Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-31 14:35:18 +00:00
Code Issues Packages Projects Releases Wiki Activity
21,215 Commits 77 Branches 385 Tags
main
Commit Graph

21215 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] 80dcf01ce5 Bump org-jetbrains-kotlin from 2.3.21 to 2.4.0 
Bumps `org-jetbrains-kotlin` from 2.3.21 to 2.4.0.

Updates `org.jetbrains.kotlin:kotlin-bom` from 2.3.21 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0)

Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.3.21 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0)

---
updated-dependencies:
- dependency-name: org.jetbrains.kotlin:kotlin-bom
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-03 21:28:48 +00:00
dependabot[bot] 26416a1a8d Bump com.webauthn4j:webauthn4j-core 
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.31.5.RELEASE to 0.31.6.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases)
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.5.RELEASE...0.31.6.RELEASE)

---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
  dependency-version: 0.31.6.RELEASE
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-03 21:24:57 +00:00
Josh Cummings f83dac8cd2 Merge branch '7.0.x' 2026-06-02 12:43:16 -06:00
Josh Cummings 54e9575391 Merge branch '6.5.x' into 7.0.x 2026-06-02 12:42:44 -06:00
Josh Cummings e3ad551ab3 Backport SubjectX500PrincipalExtractor 
This commit backports SubjectX500PrincipalExtractor so as to provide
folks moving from 6.x to 7.x a migration path from
SubjectDnX509PrincipalExtractor.

Issue gh-16980

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-06-01 14:30:33 -06:00
Josh Cummings 1e30882290 Merge branch '7.0.x' 2026-06-01 14:07:53 -06:00
Josh Cummings 7fc97c6ee2 Select Most Specific RDN in X500 Principal Extractor 
SubjectX500PrincipalExtractor now returns the left-most, most-specific
matching RDN value, matching both convention and
SubjectDnX509PrincipalExtractor. Since LdapName#getRdns lists RDNs
most-significant first, the extractor reads them in reverse so that a
subject with more than one matching attribute (e.g. two CNs) resolves to
the most specific value.

Closes gh-19254

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-06-01 14:05:58 -06:00
dependabot[bot] 4a5379ee7e Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 
Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 3.1.3 to 3.1.4.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-3.1.3...jackson-bom-3.1.4)

---
updated-dependencies:
- dependency-name: tools.jackson:jackson-bom
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-01 05:26:30 +00:00
dependabot[bot] 180bec35dc Bump io.mockk:mockk from 1.14.9 to 1.14.11 
Bumps [io.mockk:mockk](https://github.com/mockk/mockk) from 1.14.9 to 1.14.11.
- [Release notes](https://github.com/mockk/mockk/releases)
- [Commits](https://github.com/mockk/mockk/compare/1.14.9...v1.14.11)

---
updated-dependencies:
- dependency-name: io.mockk:mockk
  dependency-version: 1.14.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-01 05:25:18 +00:00
Josh Cummings 2cff85e380 Merge branch 7.0.x 2026-05-29 15:25:40 -06:00
Josh Cummings 241bf2c148 Merge branch 6.5.x into 7.0.x 2026-05-29 15:06:52 -06:00
Josh Cummings cf06871200 Rework Logout Validation Logic 
This commit simplifies the code, favoring the construction
of a list of error codes over composing a set of consumers.
This will simplify future analysis by making the code more
readable.

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-29 14:45:44 -06:00
Josh Cummings e50c2a6a74 Rework Login Validation Logic 
This commit simplifies the validation code, favoring the
construction of a list of error codes over using an
accumulating Saml2ResponseValidationResult. This will
simplify future analysis by making the code more readable.

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-29 14:45:36 -06:00
Josh Cummings 30c2c8dc68 Merge branch 7.0.x 2026-05-29 14:43:34 -06:00
Josh Cummings b175e4487e Merge branch 6.5.x into 7.0.x 2026-05-29 14:31:43 -06:00
Josh Cummings 356131b1ea Use FormPostRedirectStrategy 
Closes gh-16673

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-29 11:56:50 -06:00
Josh Cummings 6e17259030 Merge branch 7.0.x 2026-05-29 11:50:00 -06:00
Josh Cummings 97a49aa3bf Add setRowMapper 
This commit makes so that the strategy for reading an
AssertingPartyMetadata can be configured.

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-29 11:48:20 -06:00
dependabot[bot] 83f5dd0603 Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs 
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.11 to 1.14.12.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc)
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.11...v1.14.12)

---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
  dependency-version: 1.14.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-29 00:54:55 +00:00
Joe Grandja dce01c5701 Merge branch '7.0.x' 2026-05-28 11:09:59 -04:00
Joe Grandja e4a78c26d6 Polish redirect flows 2026-05-28 10:25:03 -04:00
Joe Grandja 9027e10b00 Merge branch '7.0.x' 2026-05-28 06:56:18 -04:00
Joe Grandja c50e4c02bb Merge branch '6.5.x' into 7.0.x 2026-05-28 06:55:13 -04:00
Josh Cummings a14c9d66b1 Favor Relative URIs in CookieRequestCache 
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-28 06:54:59 -04:00
Joe Grandja f1d6451ded Merge branch '7.0.x' 2026-05-28 06:46:22 -04:00
Joe Grandja 2924dd29f7 Merge branch '6.5.x' into 7.0.x 2026-05-28 06:39:55 -04:00
Josh Cummings 9d4d9065b4 Cap Deflate Size 
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-28 06:39:29 -04:00
dependabot[bot] 7c9cecc9e4 Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.33 
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.32 to 1.5.33.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.33)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-28 03:17:13 +00:00
Josh Cummings 5c932b222e Merge branch '7.0.x' 2026-05-27 16:44:01 -04:00
Josh Cummings b844b12dc4 Revert "Add Test Against Snapshot" 
This reverts commit 6241327862.
 2026-05-27 16:43:10 -04:00
Josh Cummings 3f1a794cd9 Revert "Add Test Against Snapshots" 
This reverts commit c5de4096b4.
 2026-05-27 16:42:53 -04:00
Josh Cummings 6241327862 Add Test Against Snapshots 
This commit uses a GH workflow to use
JDK 25 to test against snapshot versions
of various dependencies

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-27 16:18:01 -04:00
Josh Cummings 6833fc4152 Merge branch '7.0.x' 2026-05-27 16:12:42 -04:00
Josh Cummings c5de4096b4 Add Test Against Snapshots 
This commit uses a GH workflow that uses JDK 17 and tests
against snapshot versions of various upstream OSS projects.

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-27 16:12:29 -04:00
Joe Grandja 2ddb365607 Merge branch '7.0.x' 2026-05-27 11:29:24 -04:00
Joe Grandja 95d375c8d8 Partial revert fe2e52f646 
Remove test against snapshots

Related gh-17558

Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>
 2026-05-27 11:25:11 -04:00
Joe Grandja 98f5b363ed Add micrometerVersion to check-snapshots.yml 
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>
 2026-05-27 10:06:43 -04:00
dependabot[bot] 4300a7fccb Bump org.hibernate.orm:hibernate-core from 7.3.6.Final to 7.4.0.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.3.6.Final to 7.4.0.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.0/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.6...7.4.0)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 7.4.0.Final
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-27 05:06:16 +00:00
Josh Cummings 0a321da396 Merge branch '7.0.x' 2026-05-26 16:16:36 -06:00
Josh Cummings b486d2695a Update to Micrometer 1.16.5 
Closes gh-19225

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-26 16:16:16 -06:00
Josh Cummings c90acad0c2 Merge branch '7.0.x' 2026-05-26 15:31:13 -06:00
Josh Cummings 8b34113c2a Merge branch '6.5.x' into 7.0.x 2026-05-26 15:27:35 -06:00
Josh Cummings fe2e52f646 Add Micrometer Version Override 
Closes gh-19187

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-26 15:18:01 -06:00
Josh Cummings 0ea87ca3bf Upgrade Micrometer to 1.15.11 
Closes gh-19224

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-26 15:17:57 -06:00
dependabot[bot] 6555199ff7 Bump org.hibernate.orm:hibernate-core from 7.3.5.Final to 7.3.6.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.3.5.Final to 7.3.6.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.6/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.5...7.3.6)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 7.3.6.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-25 03:38:40 +00:00
Josh Cummings 02725ed7fd Merge branch '7.0.x' 2026-05-22 22:28:06 -06:00
Josh Cummings 71fd23429c Merge branch '6.5.x' into 7.0.x 2026-05-22 22:27:27 -06:00
Josh Cummings 85514a9b34 Update NodeJS to 24.15 
This commit declares a NodeJS value whereas previously,
Antora would use the latest LTS version. When it updated to
Node 24.16, site production stopped, possibly due to
https://github.com/nodejs/node/commit/e95570c054.

Either way, it is helpful to have a pinned version in order
to stabilize builds, allowing us to update it in an orderly
fashion like other dependencies.

Issue gh-19206

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-22 22:27:00 -06:00
Josh Cummings 6a029fd853 Merge branch '7.0.x' 2026-05-22 22:05:47 -06:00
Josh Cummings d039e0191f Move Doc Sample to Correct Package 
Issue gh-19128

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
 2026-05-22 22:05:29 -06:00