0fa81bfb6d
Merge branch '7.0.x'
2026-06-04 14:55:31 -04:00
54e9575391
Merge branch '6.5.x' into 7.0.x
2026-06-02 12:42:44 -06:00
e3ad551ab3
Backport SubjectX500PrincipalExtractor
...
This commit backports SubjectX500PrincipalExtractor so as to provide
folks moving from 6.x to 7.x a migration path from
SubjectDnX509PrincipalExtractor.
Issue gh-16980
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-06-01 14:30:33 -06:00
7fc97c6ee2
Select Most Specific RDN in X500 Principal Extractor
...
SubjectX500PrincipalExtractor now returns the left-most, most-specific
matching RDN value, matching both convention and
SubjectDnX509PrincipalExtractor. Since LdapName#getRdns lists RDNs
most-significant first, the extractor reads them in reverse so that a
subject with more than one matching attribute (e.g. two CNs) resolves to
the most specific value.
Closes gh-19254
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-06-01 14:05:58 -06:00
241bf2c148
Merge branch 6.5.x into 7.0.x
2026-05-29 15:06:52 -06:00
cf06871200
Rework Logout Validation Logic
...
This commit simplifies the code, favoring the construction
of a list of error codes over composing a set of consumers.
This will simplify future analysis by making the code more
readable.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 14:45:44 -06:00
e50c2a6a74
Rework Login Validation Logic
...
This commit simplifies the validation code, favoring the
construction of a list of error codes over using an
accumulating Saml2ResponseValidationResult. This will
simplify future analysis by making the code more readable.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 14:45:36 -06:00
b175e4487e
Merge branch 6.5.x into 7.0.x
2026-05-29 14:31:43 -06:00
356131b1ea
Use FormPostRedirectStrategy
...
Closes gh-16673
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 11:56:50 -06:00
97a49aa3bf
Add setRowMapper
...
This commit makes so that the strategy for reading an
AssertingPartyMetadata can be configured.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 11:48:20 -06:00
e4a78c26d6
Polish redirect flows
2026-05-28 10:25:03 -04:00
c50e4c02bb
Merge branch '6.5.x' into 7.0.x
2026-05-28 06:55:13 -04:00
a14c9d66b1
Favor Relative URIs in CookieRequestCache
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-28 06:54:59 -04:00
2924dd29f7
Merge branch '6.5.x' into 7.0.x
2026-05-28 06:39:55 -04:00
9d4d9065b4
Cap Deflate Size
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-28 06:39:29 -04:00
3f1a794cd9
Revert "Add Test Against Snapshots"
...
This reverts commit c5de4096b4
2026-05-27 16:42:53 -04:00
c5de4096b4
Add Test Against Snapshots
...
This commit uses a GH workflow that uses JDK 17 and tests
against snapshot versions of various upstream OSS projects.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-27 16:12:29 -04:00
95d375c8d8
Partial revert fe2e52f646
...
Remove test against snapshots
Related gh-17558
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com >
2026-05-27 11:25:11 -04:00
b486d2695a
Update to Micrometer 1.16.5
...
Closes gh-19225
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 16:16:16 -06:00
8b34113c2a
Merge branch '6.5.x' into 7.0.x
2026-05-26 15:27:35 -06:00
fe2e52f646
Add Micrometer Version Override
...
Closes gh-19187
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 15:18:01 -06:00
0ea87ca3bf
Upgrade Micrometer to 1.15.11
...
Closes gh-19224
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 15:17:57 -06:00
71fd23429c
Merge branch '6.5.x' into 7.0.x
2026-05-22 22:27:27 -06:00
85514a9b34
Update NodeJS to 24.15
...
This commit declares a NodeJS value whereas previously,
Antora would use the latest LTS version. When it updated to
Node 24.16, site production stopped, possibly due to
https://github.com/nodejs/node/commit/e95570c054 .
Either way, it is helpful to have a pinned version in order
to stabilize builds, allowing us to update it in an orderly
fashion like other dependencies.
Issue gh-19206
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:27:00 -06:00
d039e0191f
Move Doc Sample to Correct Package
...
Issue gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:05:29 -06:00
cfdadfea01
Apply Builder Bean Only to Application Endpoints
...
A published PathPatternRequestMatcher.Builder bean is intended to align
application endpoint matchers, which commonly are from the same servlet.
This commit ensures that this bean is used by securityMatcher(s),
authorizeHttpRequests, and WebSecurity#ignoring, which target
application endpoints typically served by servlets.
This commit also adds tests ensuring that the bean is not applied to filter-chain
security endpoints such as those configured by formLogin, logout,
oneTimeTokenLogin, OAuth 2.0 Login, and SAML 2.0 Login, since
these endpoints are, by default, handled by filters independent from
any target servlet and servlet path.
Closes gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 21:36:19 -06:00
f70aa75445
Merge branch '6.5.x' into 7.0.x
2026-05-21 12:55:40 -06:00
86e0f1341e
Bump com.fasterxml.jackson:jackson-bom from 2.18.6 to 2.18.7
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.18.6 to 2.18.7.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.6...jackson-bom-2.18.7 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.18.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:38:00 -06:00
cea6618265
Bump org.hibernate.orm:hibernate-core from 6.6.49.Final to 6.6.50.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.49.Final to 6.6.50.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.50/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.49...6.6.50 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.50.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:57 -06:00
5bf8f641f1
Bump spring-io/spring-gradle-build-action from 2.0.5 to 2.0.6
...
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action ) from 2.0.5 to 2.0.6.
- [Release notes](https://github.com/spring-io/spring-gradle-build-action/releases )
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/efc55f07f4dfa22f2afd97f9ea1be4212eeed737...c8668747d7c264864c8c7f7026d0d277d14a78dc )
---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
dependency-version: 2.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:52 -06:00
8b9f556d8f
Bump gradle-wrapper from 8.14.4 to 8.14.5
...
Bumps [gradle-wrapper](https://github.com/gradle/gradle ) from 8.14.4 to 8.14.5.
- [Release notes](https://github.com/gradle/gradle/releases )
- [Commits](https://github.com/gradle/gradle/compare/v8.14.4...v8.14.5 )
---
updated-dependencies:
- dependency-name: gradle-wrapper
dependency-version: 8.14.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:46 -06:00
d9b8a8ec54
Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5
...
Bumps [spring-io/spring-release-actions](https://github.com/spring-io/spring-release-actions ) from 0.0.4 to 0.0.5.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/2420148725bebe44bd59a575a9b1961ca4459b0b...a1f321783a0769dd2aea4fad6c2ae2f95a52b885 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions
dependency-version: 0.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:42 -06:00
4e04c266be
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:37 -06:00
dc5c65eaf1
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.31.3.RELEASE to 0.31.5.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.3.RELEASE...0.31.5.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.31.5.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:30:34 -06:00
0353616be3
Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18
...
Bumps org.slf4j:slf4j-api from 2.0.17 to 2.0.18.
---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:29:55 -06:00
47853e1314
Bump gradle-wrapper from 8.14.4 to 8.14.5
...
Bumps [gradle-wrapper](https://github.com/gradle/gradle ) from 8.14.4 to 8.14.5.
- [Release notes](https://github.com/gradle/gradle/releases )
- [Commits](https://github.com/gradle/gradle/compare/v8.14.4...v8.14.5 )
---
updated-dependencies:
- dependency-name: gradle-wrapper
dependency-version: 8.14.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:18:05 -06:00
90e1658afe
Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5
...
Bumps [spring-io/spring-release-actions](https://github.com/spring-io/spring-release-actions ) from 0.0.4 to 0.0.5.
- [Release notes](https://github.com/spring-io/spring-release-actions/releases )
- [Commits](https://github.com/spring-io/spring-release-actions/compare/2420148725bebe44bd59a575a9b1961ca4459b0b...a1f321783a0769dd2aea4fad6c2ae2f95a52b885 )
---
updated-dependencies:
- dependency-name: spring-io/spring-release-actions
dependency-version: 0.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:18:00 -06:00
e1d94d1e06
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:17:55 -06:00
a07c67a365
Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:17:50 -06:00
16cb219e4a
Bump org-bouncycastle from 1.80 to 1.80.2
...
Bumps `org-bouncycastle` from 1.80 to 1.80.2.
Updates `org.bouncycastle:bcpkix-jdk18on` from 1.80 to 1.80.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
Updates `org.bouncycastle:bcprov-jdk18on` from 1.80 to 1.80.2
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html )
- [Commits](https://github.com/bcgit/bc-java/commits )
---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-jdk18on
dependency-version: 1.80.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.bouncycastle:bcprov-jdk18on
dependency-version: 1.80.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:10:16 -06:00
944149ba71
Merge branch '6.5.x' into 7.0.x
2026-05-21 10:37:30 -06:00
9b14465243
Align Assertions in Builder with Deprecated Constructor
...
The deprecated (introspectionUri, clientId, clientSecret) constructors
that the builders replaced explicitly asserted non-null clientId and
clientSecret. Bring the builder's build() in line with that contract by
asserting at the API boundary rather than relying on downstream classes
to enforce it.
Closes gh-19201
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-21 10:36:10 -06:00
fdc0fd23df
Merge branch '6.5.x' into 7.0.x
...
Closes gh-19137
2026-04-29 09:03:43 -06:00
931dfbe8e7
Merge remote-tracking branch 'origin/6.5.x' into 7.0.x
2026-04-29 09:01:34 -06:00
b075f0df02
Decode percent-encoded values
...
Closes gh-19136
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-04-29 08:57:16 -06:00
8720a282ce
Next development version
2026-04-20 20:32:11 +00:00
53bc6a7796
Fix Formatting
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-04-20 13:52:41 -06:00
aed95aa2b1
Fix Formatting
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-04-20 13:45:45 -06:00
6343002b32
Next development version
2026-04-20 18:55:26 +00:00
7b57a4a3bb
Release 7.0.5
2026-04-20 17:54:57 +00:00
Joe Grandja