0cbc38cdd6
Bump org.springframework:spring-framework-bom from 6.1.19 to 6.1.20
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.1.19 to 6.1.20.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.19...v6.1.20 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.1.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-16 03:22:19 +00:00
eb30fd7f59
Add Missing Header
...
Issue gh-11161
2025-05-15 18:16:36 -06:00
260d298cc5
Add Migration Guide from Spring Security SAML Extension
...
This adds a dedicated migration guide for users moving from the Spring Security SAML Extension to the built-in SAML 2.0 support.
Includes:
- Content migrated from the project wiki
- xref links for `saml2Login`, `saml2Logout`, and `saml2Metadata`
- Metadata example moved to Examples Matrix
- Cleanup and naming per review feedback
Closes gh-11161
Signed-off-by: snowykte0426 <snowykte0426@naver.com >
2025-05-15 17:17:43 -06:00
78a60d0d84
Bump io.projectreactor:reactor-bom from 2023.0.17 to 2023.0.18
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2023.0.17 to 2023.0.18.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2023.0.17...2023.0.18 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2023.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-14 03:23:25 +00:00
a001f27690
Bump org-apache-maven-resolver from 1.9.22 to 1.9.23
...
Bumps `org-apache-maven-resolver` from 1.9.22 to 1.9.23.
Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.22 to 1.9.23
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.23 )
Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.22 to 1.9.23
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.23 )
Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.22 to 1.9.23
---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-13 12:15:42 -06:00
27319e3f9b
Add missing registration property in YAML listing
...
Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com >
2025-05-13 11:17:35 -06:00
ec462e8bc5
Update assertingparty property usage in YAML snippets
...
Spring Boot 2.7 renamed spring.security.saml2.relyingparty.registration.*.identityprovider.*
to spring.security.saml2.relyingparty.registration.*.assertingparty.*.
Closes gh-12810.
Signed-off-by: Danilo Piazzalunga <danilopiazza@gmail.com >
2025-05-13 11:17:35 -06:00
a4111a606b
Bump io.spring.gradle:spring-security-release-plugin from 1.0.5 to 1.0.6
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.5 to 1.0.6.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.5...v1.0.6 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-05-06 10:15:11 -06:00
505fe3abed
Correct method name
...
Closes gh-17031
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-05-06 10:17:29 -05:00
9710492619
remove update-dependabot action
2025-05-05 13:34:16 -05:00
9436796973
Use pull-request: write for gradlew updates
...
Explicitly provide the permissions required for updating the Gradle
wrapper
2025-05-05 11:49:08 -05:00
51239359ed
Fix ClearSiteData Code Snippet
...
Closes gh-16948
2025-05-02 15:57:31 -06:00
1a6915d3c0
rm .github/workflows for unsupported branch
2025-05-02 12:35:31 -05:00
e48f26e51e
Propagate StrictFirewallRequest Wrapper
...
Closes gh-16978
2025-05-02 10:57:07 -06:00
3b7e3a6c5c
codeql uses ubuntu-latest
2025-05-02 11:49:41 -05:00
a04025c114
rm mark-duplicate-dependabot-prs.yml
2025-05-02 11:26:41 -05:00
1564076276
Remove automerge forward
2025-05-02 11:23:01 -05:00
ae09f36291
Add .github/workflows/codeql.yml
2025-05-02 11:15:37 -05:00
bcef6ed74f
Reformatted lines in x509 overview documentation
...
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com >
2025-05-01 12:02:45 -06:00
c8581683da
Bump Gradle Wrapper from 8.13 to 8.14.
...
Release notes of Gradle 8.14 can be found here:
https://docs.gradle.org/8.14/release-notes.html
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-04-29 14:48:42 -06:00
f631a0fcd5
Polish ClientRegistrationsTests
...
Simplified the assertion so that it is focused on the core
behavior being verified. This will likely also make the test
more stable when updating Spring Framework versions.
Issue gh-16860
2025-04-29 14:27:04 -06:00
0e84f31a00
Add ClientRegistration's RestClient failed attempts information to exception message
...
Closes gh-16860
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com >
2025-04-29 13:43:20 -06:00
9c76ab69f0
Use proper configuration key
...
the getter method is `getOpaquetoken()` not `getOpaqueToken()`
See https://github.com/spring-projects/spring-boot/blob/c6045c3111c43bd7b0f99e6c2858bfb2999e358f/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java#L51
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com >
2025-04-29 13:37:51 -06:00
5354e4d2c5
Check for Null Issuer
...
Closes gh-16989
2025-04-28 11:18:32 -06:00
db48d4ca50
rm merge-dependabot-pr.yml from Unsupported Branch
2025-04-25 13:17:14 -05:00
8325728035
rm merge-dependabot-pr.yml from Unsupported Branch
2025-04-25 13:16:44 -05:00
547d174f3e
Fix Formatting
2025-04-24 10:43:03 -06:00
d2d1275b39
Fix IllegalArgumentException message for unknown Argon2 types
...
Array index 0 points to an empty string. Use index 1 instead.
Signed-off-by: Roman Trapickin <8594293+rntrp@users.noreply.github.com >
2025-04-24 10:43:03 -06:00
7bf776ec38
Bump org.springframework.data:spring-data-bom
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2024.0.10 to 2024.0.11.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2024.0.10...2024.0.11 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2024.0.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-22 20:49:38 -07:00
e47a6714a5
Update to io.spring.gradle:spring-security-release-plugin:1.0.5
...
Closes gh-6.3.10
2025-04-21 13:44:10 -05:00
b9cae82b89
Next development version
2025-04-21 16:26:30 +00:00
f6354250a1
Release 6.3.9
2025-04-21 15:58:56 +00:00
a5d963387b
Bump org.springframework:spring-framework-bom from 6.1.18 to 6.1.19
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.1.18 to 6.1.19.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.18...v6.1.19 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.1.19
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-17 20:49:18 -07:00
99c4f58c34
Bump org.springframework.ldap:spring-ldap-core from 3.2.11 to 3.2.12
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.11 to 3.2.12.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.11...3.2.12 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-17 20:36:42 -07:00
c1aa99fdd2
Enforce BCrypt password length for new passwords only
...
Closes gh-16802
2025-04-17 04:53:33 -04:00
eb01394427
Bump io.projectreactor:reactor-bom from 2023.0.16 to 2023.0.17
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2023.0.16 to 2023.0.17.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2023.0.16...2023.0.17 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2023.0.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-15 20:50:56 -07:00
0d3d6f75f8
Bump org-aspectj from 1.9.22.1 to 1.9.24
...
Bumps `org-aspectj` from 1.9.22.1 to 1.9.24.
Updates `org.aspectj:aspectjrt` from 1.9.22.1 to 1.9.24
- [Release notes](https://github.com/eclipse/org.aspectj/releases )
- [Commits](https://github.com/eclipse/org.aspectj/commits )
Updates `org.aspectj:aspectjweaver` from 1.9.22.1 to 1.9.24
- [Release notes](https://github.com/eclipse/org.aspectj/releases )
- [Commits](https://github.com/eclipse/org.aspectj/commits )
---
updated-dependencies:
- dependency-name: org.aspectj:aspectjrt
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.aspectj:aspectjweaver
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-13 20:22:34 -07:00
eb83c35ded
Bump io.spring.gradle:spring-security-release-plugin from 1.0.3 to 1.0.4
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.3...v1.0.4 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-04-09 20:33:22 -07:00
3c0fef59b5
Polish gh-16039
...
Closes gh-16038
2025-04-07 10:54:09 -05:00
da94fbe431
Evaluate URI query parameter only if enabled
...
Issue gh-16038
2025-04-07 10:54:07 -05:00
857ef6fe08
WithHttpOnlyCookie defaults to false
...
Closes gh-16820
Signed-off-by: DingHao <dh.hiekn@gmail.com >
2025-04-01 11:59:51 -06:00
b7df86197c
Apply request-handler-ref to CsrfAuthenticationStrategy
...
Closes gh-16801
2025-03-28 16:25:52 -05:00
c84c438075
Apply request-handler-ref to CsrfAuthenticationStrategy
...
Closes gh-16801
2025-03-28 16:08:36 -05:00
1e7db094d1
Use correct message prompt
...
Signed-off-by: DingHao <dh.hiekn@gmail.com >
2025-03-27 16:42:52 -06:00
456604ab45
Sort Default Advisors and Added Advisors
...
This commit ensures that the default advisors and added advisors
are sorted in the event that this component is not being published
as a Spring bean.
Issue gh-16819
2025-03-27 16:18:00 -06:00
15b9a50060
Add Test
...
Issue gh-16819
2025-03-27 16:18:00 -06:00
fcc1bd598d
Sort Advisors AfterSingletonsInstantiated
...
In order to make so that authorization advisors are sorted
only one time and also as part of the configuration lifecycle,
AuthorizationAdvisorProxyFactory now implements
SmartInitializingBean.
Closes gh-16819
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-03-27 16:18:00 -06:00
af2668f7cb
Bump Gradle Wrapper from 8.10.2 to 8.13.
...
Release notes of Gradle 8.13 can be found here:
https://docs.gradle.org/8.13/release-notes.html
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-03-25 15:11:10 -06:00
883765b2de
Bump @springio/asciidoctor-extensions in /docs
...
Bumps [@springio/asciidoctor-extensions](https://github.com/spring-io/asciidoctor-extensions ) from 1.0.0-alpha.16 to 1.0.0-alpha.17.
- [Changelog](https://github.com/spring-io/asciidoctor-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/asciidoctor-extensions/compare/v1.0.0-alpha.16...v1.0.0-alpha.17 )
---
updated-dependencies:
- dependency-name: "@springio/asciidoctor-extensions"
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-23 18:40:37 -07:00
58e7ba4a4b
https docs download
2025-03-21 15:59:39 -05:00
dependabot[bot]