78685cdd77
Merge branch '7.0.x'
2026-05-22 21:37:30 -06:00
cfdadfea01
Apply Builder Bean Only to Application Endpoints
...
A published PathPatternRequestMatcher.Builder bean is intended to align
application endpoint matchers, which commonly are from the same servlet.
This commit ensures that this bean is used by securityMatcher(s),
authorizeHttpRequests, and WebSecurity#ignoring, which target
application endpoints typically served by servlets.
This commit also adds tests ensuring that the bean is not applied to filter-chain
security endpoints such as those configured by formLogin, logout,
oneTimeTokenLogin, OAuth 2.0 Login, and SAML 2.0 Login, since
these endpoints are, by default, handled by filters independent from
any target servlet and servlet path.
Closes gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 21:36:19 -06:00
c489136515
Merge branch '7.0.x'
2026-03-27 16:40:04 -06:00
6020ab8e65
Polish CustomAuthorizationManager Docs
...
Issue gh-13967
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 16:36:00 -06:00
3076367168
Fix documentation for Custom Authorization Manager
...
Closes gh-13967
Signed-off-by: as1605 <1605.aditya.singh@gmail.com >
2026-03-27 16:36:00 -06:00
8224b16caf
Add ConditionalAuthorizationManager
...
Closes gh-18919
2026-03-17 17:20:57 -05:00
f1e742dfc5
Fix typos in Authorization Documentation
...
Signed-off-by: arianna <arianna.comi03@gmail.com >
2026-02-05 17:35:25 -07:00
8e9480545e
Fix issue reports
...
Closes gh-18376
Signed-off-by: arianna <arianna.comi03@gmail.com >
2026-02-05 17:35:25 -07:00
e029b3ac6f
Update authorize-http-requests.adoc
...
Comma added for java configuration
Signed-off-by: Vyacheslav <43342280+cmmttd@users.noreply.github.com >
2026-02-02 11:48:07 -06:00
e9a92a8e9a
Replacing use of deprecated 'check' in authorization documentation
...
check() was deprecated in Spring Security 7, but is referenced in documentation
Signed-off-by: Fr05ty-hub <frostylucas@gmail.com >
2026-01-09 15:27:00 -06:00
ed774d3595
Replacing use of deprecated 'check' in authorization documentation
...
check() was deprecated in Spring Security 7, but was referenced in documentation
Signed-off-by: Fr05ty-hub <frostylucas@gmail.com >
2026-01-09 15:27:00 -06:00
b37c5584f9
Fix broken link to Spring Boot docs
...
Signed-off-by: L33gn21 <l33gn21@gmail.com >
2025-12-01 16:52:43 -06:00
765bdf1ed0
SpEL Expressions Support Returning AuthorizationManager
...
Closes gh-17936
2025-09-19 12:07:59 -06:00
9eaadcc70d
Add hasAll(Roles|Authorities) to SecurityExpressionRoot
...
This adds support for hasAllRoles and hasAllAuthorities to method security
expressions.
Issue gh-17932
2025-09-19 09:33:50 -05:00
675835e525
Add AuthorizationManagerFactory.hasAll(Authorities|Roles)
...
Closes gh-17932
2025-09-18 14:19:22 -05:00
b87d63cb71
Document spring-security-access
...
Closes gh-17847
2025-09-12 10:32:39 -06:00
eeb4574bb3
Add AuthorizationManagerFactory
...
Signed-off-by: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com >
2025-09-09 15:36:49 -05:00
0e39685b9c
Merge branch '6.5.x'
2025-08-22 12:40:41 -06:00
9d64880ea9
Merge branch '6.4.x' into 6.5.x
2025-08-22 12:40:12 -06:00
8b2a453301
Advise Favoring PostAuthorize on Reads
...
Closes gh-17797
2025-08-22 12:39:51 -06:00
dadf10899c
Add WebExpressionAuthorizationManager.Builder
...
Closes gh-17504
2025-07-09 17:33:10 -06:00
c312d18191
Add Publishing Predicate
...
Closes gh-17503
2025-07-09 17:33:10 -06:00
9312fb7004
Remove Deprecated AuthorizationDecision Elements
...
Closes gh-17299
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-07-03 14:32:49 -06:00
ce107795d8
Fix Broken JavaDoc Link
...
Issue gh-16886
2025-07-03 14:14:00 -06:00
b71a66bdaa
Use PathPatternRequestMatcher in docs
...
Issue gh-16886
Issue gh-16887
2025-07-03 13:37:50 -06:00
c43afbf5e1
Format Lambda Expressions
...
This commit updats lambda expressions so that
their variable is surrounded in parentheses.
Issue gh-13067
2025-06-20 10:41:29 -06:00
61d6fbc2a9
Update Documentation for PathPatternRequestMatcher
...
Issue gh-16765
2025-04-23 12:11:09 -06:00
6438603cb6
Pick Up TargetVisitor Beans
...
Closes gh-16923
2025-04-10 15:48:09 -06:00
3aec6c2f6e
Deprecate Access API in ACL
...
Issue gh-11302
2025-03-25 12:21:13 -06:00
05fdcd6a08
Deprecate MvcRequestMatcher
...
Closes gh-16631
2025-03-24 22:03:22 -06:00
f910d47c67
Merge branch '6.4.x'
2025-03-21 14:47:33 -06:00
db8b6322e2
Merge branch '6.3.x' into 6.4.x
2025-03-21 14:47:24 -06:00
72554f7f36
Update authorize-http-requests.adoc
...
Fix patterns in the Security Matchers documentation
Signed-off-by: Bragolgirith <6455473+Bragolgirith@users.noreply.github.com >
2025-03-21 14:46:53 -06:00
ba273aba43
Merge branch '6.4.x'
2025-02-24 12:54:21 -07:00
71e12bb42e
Fix @PostResult example in method-security
...
Replace @PreFilter with @Postfilter in example
Signed-off-by: Olivier <Kuba15@users.noreply.github.com >
2025-02-24 12:54:05 -07:00
588220a020
Add PathPatterRequestMatcher
...
Closes gh-16429
Clsoes gh-16430
2025-02-21 13:40:23 -07:00
980564838d
method-security: fix invalid Kotlin syntax
...
val/var on function parameters is invalid Kotlin syntax. It has been removed quite some time ago. This change updates the method-security page to reflect that.
Signed-off-by: Simão Gomes Viana <simao.gomes@toowoxx.de >
2025-01-08 09:53:42 -06:00
e67b5f8356
Fix incorrect rendering of SpEL expression example tabs
2025-01-07 15:29:17 -06:00
40f8ac642a
Fix Documentation Typos
2024-12-09 17:56:00 -07:00
14be74051e
Merge branch '6.3.x'
...
Closes gh-16176
2024-11-26 12:12:49 -06:00
21ac1022ef
Merge branch '6.2.x' into 6.3.x
...
Closes gh-16175
2024-11-26 12:12:18 -06:00
68d91916e2
Polish Dark Mode for CSRF and Method Security diagrams
...
Closes gh-16151
2024-11-26 01:53:56 +05:30
4787efb40b
Update What's New
2024-11-18 15:51:24 -07:00
5c7237be79
Merge branch '6.3.x'
2024-11-18 12:13:20 -07:00
1414b88ef3
Merge branch '6.2.x' into 6.3.x
2024-11-18 12:13:05 -07:00
ba520db7f7
Merge branch '5.8.x' into 6.2.x
2024-11-18 12:12:46 -07:00
85248083c0
Add Dark Mode CSS Style
...
Closes gh-14834
2024-11-18 12:10:48 -07:00
e27e8dfcd5
Merge branch '6.3.x'
2024-09-17 18:25:42 -06:00
dfce3a280d
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15822
2024-09-17 18:25:29 -06:00
1a0203ecf6
Fix AuthorizationManager API Documentation Typo
...
Closes gh-15704
2024-09-17 18:25:08 -06:00
Josh Cummings