectProvider<RoleHierarchy> roleHierarchy parameter Closes gh-18921	2 weeks ago
Robert Winch	28acf62936	AuthorizationManagerFactories.when Closes gh-18920	2 weeks ago
Robert Winch	8224b16caf	Add ConditionalAuthorizationManager Closes gh-18919	2 weeks ago
dependabot[bot]	5a827d86d5	Bump org-jetbrains-kotlin from 2.3.10 to 2.3.20 Bumps `org-jetbrains-kotlin` from 2.3.10 to 2.3.20. Updates `org.jetbrains.kotlin:kotlin-bom` from 2.3.10 to 2.3.20 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/v2.3.20/ChangeLog.md) - [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.10...v2.3.20) Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.3.10 to 2.3.20 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/v2.3.20/ChangeLog.md) - [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.10...v2.3.20) --- updated-dependencies: - dependency-name: org.jetbrains.kotlin:kotlin-bom dependency-version: 2.3.20 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin dependency-version: 2.3.20 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 weeks ago
dependabot[bot]	67c5b4f5a2	Bump org.hibernate.orm:hibernate-core from 7.2.7.Final to 7.3.0.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.2.7.Final to 7.3.0.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.0/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/7.2.7...7.3.0) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 7.3.0.Final dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 weeks ago
dependabot[bot]	8f30567b83	Bump @springio/asciidoctor-extensions in /docs Bumps [@springio/asciidoctor-extensions](https://github.com/spring-io/asciidoctor-extensions) from 1.0.0-alpha.17 to 1.0.0-alpha.18. - [Changelog](https://github.com/spring-io/asciidoctor-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/asciidoctor-extensions/compare/v1.0.0-alpha.17...v1.0.0-alpha.18) --- updated-dependencies: - dependency-name: "@springio/asciidoctor-extensions" dependency-version: 1.0.0-alpha.18 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 weeks ago
github-actions[bot]	e044c24952	Next development version	2 weeks ago
github-actions[bot]	8aae3490da	Next development version	2 weeks ago
github-actions[bot]	9bd793ffe6	Release 7.0.4	2 weeks ago
github-actions[bot]	ab4092dce1	Release 7.1.0-M3	2 weeks ago
github-actions[bot]	96ceb535f4	Next development version	2 weeks ago
Josh Cummings	82e5b88947	Merge branch '7.0.x'	2 weeks ago
Josh Cummings	a2c0ac112b	Update to spring-security-release-tools 1.0.15 Closes gh-18909 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 weeks ago

1 2 3 4 5 ...

20633 Commits (ea050894434ace00a09542b36c200571f02c1da9) All Branches Search

20633 Commits (ea050894434ace00a09542b36c200571f02c1da9)

All Branches