spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	d3b143dab6	Move SAML 2.0 Migration Step Issue gh-17099	7 months ago
Josh Cummings	60c42e3f24	Update SAML 2.0 Documentation to use OpenSAML 5 Closes gh-17707	7 months ago
Josh Cummings	5506c487de	Remove OpenSaml4 Components Issue gh-17707	7 months ago
Josh Cummings	7aaead5b02	Add Missing Navigation In Preparing for 7.0 Guide Closes gh-17731	7 months ago
Josh Cummings	e1341b22e0	Clarify OpenSaml4 Component Removal Issue gh-17707	7 months ago
Tran Ngoc Nhan	dfc8be0d48	Fix typo Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	8 months ago
Tran Ngoc Nhan	371bee685f	Polish `User#withDefaultPasswordEncoder` Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	8 months ago
Marcin Lewandowski	f61a8deccc	Update index.adoc Signed-off-by: Marcin Lewandowski <marcin@ravendb.net>	8 months ago
Michał Sobkiewicz	c963f4250e	Update Angular documentation links in csrf.adoc Replaced `angular.io` links with their corresponding `angular.dev` URLs. This change ensures that users referencing CSRF documentation are directed to the most current Angular resources. Signed-off-by: Michał Sobkiewicz <perceptron8@users.noreply.github.com>	8 months ago
dependabot[bot]	99f689eb52	Bump @springio/antora-extensions from 1.14.6 to 1.14.7 in /docs Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.6 to 1.14.7. - [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.6...v1.14.7) --- updated-dependencies: - dependency-name: "@springio/antora-extensions" dependency-version: 1.14.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	8 months ago
dependabot[bot]	de14fb8f77	Bump @springio/antora-extensions from 1.14.6 to 1.14.7 in /docs Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.6 to 1.14.7. - [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.6...v1.14.7) --- updated-dependencies: - dependency-name: "@springio/antora-extensions" dependency-version: 1.14.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	8 months ago
Rob Winch	f6cb0bd610	Merge Use 2004-present Copyright Header The original merge into main did not apply the changes. This fixes it. Closes gh-17635	8 months ago
Bernie Schelberg	edcb3b024e	Update Shibboleth repository URL Signed-off-by: Bernie Schelberg <bernard.schelberg@invicara.com>	8 months ago
Josh Cummings	fca30e3d25	Update What's New in Spring Security 7 Closes gh-17582	8 months ago
dependabot[bot]	66ddfb43a0	Bump @springio/antora-extensions from 1.14.4 to 1.14.6 in /docs --- updated-dependencies: - dependency-name: "@springio/antora-extensions" dependency-version: 1.14.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	8 months ago
dependabot[bot]	759736672d	Bump @springio/antora-extensions from 1.14.4 to 1.14.6 in /docs Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.4 to 1.14.6. - [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.4...v1.14.6) --- updated-dependencies: - dependency-name: "@springio/antora-extensions" dependency-version: 1.14.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	8 months ago
Josh Cummings	0c42b61cc1	Restore legacy-websocket-configuration Link In this way, links to this section will still arrive at something helpful. Issue gh-17295	8 months ago
Josh Cummings	7960d2803d	Add Migration Steps for PathMatcher Usage Issue gh-17509	8 months ago
Josh Cummings	4b15b2b94e	Add Migration Steps for Messaging Closes gh-17509	8 months ago
Josh Cummings	2c87270dbc	Use authorizeHttpRequests Issue gh-15174	9 months ago
Josh Cummings	dadf10899c	Add WebExpressionAuthorizationManager.Builder Closes gh-17504	9 months ago
Josh Cummings	c312d18191	Add Publishing Predicate Closes gh-17503	9 months ago
Josh Cummings	9209a33678	Remove References to Deprecated OpenSaml Components Issue gh-11658	9 months ago
Rob Winch	e48fdd5ed4	Use UserWebTestClientConfigurer Closes gh-17496	9 months ago
Rob Winch	dbb3b7e1f5	Remove Unused import	9 months ago
Rob Winch	bfa2a3613c	Fix frameworkVersion Should not strip -SNAPSHOT	9 months ago
Josh Cummings	02d69ec864	Keep EnableWebMvcSecurity Link So that links across the Internet that are pointed at #mvc-enablewebmvcsecurity still arrive at a relevant place, this commit re-adds the mvc-enablewebmvcsecurity link, even though @EnableWebMvcSecurity itself is now removed. Issue gh-17294	9 months ago
Tran Ngoc Nhan	a439bc65d6	Remove EnableWebMvcSecurity Closes gh-17294 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
Tran Ngoc Nhan	242956a63c	Remove deprecated elements from DaoAuthenticationProvider Closes gh-17298 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
Tran Ngoc Nhan	9312fb7004	Remove Deprecated AuthorizationDecision Elements Closes gh-17299 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
Josh Cummings	ce107795d8	Fix Broken JavaDoc Link Issue gh-16886	9 months ago
Josh Cummings	b71a66bdaa	Use PathPatternRequestMatcher in docs Issue gh-16886 Issue gh-16887	9 months ago
Joe Grandja	e869bcdfa3	Remove deprecated implementations of OAuth2AccessTokenResponseClient Closes gh-16909	9 months ago
Joe Grandja	cfe38957d7	Remove Resource Owner Password Credentials grant Closes gh-17446	9 months ago
Konstantin Filtschew	e4a2ac27d6	Fixed link to CSRF checks	9 months ago
Rob Winch	00ead7f24d	Update to Kotlin 2.2	9 months ago
Tran Ngoc Nhan	e686ac6b11	Remove AbstractSecurityWebSocketMessageBrokerConfigurer Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
Josh Cummings	a4c338f8a5	Format authorizeExchange Blocks This commit formats authorizeExchange blocks to use a common variable name and ensure the variable and reference are on the same line. Issue gh-13067	9 months ago
Josh Cummings	777447e1d9	Format authorizeHttpRequests Blocks This commit formats authorizeHttpRequests blocks to use the same parameter name and places the reference on the same line as the parameter. Issue gh-13067	9 months ago
Josh Cummings	c43afbf5e1	Format Lambda Expressions This commit updats lambda expressions so that their variable is surrounded in parentheses. Issue gh-13067	9 months ago
Josh Cummings	09983e2349	Add ApacheDS Migration Steps Issue gh-13852	9 months ago
Josh Cummings	6ddb964c61	Remove ApacheDS Support Closes gh-13852	9 months ago
Rob Winch	b2325e4176	Add OAuth Support for HTTP Interface Client Closes gh-16858	9 months ago
Rob Winch	040ffe17e5	Add SubjectX500PrincipalExtractor to Whats New Issue gh-16984	9 months ago
Rob Winch	e3add59550	Update x509 Reference - Use include-code - Demo how to customize SubjectX500PrincipalExtractor	9 months ago
Rob Winch	7bf2730a53	Add x509@principal-extractor-ref Enables customizing the X500PrincipalExtractor	9 months ago
Rob Winch	88ed4a5ccf	Use principalExtractor reference instead of properties	9 months ago
Max Batischev	aba437d469	Add Support SubjectX500PrincipalExtractor Closes gh-16980 Signed-off-by: Max Batischev <mblancer@mail.ru>	9 months ago
Josh Cummings	9b724377ce	Rework Saml2 Authentication Statement This commit separates the authentication principal, the assertion details, and the relying party tenant into separate components. This allows the principal to be completely decoupled from how Spring Security triggers and processes SLO. Specifically, it adds Saml2AssertionAuthentication, a new authentication implementation that allows an Object principal and a Saml2ResponseAssertionAccessor credential. It also moves the relying party registration id from Saml2AuthenticatedPrincipal to Saml2AssertionAuthentication. As such, Saml2AuthenticatedPrincipal is now deprecated in favor of placing its assertion components in Saml2ResponseAssertionAccessor and the relying party registration id in Saml2AssertionAuthentication. Closes gh-10820	9 months ago
Lidoca	d0db5e3ea3	Update database-schema.adoc docs: match the database schema with https://github.com/spring-projects/spring-security/blob/6.5.0/docs/modules/ROOT/pages/servlet/authentication/passwords/jdbc.adoc Signed-off-by: Lidoca <32785562+Lidoca@users.noreply.github.com>	10 months ago

1 2 3 4 5 ...

2618 Commits (f6f7cc618047794d4e9899ee0db4bc2ce3a85f79)