From 6b007529bb6af3136d4d92854b9bbd2e4f661d4d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 8 Sep 2026 03:04:51 +0000 Subject: [PATCH 1/3] Bump org.slf4j:slf4j-api from 2.0.18 to 2.0.19 Bumps org.slf4j:slf4j-api from 2.0.18 to 2.0.19. --- updated-dependencies: - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index ca828fa58f..748b20d83c 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -82,7 +82,7 @@ org-seleniumhq-selenium-selenium-java = "org.seleniumhq.selenium:selenium-java:4 org-seleniumhq-selenium-selenium-support = "org.seleniumhq.selenium:selenium-support:3.141.59" org-skyscreamer-jsonassert = "org.skyscreamer:jsonassert:1.5.3" org-slf4j-log4j-over-slf4j = "org.slf4j:log4j-over-slf4j:1.7.36" -org-slf4j-slf4j-api = "org.slf4j:slf4j-api:2.0.18" +org-slf4j-slf4j-api = "org.slf4j:slf4j-api:2.0.19" org-springframework-data-spring-data-bom = "org.springframework.data:spring-data-bom:2025.1.7" org-springframework-ldap-spring-ldap-core = "org.springframework.ldap:spring-ldap-core:4.0.5" org-springframework-spring-framework-bom = { module = "org.springframework:spring-framework-bom", version.ref = "org-springframework" } From c4a46d100e51d0e0f9e37d822a06cfd2575de332 Mon Sep 17 00:00:00 2001 From: Tran Ngoc Nhan Date: Sat, 5 Sep 2026 18:11:04 +0700 Subject: [PATCH 2/3] Update Reactor's Context reference link Signed-off-by: Tran Ngoc Nhan --- docs/modules/ROOT/pages/reactive/authorization/method.adoc | 2 +- .../ROOT/pages/reactive/oauth2/client/authorization-grants.adoc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/modules/ROOT/pages/reactive/authorization/method.adoc b/docs/modules/ROOT/pages/reactive/authorization/method.adoc index 27b4e45c13..bfb6f9daf8 100644 --- a/docs/modules/ROOT/pages/reactive/authorization/method.adoc +++ b/docs/modules/ROOT/pages/reactive/authorization/method.adoc @@ -1,7 +1,7 @@ [[jc-erms]] = EnableReactiveMethodSecurity -Spring Security supports method security by using https://projectreactor.io/docs/core/release/reference/#context[Reactor's Context], which is set up by `ReactiveSecurityContextHolder`. +Spring Security supports method security by using https://projectreactor.io/docs/core/release/reference/advancedFeatures/context.html[Reactor's Context], which is set up by `ReactiveSecurityContextHolder`. The following example shows how to retrieve the currently logged in user's message: [NOTE] diff --git a/docs/modules/ROOT/pages/reactive/oauth2/client/authorization-grants.adoc b/docs/modules/ROOT/pages/reactive/oauth2/client/authorization-grants.adoc index 703c8ba4bd..afa26d7584 100644 --- a/docs/modules/ROOT/pages/reactive/oauth2/client/authorization-grants.adoc +++ b/docs/modules/ROOT/pages/reactive/oauth2/client/authorization-grants.adoc @@ -695,7 +695,7 @@ class OAuth2ClientController { [NOTE] ==== `ServerWebExchange` is an OPTIONAL attribute. -If not provided, it will be obtained from the https://projectreactor.io/docs/core/release/reference/#context[Reactor's Context] via the key `ServerWebExchange.class`. +If not provided, it will be obtained from the https://projectreactor.io/docs/core/release/reference/advancedFeatures/context.html[Reactor's Context] via the key `ServerWebExchange.class`. ==== [[oauth2-client-jwt-bearer]] From 4e5eb822a029f8d20fe7668c07060646e25715e3 Mon Sep 17 00:00:00 2001 From: Tran Ngoc Nhan Date: Sat, 5 Sep 2026 17:07:15 +0700 Subject: [PATCH 3/3] Fix typos in Javadocs - Add missing parentheses - Add missing quote - Remove duplicate word Signed-off-by: Tran Ngoc Nhan --- .../security/acls/domain/AclAuthorizationStrategyImpl.java | 2 +- .../org/springframework/security/acls/domain/AclImpl.java | 6 +++--- .../provisioning/UserDetailsManagerConfigurer.java | 2 +- .../annotation/web/configurers/RememberMeConfigurer.java | 2 +- .../web/configurers/saml2/Saml2LogoutConfigurer.java | 2 +- .../web/server/ServerHttpStrictTransportSecurityDsl.kt | 2 +- .../SpnegoAuthenticationProcessingFilter.java | 2 +- .../OpenSaml5AuthenticationRequestResolver.java | 3 +-- .../AbstractAuthenticationProcessingFilter.java | 4 ++-- .../security/web/authentication/RememberMeServices.java | 2 +- .../preauth/j2ee/WebXmlMappableAttributesRetriever.java | 2 +- .../preauth/x509/SubjectDnX509PrincipalExtractor.java | 2 +- .../servletapi/SecurityContextHolderAwareRequestFilter.java | 6 +++--- 13 files changed, 18 insertions(+), 19 deletions(-) diff --git a/acl/src/main/java/org/springframework/security/acls/domain/AclAuthorizationStrategyImpl.java b/acl/src/main/java/org/springframework/security/acls/domain/AclAuthorizationStrategyImpl.java index 07349531b4..2709af6229 100644 --- a/acl/src/main/java/org/springframework/security/acls/domain/AclAuthorizationStrategyImpl.java +++ b/acl/src/main/java/org/springframework/security/acls/domain/AclAuthorizationStrategyImpl.java @@ -146,7 +146,7 @@ public class AclAuthorizationStrategyImpl implements AclAuthorizationStrategy { /** * Creates a principal-like sid from the authentication information. * @param authentication the authentication information that can provide principal and - * thus the sid's id will be dependant on the value inside + * thus the sid's id will be dependent on the value inside * @return a sid with the ID taken from the authentication information */ protected Sid createCurrentUser(Authentication authentication) { diff --git a/acl/src/main/java/org/springframework/security/acls/domain/AclImpl.java b/acl/src/main/java/org/springframework/security/acls/domain/AclImpl.java index 8550450e8f..1b683f7aef 100644 --- a/acl/src/main/java/org/springframework/security/acls/domain/AclImpl.java +++ b/acl/src/main/java/org/springframework/security/acls/domain/AclImpl.java @@ -90,9 +90,9 @@ public class AclImpl implements Acl, MutableAcl, AuditableAcl, OwnershipAcl { * @param aclAuthorizationStrategy authorization strategy * @param grantingStrategy the {@code PermissionGrantingStrategy} which will be used * by the {@code isGranted()} method - * @param parentAcl the parent (may be may be {@code null}) - * @param loadedSids the loaded SIDs if only a subset were loaded (may be {@code null} - * ) + * @param parentAcl the parent (may be {@code null}) + * @param loadedSids the loaded SIDs if only a subset were loaded (may be + * {@code null}) * @param entriesInheriting if ACEs from the parent should inherit into this ACL * @param owner the owner (required) */ diff --git a/config/src/main/java/org/springframework/security/config/annotation/authentication/configurers/provisioning/UserDetailsManagerConfigurer.java b/config/src/main/java/org/springframework/security/config/annotation/authentication/configurers/provisioning/UserDetailsManagerConfigurer.java index 870dcc2d39..82cc402720 100644 --- a/config/src/main/java/org/springframework/security/config/annotation/authentication/configurers/provisioning/UserDetailsManagerConfigurer.java +++ b/config/src/main/java/org/springframework/security/config/annotation/authentication/configurers/provisioning/UserDetailsManagerConfigurer.java @@ -103,7 +103,7 @@ public class UserDetailsManagerConfigurer, C /** * Builds the user to be added. At minimum the username, password, and authorities - * should provided. The remaining attributes have reasonable defaults. + * should be provided. The remaining attributes have reasonable defaults. */ public final class UserDetailsBuilder { diff --git a/config/src/main/java/org/springframework/security/config/annotation/web/configurers/RememberMeConfigurer.java b/config/src/main/java/org/springframework/security/config/annotation/web/configurers/RememberMeConfigurer.java index 529c207f56..305c80e81d 100644 --- a/config/src/main/java/org/springframework/security/config/annotation/web/configurers/RememberMeConfigurer.java +++ b/config/src/main/java/org/springframework/security/config/annotation/web/configurers/RememberMeConfigurer.java @@ -377,7 +377,7 @@ public final class RememberMeConfigurer> /** * Creates the {@link RememberMeServices} to use when none is provided. The result is * either {@link PersistentTokenRepository} (if a {@link PersistentTokenRepository} is - * specified, else {@link TokenBasedRememberMeServices}. + * specified, else {@link TokenBasedRememberMeServices}). * @param http the {@link HttpSecurity} to lookup shared objects * @param key the {@link #key(String)} * @return the {@link RememberMeServices} to use diff --git a/config/src/main/java/org/springframework/security/config/annotation/web/configurers/saml2/Saml2LogoutConfigurer.java b/config/src/main/java/org/springframework/security/config/annotation/web/configurers/saml2/Saml2LogoutConfigurer.java index 5ab684fd7a..0bc6913060 100644 --- a/config/src/main/java/org/springframework/security/config/annotation/web/configurers/saml2/Saml2LogoutConfigurer.java +++ b/config/src/main/java/org/springframework/security/config/annotation/web/configurers/saml2/Saml2LogoutConfigurer.java @@ -82,7 +82,7 @@ import org.springframework.security.web.util.matcher.RequestMatcher; * The following configuration options are available: * *
    - *
  • {@link #logoutUrl} - The URL to to process SAML 2.0 Logout
    • + *
  • {@link #logoutUrl} - The URL to process SAML 2.0 Logout
    • *
  • {@link LogoutRequestConfigurer#logoutRequestValidator} - The * {@link AuthenticationManager} for authenticating SAML 2.0 Logout Requests
    • *
  • {@link LogoutRequestConfigurer#logoutRequestResolver} - The diff --git a/config/src/main/kotlin/org/springframework/security/config/web/server/ServerHttpStrictTransportSecurityDsl.kt b/config/src/main/kotlin/org/springframework/security/config/web/server/ServerHttpStrictTransportSecurityDsl.kt index edb1e5ec4e..82ef364d20 100644 --- a/config/src/main/kotlin/org/springframework/security/config/web/server/ServerHttpStrictTransportSecurityDsl.kt +++ b/config/src/main/kotlin/org/springframework/security/config/web/server/ServerHttpStrictTransportSecurityDsl.kt @@ -24,7 +24,7 @@ import java.time.Duration * * @author Eleftheria Stein * @since 5.4 - * @property maxAge he value for the max-age directive of the Strict-Transport-Security + * @property maxAge the value for the max-age directive of the Strict-Transport-Security * header. * @property includeSubdomains if true, subdomains should be considered HSTS Hosts too. * @property preload if true, preload will be included in HSTS Header. diff --git a/kerberos/kerberos-web/src/main/java/org/springframework/security/kerberos/web/authentication/SpnegoAuthenticationProcessingFilter.java b/kerberos/kerberos-web/src/main/java/org/springframework/security/kerberos/web/authentication/SpnegoAuthenticationProcessingFilter.java index 0abfedec3b..4bac0dd1be 100644 --- a/kerberos/kerberos-web/src/main/java/org/springframework/security/kerberos/web/authentication/SpnegoAuthenticationProcessingFilter.java +++ b/kerberos/kerberos-web/src/main/java/org/springframework/security/kerberos/web/authentication/SpnegoAuthenticationProcessingFilter.java @@ -99,7 +99,7 @@ import org.springframework.web.filter.OncePerRequestFilter; * *

    * If you get a "GSSException: Channel binding mismatch (Mechanism level:ChannelBinding - * not provided!) have a look at this + * not provided!)", please have a look at this * bug. *

    *

    diff --git a/saml2/saml2-service-provider/src/opensaml5Main/java/org/springframework/security/saml2/provider/service/web/authentication/OpenSaml5AuthenticationRequestResolver.java b/saml2/saml2-service-provider/src/opensaml5Main/java/org/springframework/security/saml2/provider/service/web/authentication/OpenSaml5AuthenticationRequestResolver.java index 2f4d9cc0a7..3b9e5bb6b7 100644 --- a/saml2/saml2-service-provider/src/opensaml5Main/java/org/springframework/security/saml2/provider/service/web/authentication/OpenSaml5AuthenticationRequestResolver.java +++ b/saml2/saml2-service-provider/src/opensaml5Main/java/org/springframework/security/saml2/provider/service/web/authentication/OpenSaml5AuthenticationRequestResolver.java @@ -82,8 +82,7 @@ public final class OpenSaml5AuthenticationRequestResolver implements Saml2Authen /** * Set the {@link RequestMatcher} to use for setting the - * {@link BaseOpenSamlAuthenticationRequestResolver#setRequestMatcher(RequestMatcher)} - * (RequestMatcher)}. + * {@link BaseOpenSamlAuthenticationRequestResolver#setRequestMatcher(RequestMatcher)}. * @param requestMatcher the {@link RequestMatcher} to identify authentication * requests. * @since 5.8 diff --git a/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationProcessingFilter.java b/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationProcessingFilter.java index 72d9a394ac..c5e62a76d6 100644 --- a/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationProcessingFilter.java +++ b/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationProcessingFilter.java @@ -465,8 +465,8 @@ public abstract class AbstractAuthenticationProcessingFilter extends GenericFilt /** * Indicates if the filter chain should be continued prior to delegation to - * {@link #successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication)} - * , which may be useful in certain environment (such as Tapestry applications). + * {@link #successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication)}, + * which may be useful in certain environment (such as Tapestry applications). * Defaults to false. */ public void setContinueChainBeforeSuccessfulAuthentication(boolean continueChainBeforeSuccessfulAuthentication) { diff --git a/web/src/main/java/org/springframework/security/web/authentication/RememberMeServices.java b/web/src/main/java/org/springframework/security/web/authentication/RememberMeServices.java index 2ef3493b47..a86b33e596 100644 --- a/web/src/main/java/org/springframework/security/web/authentication/RememberMeServices.java +++ b/web/src/main/java/org/springframework/security/web/authentication/RememberMeServices.java @@ -30,7 +30,7 @@ import org.springframework.security.core.Authentication; * {@link org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter * AbstractAuthenticationProcessingFilter} and * {@link org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter - * RememberMeAuthenticationFilter} will call the methods provided by an implementation of + * RememberMeAuthenticationFilter}) will call the methods provided by an implementation of * this interface. *

    * Implementations may implement any type of remember-me capability they wish. Rolling diff --git a/web/src/main/java/org/springframework/security/web/authentication/preauth/j2ee/WebXmlMappableAttributesRetriever.java b/web/src/main/java/org/springframework/security/web/authentication/preauth/j2ee/WebXmlMappableAttributesRetriever.java index bdea4d50e7..8bf4b42263 100755 --- a/web/src/main/java/org/springframework/security/web/authentication/preauth/j2ee/WebXmlMappableAttributesRetriever.java +++ b/web/src/main/java/org/springframework/security/web/authentication/preauth/j2ee/WebXmlMappableAttributesRetriever.java @@ -49,7 +49,7 @@ import org.springframework.util.Assert; /** * This MappableAttributesRetriever implementation reads the list of defined J2EE - * roles from a web.xml file and returns these from { + * roles from a web.xml file and returns these from * {@link #getMappableAttributes()}. * * @author Ruud Senden diff --git a/web/src/main/java/org/springframework/security/web/authentication/preauth/x509/SubjectDnX509PrincipalExtractor.java b/web/src/main/java/org/springframework/security/web/authentication/preauth/x509/SubjectDnX509PrincipalExtractor.java index a7c55c88b9..b78189eeae 100644 --- a/web/src/main/java/org/springframework/security/web/authentication/preauth/x509/SubjectDnX509PrincipalExtractor.java +++ b/web/src/main/java/org/springframework/security/web/authentication/preauth/x509/SubjectDnX509PrincipalExtractor.java @@ -76,7 +76,7 @@ public class SubjectDnX509PrincipalExtractor implements X509PrincipalExtractor, } /** - * Sets the regular expression which will by used to extract the user name from the + * Sets the regular expression which will be used to extract the user name from the * certificate's Subject DN. *

    * It should contain a single group; for example the default expression diff --git a/web/src/main/java/org/springframework/security/web/servletapi/SecurityContextHolderAwareRequestFilter.java b/web/src/main/java/org/springframework/security/web/servletapi/SecurityContextHolderAwareRequestFilter.java index 72d9b7bf71..1ef1c1edcc 100644 --- a/web/src/main/java/org/springframework/security/web/servletapi/SecurityContextHolderAwareRequestFilter.java +++ b/web/src/main/java/org/springframework/security/web/servletapi/SecurityContextHolderAwareRequestFilter.java @@ -126,9 +126,9 @@ public class SecurityContextHolderAwareRequestFilter extends GenericFilterBean { * is not authenticated. *

    *

    - * If the value is null (default), then the default container behavior will be be - * retained when invoking {@link HttpServletRequest#authenticate(HttpServletResponse)} - * . + * If the value is null (default), then the default container behavior will be + * retained when invoking + * {@link HttpServletRequest#authenticate(HttpServletResponse)}. *

    * @param authenticationEntryPoint the {@link AuthenticationEntryPoint} to use when * invoking {@link HttpServletRequest#authenticate(HttpServletResponse)} if the user