Josh Cummings
fbdf4a88a0
Merge branch '6.3.x' into 6.4.x
9 months ago
snowykte0426
260d298cc5
Add Migration Guide from Spring Security SAML Extension
...
This adds a dedicated migration guide for users moving from the Spring Security SAML Extension to the built-in SAML 2.0 support.
Includes:
- Content migrated from the project wiki
- xref links for `saml2Login`, `saml2Logout`, and `saml2Metadata`
- Metadata example moved to Examples Matrix
- Cleanup and naming per review feedback
Closes gh-11161
Signed-off-by: snowykte0426 <snowykte0426@naver.com>
9 months ago
Rob Winch
b38cf1fc16
Merge branch 'gradle/6.4.x/org.hibernate.orm-hibernate-core-6.6.15.Final' into 6.4.x
9 months ago
Rob Winch
5a2bd2b825
Merge branch '6.3.x' into 6.4.x
...
- Bump io.projectreactor:reactor-bom from 2023.0.17 to 2023.0.18
Closes gh-17110
9 months ago
dependabot[bot]
91afd49faf
Bump org.hibernate.orm:hibernate-core from 6.6.14.Final to 6.6.15.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.14.Final to 6.6.15.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.15/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.14...6.6.15 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.15.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
dependabot[bot]
78a60d0d84
Bump io.projectreactor:reactor-bom from 2023.0.17 to 2023.0.18
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2023.0.17 to 2023.0.18.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2023.0.17...2023.0.18 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2023.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
dependabot[bot]
d34fd236f6
Bump io.micrometer:micrometer-observation from 1.14.6 to 1.14.7
...
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer ) from 1.14.6 to 1.14.7.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.6...v1.14.7 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.14.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
dependabot[bot]
ad934efc24
Bump org.hibernate.orm:hibernate-core from 6.6.13.Final to 6.6.14.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.13.Final to 6.6.14.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.14/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.13...6.6.14 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.14.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
dependabot[bot]
11eac05dfd
Bump org-apache-maven-resolver from 1.9.22 to 1.9.23
...
Bumps `org-apache-maven-resolver` from 1.9.22 to 1.9.23.
Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.22 to 1.9.23
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.23 )
Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.22 to 1.9.23
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.23 )
Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.22 to 1.9.23
---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
Josh Cummings
3a36197d7a
Merge branch '6.3.x' into 6.4.x
9 months ago
dependabot[bot]
a001f27690
Bump org-apache-maven-resolver from 1.9.22 to 1.9.23
...
Bumps `org-apache-maven-resolver` from 1.9.22 to 1.9.23.
Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.22 to 1.9.23
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.23 )
Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.22 to 1.9.23
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.23 )
Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.22 to 1.9.23
---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
Josh Cummings
5ba4ab5e11
Merge branch '6.3.x' into 6.4.x
9 months ago
Danilo Piazzalunga
27319e3f9b
Add missing registration property in YAML listing
...
Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>
9 months ago
Danilo Piazzalunga
ec462e8bc5
Update assertingparty property usage in YAML snippets
...
Spring Boot 2.7 renamed spring.security.saml2.relyingparty.registration.*.identityprovider.*
to spring.security.saml2.relyingparty.registration.*.assertingparty.*.
Closes gh-12810.
Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com>
9 months ago
dependabot[bot]
8fcf181ff0
Bump com.fasterxml.jackson:jackson-bom from 2.18.3 to 2.18.4
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.3 to 2.18.4.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.3...jackson-bom-2.18.4 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.18.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
dependabot[bot]
dd0b26a992
Bump io.spring.gradle:spring-security-release-plugin from 1.0.5 to 1.0.6
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.5...v1.0.6 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
dependabot[bot]
a4111a606b
Bump io.spring.gradle:spring-security-release-plugin from 1.0.5 to 1.0.6
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.5...v1.0.6 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
9 months ago
Rob Winch
63d79a97db
Merge branch '6.3.x' into 6.4.x
...
- Correct method name in logout.adoc
Closes gh-17048
9 months ago
Tran Ngoc Nhan
505fe3abed
Correct method name
...
Closes gh-17031
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
Josh Cummings
0220e471bb
Move Serialization Samples
...
To make SpringSecurityCoreVersionSerializableTests more manageable,
this commit moves the sample class constructions to a separate file.
In this way, the tests file only changes when serialization tests are
added. When classes are introduced, they can be added to SerializationSamples,
separating the two concerns
9 months ago
Josh Cummings
c3c2bcd6b7
Ignore Serialization in Test Components
...
Since we don't need to ensure the serializability of test components
across versions, we can ignore missing version UIDs when those
test components aren't about testing Java serialization.
Issue gh-17038
9 months ago
Josh Cummings
39fdceab59
Add Missing Serializable Samples
...
Issue gh-17038
9 months ago
Josh Cummings
65d53beff8
Polish Serialization Tests
...
- Error when public, non-ignored, serializable file is missing a sample
- Provide mechanism for creating an InstancioApi from scratch
Issue gh-17038
9 months ago
Josh Cummings
34afa64c0c
Add Current-Version Deserialization Test
...
We should test that serialized files from the current minor version
can be deserialized. This ensures that serializations remain
deserializable in patch releases.
Issue gh-3737
9 months ago
Rob Winch
b5e1c3770b
Merge branch '6.3.x' into 6.4.x
...
- remove update-dependabot action
9 months ago
Rob Winch
9710492619
remove update-dependabot action
9 months ago
Rob Winch
6dc8cd1f60
Merge branch '6.3.x' into 6.4.x
...
- Use pull-request: write for gradlew updates
9 months ago
Rob Winch
9436796973
Use pull-request: write for gradlew updates
...
Explicitly provide the permissions required for updating the Gradle
wrapper
9 months ago
Josh Cummings
92160fa26f
Merge branch '6.3.x' into 6.4.x
...
Closes gh-17034
9 months ago
Josh Cummings
51239359ed
Fix ClearSiteData Code Snippet
...
Closes gh-16948
9 months ago
Josh Cummings
57fc29e614
Merge branch '6.3.x' into 6.4.x
...
Closes gh-17032
9 months ago
Josh Cummings
e48f26e51e
Propagate StrictFirewallRequest Wrapper
...
Closes gh-16978
9 months ago
Rob Winch
a26a64d213
Merge branch '6.3.x' into 6.4.x
...
- codeql uses ubuntu-latest
9 months ago
Rob Winch
3b7e3a6c5c
codeql uses ubuntu-latest
9 months ago
Rob Winch
fa533ea5e2
Merge branch '6.3.x' into 6.4.x
...
- rm mark-duplicate-dependabot-prs.yml
9 months ago
Rob Winch
a04025c114
rm mark-duplicate-dependabot-prs.yml
9 months ago
Rob Winch
99cede5e08
Merge branch '6.3.x' into 6.4.x
...
- Remove automerge forward
9 months ago
Rob Winch
1564076276
Remove automerge forward
9 months ago
Rob Winch
389ba794fa
Merge branch '6.3.x' into 6.4.x
...
- Add .github/workflows/codeql.yml
9 months ago
Rob Winch
ae09f36291
Add .github/workflows/codeql.yml
9 months ago
Josh Cummings
c4a0dfe838
Merge remote-tracking branch 'origin/6.3.x' into 6.4.x
9 months ago
Soumik Sarker
bcef6ed74f
Reformatted lines in x509 overview documentation
...
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
9 months ago
Josh Cummings
d02a9a3c46
Merge branch '6.3.x' into 6.4.x
9 months ago
github-actions[bot]
c8581683da
Bump Gradle Wrapper from 8.13 to 8.14.
...
Release notes of Gradle 8.14 can be found here:
https://docs.gradle.org/8.14/release-notes.html
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
9 months ago
Josh Cummings
a4126aa27d
Merge branch '6.3.x' into 6.4.x
9 months ago
Josh Cummings
f631a0fcd5
Polish ClientRegistrationsTests
...
Simplified the assertion so that it is focused on the core
behavior being verified. This will likely also make the test
more stable when updating Spring Framework versions.
Issue gh-16860
9 months ago
Josh Cummings
656ad72608
Merge branch '6.3.x' into 6.4.x
...
Closes gh-17016
9 months ago
Evgeniy Cheban
0e84f31a00
Add ClientRegistration's RestClient failed attempts information to exception message
...
Closes gh-16860
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>
9 months ago
Josh Cummings
d76ccc6856
Merge branch '6.3.x' into 6.4.x
9 months ago
Yanming Zhou
9c76ab69f0
Use proper configuration key
...
the getter method is `getOpaquetoken()` not `getOpaqueToken()`
See c6045c3111/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java (L51)
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
9 months ago