spring-security

Commit Graph

Author	SHA1	Message	Date
Robert Winch	26937bf06c	Remove unnecessary webauthn4j dependency	1 week ago
Tran Ngoc Nhan	8e8e1a80a9	Add Passkeys webauthn in example Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	1 week ago
Andrey Litvitski	57434fc597	Update RestTemplateBuilder usage in opaque-token.adoc We just now use a new form instead of the deprecate one. Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	2 weeks ago
HaiYan	706b059ea8	Update logout.adoc Directives should be Directive Signed-off-by: HaiYan <haiyan_qi@hotmail.com>	2 weeks ago
Josh Cummings	4501ae7d1c	Update Reactive Resource Server startup exceptations Issue gh-16708 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	3 weeks ago
Josh Cummings	48112d3d74	Polish Resource Server startup expectations Issue gh-16708 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	3 weeks ago
[CLOUD4] 한현	b8735abb63	Clarify Resource Server startup expectations Clarify that Spring Boot defers OIDC discovery by default. Closes gh-16708 Signed-off-by: [CLOUD4] 한현 <gusgus1467@naver.com>	3 weeks ago
Tran Ngoc Nhan	7c3c8bbdcb	Update Remember-Me example Closes gh-18639 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	3 weeks ago
Guillaume Husta	68a02ff176	Update Link to CRSF Docs in FAQ Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>	3 weeks ago
Josh Cummings	4d43edfb20	Polish Documentation - Combined explanation of method attribute with usage recommendations - Used one sentence per line format Issue gh-16530 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	3 weeks ago
onhann	9f9699f8a5	Clarify need for method attribute in JSP authorize tag Closes gh-16530 This aligns the JSP documentation with the changes made in gh-16529. Added a NOTE to clarify that the method attribute is required when the underlying RequestMatcher is method-specific. Signed-off-by: onhann <gusgus1467@naver.com>	3 weeks ago
Robert Winch	fec988c82d	Add Kerberos Migration Section This links to the updated dependency coordinates Issue gh-18773 Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com>	3 weeks ago
busoco-sjb	17b434c1c1	Document the change in dependency coordinates with Spring Security 7 Signed-off-by: busoco-sjb <169069865+busoco-sjb@users.noreply.github.com>	3 weeks ago
Vincent Stradiot	075c48c0d8	Fix typo in documentation Signed-off-by: Vincent Stradiot <vincentstradiot@hotmail.com>	1 month ago
Elayne Bloom	2c97b3376b	Document Client PKCE settings Updated the documentation to reflect recent changes to enable PKCE by default for `authorization_code` flows in the documentation for the client. Closes gh-18304 Signed-off-by: Elayne Bloom <5840349+bloomsei@users.noreply.github.com>	1 month ago
songhee	fee6a9bb0e	docs: add CurrentSecurityContext section and link references Signed-off-by: songhee <songhee9327@gmail.com>	2 months ago
Guillaume Husta	508b3f26e3	docs: Typo in page Preparing for 7.0 / Web (version 6.5) In section 'Include the Servlet Path Prefix in Authorization Rules', `PathPatternRequestParser` should be replaced by `PathPatternRequestMatcher`. Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>	2 months ago
Robert Winch	63c99b9438	Revert "Update to 7.1.0-SNAPSHOT" This reverts commit `b77ea8d3a3`.	2 months ago
Robert Winch	b77ea8d3a3	Update to 7.1.0-SNAPSHOT	2 months ago
Fr05ty-hub	e9a92a8e9a	Replacing use of deprecated 'check' in authorization documentation check() was deprecated in Spring Security 7, but is referenced in documentation Signed-off-by: Fr05ty-hub <frostylucas@gmail.com>	2 months ago
Fr05ty-hub	ed774d3595	Replacing use of deprecated 'check' in authorization documentation check() was deprecated in Spring Security 7, but was referenced in documentation Signed-off-by: Fr05ty-hub <frostylucas@gmail.com>	2 months ago
Robert Winch	2344fe5ebb	Use proper xref syntax Incldue the required resource id and required # of the fragment. See - https://docs.antora.org/antora/latest/page/xref/#xref-macro - https://docs.antora.org/antora/latest/page/resource-id-coordinates/#id-resource	2 months ago
Tran Ngoc Nhan	ba18f681e5	Use xref anchor id Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Tran Ngoc Nhan	3d9bc6a5cf	Update mfa.adoc Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Martin Boulais	1d8ea63a9e	Fix typo in HTTP Basic Auth Provider documentation The documentation states that setting the header `X-Requested-By` will remove the `WWW-Authenticate` header from the response. However, after testing this and reading the library code it looks like the header to set is `X-Requested-With` (X-Requested-By is mentioned nowhere except in this documentation file), so I propose this simple PR to fix this. Signed-off-by: Martin Boulais <31805063+martinboulais@users.noreply.github.com>	2 months ago
Tran Ngoc Nhan	79815e044e	Fix typos Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Josh Cummings	765abe534e	Add Missing Migration Pages to Side Navigation Closes gh-18313	3 months ago
Josh Cummings	afb0c59875	Add request-matcher XML Migration Steps Closes gh-18211	3 months ago
kucoll	10edc14d7e	Fix typo in AnnotationTemplateExpressionDefaults The AnnotationTemplateExpressionDeafults was wrong，and right is AnnotationTemplateExpressionDefaults Signed-off-by: kucoll <kucoll@163.com>	4 months ago
kucoll	7503d8018d	Fix typo in AnnotationTemplateExpressionDefaults The AnnotationTemplateExpressionDeafults was wrong，and right is AnnotationTemplateExpressionDefaults Signed-off-by: kucoll <kucoll@163.com>	4 months ago
Guillaume Husta	1ce73dd45a	docs: Fix example in Custom DSLs for http.csrf() It should use lambda dsl to compile Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>	4 months ago
Guillaume Husta	bb7fcb27ef	docs: Fix example in MyCustomDsl to remove throws Exception In `init` and `configure`, throws Exception has been removed in the super interface `SecurityConfigurer`, since Spring Security 7.0. This change is the consequence of https://github.com/spring-projects/spring-security/issues/17957 Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com>	4 months ago
sach429	19cbd9c570	Update OAuth2 Client to OAuth2 Resource Server Fix section title to match the corresponding example Signed-off-by: sach429 <satrajit.acharya@gmail.com>	4 months ago
L33gn21	b37c5584f9	Fix broken link to Spring Boot docs Signed-off-by: L33gn21 <l33gn21@gmail.com>	4 months ago
Peter Potrowl	d84d0ca22e	Fix typo in ldap.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	f1793f5047	Fix typo in passkeys.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	4b227649f0	Fix typo in ldap.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	cfc27f8cc3	Fix typo in passkeys.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	5baff27ffb	Fix typo in ldap.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Peter Potrowl	39aaf25b60	Fix typo in passkeys.adoc Signed-off-by: Peter Potrowl <peter.potrowl@gmail.com>	4 months ago
Joe Grandja	b130e728b7	Polish gh-18153 Issue gh-18144	4 months ago
Andrey Litvitski	e6db56ab4f	Add a minimal authorization server configuration Closes gh-18144 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	4 months ago
Joe Grandja	571bd60d82	Document OAuth 2.0 Protected Resource Metadata support Issue gh-17244	5 months ago
Daniel Garnier-Moiroux	fed6df5167	Default WebAuthnConfigurer#rpName to rpId In WebAuthn L3 spec, PublicKeyCredentialEntity.name is deprecated: > This member is deprecated because many clients do not display it, > but it remains a required dictionary member for backwards compatibility. > Relying Parties MAY, as a safe default, set this equal to the RP ID. Source: https://www.w3.org/TR/webauthn-3/#dictdef-publickeycredentialentity Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	5 months ago
Daniel Garnier-Moiroux	4feeb0f843	Docs: document effects of disabling CORS configurer Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	5 months ago
Rob Winch	884cf0d62e	EnableGlobalMultiFactorAuthentication->EnableMultiFactorAuthentication Closes gh-18127	5 months ago
Joe Grandja	b6ed037c39	Document device_code grant disabled by default Issue gh-17998	5 months ago
Joe Grandja	5da0cbea4b	Document OAuth 2.0 Dynamic Client Registration support Issue gh-17964	5 months ago
Joe Grandja	e6b4d461e7	Fix OAuth2AuthorizationServerJacksonModule type validator configuration Closes gh-18102	5 months ago
Himanshu Pareek	dcb4e47cd5	Add Include-Code to the Password Storage page References gh-16226 Signed-off-by: Himanshu Pareek <himanshupareekiit01@gmail.com>	5 months ago

1 2 3 4 5 ...

1371 Commits (7.0.4)