3abed4886f
Merge branch '7.0.x' into 7.1.x
...
# Conflicts:
# gradle/libs.versions.toml
2026-09-08 12:04:42 -06:00
c4a46d100e
Update Reactor's Context reference link
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-09-08 12:02:37 -06:00
671cb75c72
Bump antora from 3.2.0-rc.3 to 3.2.0 in /docs
...
Bumps [antora](https://gitlab.com/antora/antora/tree/HEAD/packages/antora ) from 3.2.0-rc.3 to 3.2.0.
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc )
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-rc.3...v3.2.0 )
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-04 08:02:13 -07:00
7ea44bbb26
Bump antora from 3.2.0-rc.3 to 3.2.0 in /docs
...
Bumps [antora](https://gitlab.com/antora/antora/tree/HEAD/packages/antora ) from 3.2.0-rc.3 to 3.2.0.
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc )
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-rc.3...v3.2.0 )
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-04 07:28:40 -07:00
02f5f5a459
Merge branch '7.0.x' into 7.1.x
2026-09-03 15:42:29 -06:00
cc89707b03
Bump antora from 3.2.0-rc.2 to 3.2.0-rc.3 in /docs
...
Bumps [antora](https://gitlab.com/antora/antora ) from 3.2.0-rc.2 to 3.2.0-rc.3.
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc )
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-rc.2...v3.2.0-rc.3 )
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-rc.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-03 14:38:41 -07:00
118e51d45e
Merge branch '7.0.x' into 7.1.x
2026-09-03 15:01:11 -06:00
27a76a67ae
Include code example for reactive onetimetoken
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-09-03 14:00:44 -07:00
ff6cef0cd2
Include code example for servlet onetimetoken
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-09-03 14:00:44 -07:00
0123ae0981
Deprecate AesBytesEncryptor
...
This commit separates AesBytesEncryptor into two separate
implememtations, allowing for a migration away from default
arrangements that used a null IV
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-20 11:23:36 -06:00
502ecf9241
Deprecate AesBytesEncryptor
...
This commit separates AesBytesEncryptor into two separate
implememtations, allowing for a migration away from default
arrangements that used a null IV
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-20 11:21:20 -06:00
fd233120a8
Merge branch '7.0.x' into 7.1.x
2026-08-11 16:19:41 -06:00
63306ad8ee
Update One-Time Token Docs for Renamed APIs
...
Replace deprecated `UriComponentsBuilder` usage and renamed
`oneTimeTokenLogin` DSL method references in the docs with their
current equivalents.
Closes gh-18367
Signed-off-by: Arz Meow <arthur37231@gmail.com >
2026-08-11 14:47:25 -07:00
24aec1d002
Fix broken Javadoc links
...
Closes gh-19194
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-08-11 14:31:49 -07:00
863753580c
Fix Broken DefaultLoginPageGeneratingFilter Javadoc Link
...
Use the `javadoc:` macro so the reference resolves correctly.
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-08-11 14:31:43 -07:00
268fce2616
Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-rc.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-11 10:27:36 -07:00
5f377e5ec2
Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.12 to 1.14.13.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.12...v1.14.13 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-11 10:26:13 -07:00
43731e0523
Bump @springio/antora-extensions from 1.14.12 to 1.14.13 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.12 to 1.14.13.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.12...v1.14.13 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-07 00:46:03 +00:00
08d062bdc0
Merge branch '7.0.x'
...
# Conflicts:
# docs/modules/ROOT/pages/features/exploits/http.adoc
2026-08-03 17:53:54 -06:00
2c4db99229
Differentiate Forwarded and X-Forwarded headers in proxy docs
...
The proxy server section pointed at RFC 7239 and then told the reader to
configure the application server for the X-Forwarded headers, conflating
the standard Forwarded header with the non-standard X-Forwarded-* set.
Describe the two kinds of headers separately, note that most proxies send
X-Forwarded-* while Spring Framework and servers such as Reactor Netty and
Jetty understand both, and state that the edge proxy has to drop or
overwrite untrusted values for both kinds rather than only one.
Closes gh-19461
Signed-off-by: Sumit Kumar Das <skdas5405@gmail.com >
2026-08-03 17:52:32 -06:00
8d452e2c32
Merge branch '7.0.x'
2026-08-03 16:07:26 -06:00
0f6f453ea0
Increase Default NimbusJwtDecoder Timeouts to 30 Seconds
...
NimbusJwtDecoder's default RestOperations now respects the JDK's
sun.net.client.defaultConnectTimeout/defaultReadTimeout system properties,
falling back to 30 seconds instead of the previous 500 milliseconds,
matching JwtDecoderProviderConfigurationUtils's existing behavior.
Also documents this default and the RestOperations override in the
reference guide and migration guide (the reference guide's existing
"Configuring Timeouts" section already claimed 30 seconds -- it's been
inaccurate since the 500ms default shipped and is now correct again), and
documents providing a custom JwtDecoderFactory<ClientRegistration> for
OAuth2 Login's ID Token decoding.
Issue gh-19474
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-08-03 15:51:41 -06:00
b62affe126
Correct Copyright Headers
...
This commit updates all headers to have
the same date range.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-07-08 17:11:04 -06:00
fc2c927a72
Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-rc.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-26 01:04:48 +00:00
58bca0e895
Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.11 to 1.14.12.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.11...v1.14.12 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-09 05:27:42 -04:00
83f5dd0603
Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.11 to 1.14.12.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.11...v1.14.12 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-29 00:54:55 +00:00
02725ed7fd
Merge branch '7.0.x'
2026-05-22 22:28:06 -06:00
71fd23429c
Merge branch '6.5.x' into 7.0.x
2026-05-22 22:27:27 -06:00
85514a9b34
Update NodeJS to 24.15
...
This commit declares a NodeJS value whereas previously,
Antora would use the latest LTS version. When it updated to
Node 24.16, site production stopped, possibly due to
https://github.com/nodejs/node/commit/e95570c054 .
Either way, it is helpful to have a pinned version in order
to stabilize builds, allowing us to update it in an orderly
fashion like other dependencies.
Issue gh-19206
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:27:00 -06:00
6a029fd853
Merge branch '7.0.x'
2026-05-22 22:05:47 -06:00
d039e0191f
Move Doc Sample to Correct Package
...
Issue gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:05:29 -06:00
78685cdd77
Merge branch '7.0.x'
2026-05-22 21:37:30 -06:00
cfdadfea01
Apply Builder Bean Only to Application Endpoints
...
A published PathPatternRequestMatcher.Builder bean is intended to align
application endpoint matchers, which commonly are from the same servlet.
This commit ensures that this bean is used by securityMatcher(s),
authorizeHttpRequests, and WebSecurity#ignoring, which target
application endpoints typically served by servlets.
This commit also adds tests ensuring that the bean is not applied to filter-chain
security endpoints such as those configured by formLogin, logout,
oneTimeTokenLogin, OAuth 2.0 Login, and SAML 2.0 Login, since
these endpoints are, by default, handled by filters independent from
any target servlet and servlet path.
Closes gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 21:36:19 -06:00
4e04c266be
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:36:37 -06:00
e1d94d1e06
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 12:17:55 -06:00
3c37353475
Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs
...
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-15 00:46:45 +00:00
e480da69e9
Bump @springio/antora-extensions from 1.14.10 to 1.14.11 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.10 to 1.14.11.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.10...v1.14.11 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-17 11:12:01 -06:00
302cfb116e
Bump @springio/antora-extensions from 1.14.10 to 1.14.11 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.10 to 1.14.11.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.10...v1.14.11 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-17 11:08:19 -06:00
d6b97c7919
Bump @springio/antora-extensions from 1.14.9 to 1.14.11 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.9 to 1.14.11.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.9...v1.14.11 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-10 00:45:55 +00:00
6d20e02173
Update whats-new
...
Issue gh-18113
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-04-07 16:21:15 -06:00
44d32815b1
Bump @springio/antora-extensions from 1.14.9 to 1.14.10 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.9 to 1.14.10.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.9...v1.14.10 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-07 10:29:49 -06:00
76e9d91f24
Bump @springio/antora-extensions from 1.14.9 to 1.14.10 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.9 to 1.14.10.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.9...v1.14.10 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-07 10:06:09 -06:00
ff820a868e
Polish AllRequiredFactorsAuthorizationManager.anyOf
...
- Add validation
- Extract to static inner class
- Uniqueness determined by Set rather than requiredFactor
This is important for the failure with the same RequiredFactor, but a
different reason
- Add documentation
Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com >
2026-03-31 14:03:29 -05:00
ac63cf4fa5
Polish CustomAuthorizationManager Docs
...
Issue gh-13967
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 16:45:25 -06:00
f6bb55effb
Fix documentation for Custom Authorization Manager
...
Closes gh-13967
Signed-off-by: as1605 <1605.aditya.singh@gmail.com >
2026-03-27 16:45:25 -06:00
c489136515
Merge branch '7.0.x'
2026-03-27 16:40:04 -06:00
6020ab8e65
Polish CustomAuthorizationManager Docs
...
Issue gh-13967
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 16:36:00 -06:00
3076367168
Fix documentation for Custom Authorization Manager
...
Closes gh-13967
Signed-off-by: as1605 <1605.aditya.singh@gmail.com >
2026-03-27 16:36:00 -06:00
b92c072501
add tests
...
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-27 15:26:57 -06:00
6335caabae
polish
...
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-27 15:26:57 -06:00
Josh Cummings