fd233120a8
Merge branch '7.0.x' into 7.1.x
2026-08-11 16:19:41 -06:00
24aec1d002
Fix broken Javadoc links
...
Closes gh-19194
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-08-11 14:31:49 -07:00
8d452e2c32
Merge branch '7.0.x'
2026-08-03 16:07:26 -06:00
0f6f453ea0
Increase Default NimbusJwtDecoder Timeouts to 30 Seconds
...
NimbusJwtDecoder's default RestOperations now respects the JDK's
sun.net.client.defaultConnectTimeout/defaultReadTimeout system properties,
falling back to 30 seconds instead of the previous 500 milliseconds,
matching JwtDecoderProviderConfigurationUtils's existing behavior.
Also documents this default and the RestOperations override in the
reference guide and migration guide (the reference guide's existing
"Configuring Timeouts" section already claimed 30 seconds -- it's been
inaccurate since the 500ms default shipped and is now correct again), and
documents providing a custom JwtDecoderFactory<ClientRegistration> for
OAuth2 Login's ID Token decoding.
Issue gh-19474
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-03 15:51:41 -06:00
63e0d66811
Merge branch '7.0.x'
2026-03-27 13:23:08 -06:00
e6db4418b0
Merge branch '6.5.x' into 7.0.x
2026-03-27 13:22:44 -06:00
835d6c1fbd
Add Issuer Validation to withIssuerLocation Snippets
...
Closes gh-19000
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 13:22:24 -06:00
de14d9684f
Add Reference Docs for DelegatingJwtGrantedAuthoritiesConverter
...
Issue gh-18300
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 12:13:49 -06:00
89260a3a9c
Use reference links from attributes
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-03-03 16:51:25 -07:00
57434fc597
Update RestTemplateBuilder usage in opaque-token.adoc
...
We just now use a new form instead of the deprecate one.
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-03 16:48:22 -07:00
587ac2cbad
Move Snippets to Compiled Code
...
Issue gh-18745
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-02 16:20:22 -07:00
b05b25f2d6
Update opaque-token.adoc for RestClientOpaqueTokenIntrospector
...
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-02 16:20:22 -07:00
bd51ecd691
Merge branch '7.0.x'
2026-02-26 17:10:28 -07:00
c29af014f4
Merge remote-tracking branch 'origin/6.5.x' into 7.0.x
2026-02-26 17:10:16 -07:00
48112d3d74
Polish Resource Server startup expectations
...
Issue gh-16708
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-02-26 16:56:22 -07:00
b8735abb63
Clarify Resource Server startup expectations
...
Clarify that Spring Boot defers OIDC discovery by default.
Closes gh-16708
Signed-off-by: [CLOUD4] 한현 <gusgus1467@naver.com >
2026-02-26 16:56:22 -07:00
e30d9240c9
Add Docs for Custom Jwt Principal Converters
...
Issue gh-6237
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-02-26 12:28:50 -07:00
705fa60a01
Document Method Security hasScope Support
...
Issue gh-18013
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-02-10 15:23:32 -07:00
688b6ca733
Add Documentation for ExpressionJwtGrantedAuthoritiesConverter
...
Closes gh-18300
2026-02-10 09:11:26 -07:00
10490a7b92
Fix typos in OAuth 2.0 Resource Server
...
Signed-off-by: arianna <arianna.comi03@gmail.com >
2026-02-05 17:35:25 -07:00
517bc7cb65
Polish gh-18614
2026-02-05 15:32:47 -05:00
a2d407518c
Document ClientSettings
...
Added documentation to describe the possible client configuration options when setting up an Oauth2 Authorization Server.
Closes gh-18614
Signed-off-by: Elayne Bloom <5840349+bloomsei@users.noreply.github.com >
2026-02-05 15:32:46 -05:00
2c97b3376b
Document Client PKCE settings
...
Updated the documentation to reflect recent changes to enable PKCE by default for `authorization_code` flows in the documentation for the client.
Closes gh-18304
Signed-off-by: Elayne Bloom <5840349+bloomsei@users.noreply.github.com >
2026-02-02 16:30:27 -05:00
19cbd9c570
Update OAuth2 Client to OAuth2 Resource Server
...
Fix section title to match the corresponding example
Signed-off-by: sach429 <satrajit.acharya@gmail.com >
2025-12-01 17:42:28 -06:00
b130e728b7
Polish gh-18153
...
Issue gh-18144
2025-11-11 14:27:50 -05:00
e6db56ab4f
Add a minimal authorization server configuration
...
Closes gh-18144
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2025-11-11 14:27:36 -05:00
571bd60d82
Document OAuth 2.0 Protected Resource Metadata support
...
Issue gh-17244
2025-11-04 14:37:19 -05:00
b6ed037c39
Document device_code grant disabled by default
...
Issue gh-17998
2025-10-31 06:38:09 -04:00
5da0cbea4b
Document OAuth 2.0 Dynamic Client Registration support
...
Issue gh-17964
2025-10-30 16:01:51 -04:00
8c65dc93f2
Enable PKCE by default
...
Closes gh-17507
Signed-off-by: Rohan Naik <rohan.nn1203@gmail.com >
2025-10-03 13:08:04 -04:00
681e166be8
Remove default HttpSecurity.securityMatcher() for authorization server
...
Closes gh-17965
2025-10-01 11:45:21 -04:00
4ef16b14d2
Update terminology to HTTP Service Clients
...
Closes gh-17947
2025-09-22 10:09:04 -05:00
1e1cb0097a
Document Authentication Factors
...
Issue gh-17933
2025-09-19 11:32:28 -06:00
7ef25cc101
Add HttpSecurity.oauth2AuthorizationServer()
...
Issue gh-17880
2025-09-12 16:20:44 -04:00
e99ea033c5
Integrate Spring Authorization Server ref docs
...
Issue gh-17880
2025-09-12 16:20:40 -04:00
93742a4db3
Manual move of spring-projects/spring-authorization-server docs
...
Issue gh-17880
2025-09-12 16:20:40 -04:00
b09afb34cc
Document Authentication.Builder
...
The commit documents the new Authentication Builder interface
and its usage in the security filter chain.
Closes gh-17861
Closes gh-17862
2025-09-09 14:59:14 -06:00
2c87270dbc
Use authorizeHttpRequests
...
Issue gh-15174
2025-07-09 17:33:11 -06:00
e869bcdfa3
Remove deprecated implementations of OAuth2AccessTokenResponseClient
...
Closes gh-16909
2025-07-03 14:23:23 -04:00
cfe38957d7
Remove Resource Owner Password Credentials grant
...
Closes gh-17446
2025-07-03 14:23:23 -04:00
c43afbf5e1
Format Lambda Expressions
...
This commit updats lambda expressions so that
their variable is surrounded in parentheses.
Issue gh-13067
2025-06-20 10:41:29 -06:00
b2325e4176
Add OAuth Support for HTTP Interface Client
...
Closes gh-16858
2025-06-17 09:53:51 -05:00
ba7be9c8b9
Merge branch '6.5.x'
2025-05-09 16:14:34 -04:00
e3c39f02bc
Add documentation for DPoP support
...
Closes gh-17072
2025-05-09 16:02:14 -04:00
f13836c9c8
Add X to CommonOAuth2Provider Reference
...
Issue gh-16510
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com >
2025-05-07 11:31:28 -05:00
d0a97917ad
Merge branch '6.4.x'
2025-04-29 13:39:00 -06:00
d76ccc6856
Merge branch '6.3.x' into 6.4.x
2025-04-29 13:38:41 -06:00
9c76ab69f0
Use proper configuration key
...
the getter method is `getOpaquetoken()` not `getOpaqueToken()`
See https://github.com/spring-projects/spring-boot/blob/c6045c3111c43bd7b0f99e6c2858bfb2999e358f/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/oauth2/resource/OAuth2ResourceServerProperties.java#L51
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com >
2025-04-29 13:37:51 -06:00
ce5a12b2f7
Revise document to replace outdated NimbusOpaqueTokenIntrospector with SpringOpaqueTokenIntrospector
...
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com >
2025-04-23 14:10:02 -06:00
15c2b156f1
Update Client Authentication examples
...
Closes gh-16925
987d9c9788ba0343f543083c87613fb5
2025-04-11 15:10:05 -05:00
Josh Cummings