github-actions[bot]
9bd793ffe6
Release 7.0.4
3 days ago
Josh Cummings
a2c0ac112b
Update to spring-security-release-tools 1.0.15
...
Closes gh-18909
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
3 days ago
Josh Cummings
ea6e7ab78f
Merge branch '6.5.x' into 7.0.x
3 days ago
Josh Cummings
01ff3b086a
Add Workflow for Deferring Issues
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
3 days ago
Rob Winch
e8cb0ef541
Merge Fix Jackson Deserializer for AuthenticationExtensionsClientOutputs
3 days ago
Rob Winch
33e6f4bd3f
Merge Fix Jackson Deserializer for AuthenticationExtensionsClientOutputs
3 days ago
Rob Winch
524ae92f6b
Merge Add Jackson Mixin for WebAuthnAuthentication
...
Add Jackson Mixin for WebAuthnAuthentication
3 days ago
Toshiaki Maki
47146f375b
Add Jackson Mixin for WebAuthnAuthentication
...
Closes gh-18034
Signed-off-by: Toshiaki Maki <makingx@gmail.com>
3 days ago
Robert Winch
e7080e8c7c
Update Antora UI Spring to v0.4.26
3 days ago
Robert Winch
c348a7aa46
Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.4
3 days ago
Robert Winch
f227934749
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
3 days ago
Robert Winch
e645aef3be
Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.4
3 days ago
Robert Winch
b238632fdc
Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6
3 days ago
Robert Winch
3f05f4d30c
Merge branch '6.5.x' into 7.0.x
3 days ago
Robert Winch
cdd4b36d37
Update Antora UI Spring to v0.4.26
3 days ago
Robert Winch
7672f76fde
Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16
3 days ago
Robert Winch
3db4999da4
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
3 days ago
dependabot[bot]
3813627a15
Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.5 to 7.0.6.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 days ago
dependabot[bot]
9616e6b640
Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.4
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2025.1.3 to 2025.1.4.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.3...2025.1.4 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2025.1.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 days ago
dependabot[bot]
a708d2f61b
Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.16 to 6.2.17.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.2.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 days ago
Ziqin Wang
ae827b6e1b
Fix Jackson 3 deserializer for AuthenticationExtensionsClientOutputs
...
The deserializer is updated to properly ignore unknown extensions.
This fix addresses the WebAuthn authentication failure appeared when
using FIDO2 security keys on Safari.
Closes gh-18643
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net>
4 days ago
Ziqin Wang
65bf54d842
Test Jackson 3 deserializer with unknown primitive WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net>
4 days ago
Ziqin Wang
7f75fd611e
Test Jackson 3 deserializer with unknown obj/arr WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net>
4 days ago
Ziqin Wang
a013bfaaec
Merge branch 'gh-18643-6.5.x' into gh-18643-7.0.x
4 days ago
Ziqin Wang
e726c05e76
Fix Jackson 2 deserializer for AuthenticationExtensionsClientOutputs
...
The deserializer is updated to properly ignore unknown extensions.
Closes gh-18643
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net>
4 days ago
Ziqin Wang
a7039fb3e6
Test Jackson 2 deserializer with unknown primitive WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net>
4 days ago
Ziqin Wang
88ea668f47
Test Jackson 2 deserializer with unknown obj/arr WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net>
4 days ago
github-actions[bot]
2c1c50ddca
Update Antora Spring UI to v0.4.26
6 days ago
github-actions[bot]
03a5de1955
Update Antora Spring UI to v0.4.26
6 days ago
dependabot[bot]
91167adaa8
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 days ago
dependabot[bot]
06cbea383e
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 days ago
Andrey Litvitski
e250236279
Read relayState from authenticationRequest
...
Closes gh-18243
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
7 days ago
Josh Cummings
5b4fc73878
Merge branch '6.5.x' into 7.0.x
1 week ago
Josh Cummings
ef76ba040d
Require non-null authenticationRequest
...
Closes gh-18880
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
1 week ago
dependabot[bot]
763a8d4691
Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.4
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2025.0.3 to 2025.0.4.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2025.0.3...2025.0.4 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2025.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 week ago
dependabot[bot]
d69af716c8
Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2024.0.15 to 2024.0.16.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2024.0.15...2024.0.16 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2024.0.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 week ago
Joe Grandja
1906075b0c
OAuth2DeviceVerificationEndpointFilter is applied after AuthorizationFilter
...
Closes gh-18873
1 week ago
Ronny Perinke
e8e0da1ec6
Add Null Guard for Setting ReactiveUserDetailsPasswordService
...
This use case specifically arises when using `ReactiveUserDetailsService`
without `ReactiveUserDetailsPasswordService`.
Closes gh-17986
Signed-off-by: Ronny Perinke <23166289+sephiroth-j@users.noreply.github.com>
1 week ago
Rob Winch
2f81d2d99e
Merge Fix spring-security-webauthn dependency in passkeys documentation
1 week ago
Rob Winch
6cf4a5eed9
Merge Fix CookieRequestCache parameters
1 week ago
Robert Winch
26937bf06c
Remove unnecessary webauthn4j dependency
1 week ago
Rob Winch
7e37aa2b75
Merge Fix CookieRequestCache parameters
1 week ago
Tran Ngoc Nhan
8e8e1a80a9
Add Passkeys webauthn in example
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
1 week ago
Robert Winch
3110c9074f
Merge Fix CookieRequestCache parameters
1 week ago
Vishnutheep B
07bfe371b4
Fix CookieRequestCache parameters
...
Previously the parameters were not restored.
This commit ensures the parameters are restored.
Closes gh-18204
Signed-off-by: Vishnutheep B <vishnutheep@gmail.com>
1 week ago
Robert Winch
c29775a79e
Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs
1 week ago
Robert Winch
bc96812461
Bump org.apache.maven:maven-resolver-provider from 3.9.12 to 3.9.13
1 week ago
Robert Winch
7d9c2ce9d7
Merge branch '6.5.x' into 7.0.x
1 week ago
Robert Winch
e12edf43f2
Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs
1 week ago
dependabot[bot]
ca6dccf8d7
Bump org.apache.maven:maven-resolver-provider from 3.9.12 to 3.9.13
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.12 to 3.9.13.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
1 week ago