b6ed037c39
Document device_code grant disabled by default
...
Issue gh-17998
2025-10-31 06:38:09 -04:00
5da0cbea4b
Document OAuth 2.0 Dynamic Client Registration support
...
Issue gh-17964
2025-10-30 16:01:51 -04:00
8c65dc93f2
Enable PKCE by default
...
Closes gh-17507
Signed-off-by: Rohan Naik <rohan.nn1203@gmail.com >
2025-10-03 13:08:04 -04:00
681e166be8
Remove default HttpSecurity.securityMatcher() for authorization server
...
Closes gh-17965
2025-10-01 11:45:21 -04:00
4ef16b14d2
Update terminology to HTTP Service Clients
...
Closes gh-17947
2025-09-22 10:09:04 -05:00
1e1cb0097a
Document Authentication Factors
...
Issue gh-17933
2025-09-19 11:32:28 -06:00
7ef25cc101
Add HttpSecurity.oauth2AuthorizationServer()
...
Issue gh-17880
2025-09-12 16:20:44 -04:00
e99ea033c5
Integrate Spring Authorization Server ref docs
...
Issue gh-17880
2025-09-12 16:20:40 -04:00
93742a4db3
Manual move of spring-projects/spring-authorization-server docs
...
Issue gh-17880
2025-09-12 16:20:40 -04:00
b09afb34cc
Document Authentication.Builder
...
The commit documents the new Authentication Builder interface
and its usage in the security filter chain.
Closes gh-17861
Closes gh-17862
2025-09-09 14:59:14 -06:00
2c87270dbc
Use authorizeHttpRequests
...
Issue gh-15174
2025-07-09 17:33:11 -06:00
e869bcdfa3
Remove deprecated implementations of OAuth2AccessTokenResponseClient
...
Closes gh-16909
2025-07-03 14:23:23 -04:00
cfe38957d7
Remove Resource Owner Password Credentials grant
...
Closes gh-17446
2025-07-03 14:23:23 -04:00
c43afbf5e1
Format Lambda Expressions
...
This commit updats lambda expressions so that
their variable is surrounded in parentheses.
Issue gh-13067
2025-06-20 10:41:29 -06:00
b2325e4176
Add OAuth Support for HTTP Interface Client
...
Closes gh-16858
2025-06-17 09:53:51 -05:00
ba7be9c8b9
Merge branch '6.5.x'
2025-05-09 16:14:34 -04:00
e3c39f02bc
Add documentation for DPoP support
...
Closes gh-17072
2025-05-09 16:02:14 -04:00
f13836c9c8
Add X to CommonOAuth2Provider Reference
...
Issue gh-16510
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com >
2025-05-07 11:31:28 -05:00
d0a97917ad
Merge branch '6.4.x'
2025-04-29 13:39:00 -06:00
d76ccc6856
Merge branch '6.3.x' into 6.4.x
2025-04-29 13:38:41 -06:00
9c76ab69f0
Use proper configuration key
...
the getter method is `getOpaquetoken()` not `getOpaqueToken()`
See https://github.com/spring-projects/spring-boot/blob/c6045c3111c43bd7b0f99e6c2858bfb2999e358f/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java#L51
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com >
2025-04-29 13:37:51 -06:00
ce5a12b2f7
Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector
...
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com >
2025-04-23 14:10:02 -06:00
15c2b156f1
Update Client Authentication examples
...
Closes gh-16925
987d9c9788ba0343f543083c87613fb5
2025-04-11 15:10:05 -05:00
6159e089d4
Fix inline code formatting in documentation
...
Signed-off-by: Hao <kyrieeeee2@gmail.com >
2025-03-26 21:51:52 -06:00
8c7d2e8922
Fix typo in multitenancy documentation
...
Signed-off-by: Hao <kyrieeeee2@gmail.com >
2025-03-26 21:51:52 -06:00
19a5a9c970
Update logout.adoc
...
typos
Signed-off-by: Juha-1 <52188855+Juha-1@users.noreply.github.com >
2025-03-07 13:59:05 -07:00
ab43a660b9
Add RFC 9068 Support
...
Closes gh-13185
2025-02-27 12:40:01 -07:00
54a6a19e05
Polish gh-16214
...
This commit applies the following changes:
* Added local Content-Security-Policy with script-src nonce directive
* Removed form-redirect.js and associated changes
* Renamed to FormPostRedirectStrategy
* Removed HtmlUtils usage
* Moved to same package as DefaultRedirectStrategy
2025-02-03 14:52:30 -06:00
58534e7f60
Add FormRedirectStrategy to enable POST OIDC Logout
...
FormRedirectStrategy redirects using an autosubmitting HTML form using the POST method versus DefaultRedirectStrategy which redirects using the GET method.
Can be used to implement POST binding for relying party initiated OIDC logout by setting FormRedirectStrategy as the redirection strategy on OidcClientInitiatedLogoutSuccessHandler.
Closes gh-13002
Signed-off-by: Craig Andrews <candrews@integralblue.com >
2025-02-03 14:52:30 -06:00
85d7cc1335
Document requireProofKey
...
Issue gh-16386
2025-01-17 17:26:48 -06:00
a5af8503df
Update OpaqueTokenIntrospector Documentation
...
Issue gh-15988
2025-01-16 16:46:46 -07:00
5fdacef398
Remove obsolete typo in OAuth 2.0 Client page
2025-01-07 14:05:45 -06:00
f5eccf7cd3
Fix OAuth2 documentation: Corrected OAuth2ClientHttpRequestInterceptor usage
...
Closes gh-16165
2024-11-26 12:18:19 -06:00
5c7237be79
Merge branch '6.3.x'
2024-11-18 12:13:20 -07:00
1414b88ef3
Merge branch '6.2.x' into 6.3.x
2024-11-18 12:13:05 -07:00
ba520db7f7
Merge branch '5.8.x' into 6.2.x
2024-11-18 12:12:46 -07:00
85248083c0
Add Dark Mode CSS Style
...
Closes gh-14834
2024-11-18 12:10:48 -07:00
ea5bc28773
Polish OAuth2 docs
2024-10-28 16:06:50 -05:00
8982851355
Document RestClient-based implementations
...
Closes gh-15938
2024-10-18 12:24:17 -05:00
d0fc4fe4dc
Document RestClient integration
...
Closes gh-15894
2024-10-18 12:24:17 -05:00
9b89fc2f1f
Add example for setting up client credentials
...
Closes gh-15304
2024-10-18 12:24:16 -05:00
b49051a1e6
Merge branch '6.2.x' into 6.3.x
2024-09-26 13:08:34 -06:00
f7b85ed314
Fix Broken Resource Server Doc Links
2024-09-26 13:08:12 -06:00
4e2cb8bc25
Fix Broken Resource Server Doc Links
2024-09-26 12:07:40 -07:00
5d8cf6a8bc
Polish gh-13588
2024-09-19 12:08:48 -05:00
8bb5875595
Expose OidcBackChannelLogoutHandler
...
This component already uses by default a URI that doesn't require
a CSRF token and aalready allows for configuring a cookie name.
So, by making it public and configurable in the DSL, both
of these tickets quite naturally close.
Closes gh-13841
Closes gh-14904
2024-09-15 21:30:55 -07:00
d2e8c19789
Merge branch '6.3.x'
2024-08-26 16:33:04 -06:00
279cb89eac
Merge branch '6.2.x' into 6.3.x
2024-08-26 16:32:58 -06:00
2ba9b6821a
Fix OIDC Logout Code Snippets
2024-08-26 15:32:35 -07:00
f372f5cf52
Replace OidcSessionStrategy References with OidcSessionRegistry
2024-08-26 15:32:35 -07:00
Joe Grandja