956561e143
Merge branch '6.5.x' into 7.0.x
2026-03-20 15:28:36 -06:00
9fed1ac8c3
New line per sentence
...
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com >
2026-03-20 15:28:21 -06:00
9dbe3bdcc0
Polish Session Management Persistence Docs
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-20 15:28:21 -06:00
d547ae0181
Fix defaults description in Session Management doc
...
Corrected that starting from Spring Security 6
security context is not automatically saved by default.
Signed-off-by: sankranti <sankranty@gmail.com >
2026-03-20 15:28:21 -06:00
b8b1278e1f
Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.7 to 1.14.9.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.7...v1.14.9 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 15:22:06 -06:00
fbbbd46bee
Update asciidoctor-extensions to 1.0.0-alpha.18
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-20 21:21:22 +00:00
0d75e6d10c
Bump @springio/asciidoctor-extensions in /docs
...
Bumps [@springio/asciidoctor-extensions](https://github.com/spring-io/asciidoctor-extensions ) from 1.0.0-alpha.17 to 1.0.0-alpha.18.
- [Changelog](https://github.com/spring-io/asciidoctor-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/asciidoctor-extensions/compare/v1.0.0-alpha.17...v1.0.0-alpha.18 )
---
updated-dependencies:
- dependency-name: "@springio/asciidoctor-extensions"
dependency-version: 1.0.0-alpha.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:56:46 -06:00
874dce4407
Bump @springio/antora-extensions from 1.14.7 to 1.14.9 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.7 to 1.14.9.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.7...v1.14.9 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 14:54:26 -06:00
2c1c50ddca
Update Antora Spring UI to v0.4.26
2026-03-13 17:45:06 +00:00
03a5de1955
Update Antora Spring UI to v0.4.26
2026-03-13 17:45:05 +00:00
26937bf06c
Remove unnecessary webauthn4j dependency
2026-03-09 14:25:08 -05:00
8e8e1a80a9
Add Passkeys webauthn in example
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-03-09 14:23:14 -05:00
8c3f6ea0d4
Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs
...
---
updated-dependencies:
- dependency-name: "@antora/collector-extension"
dependency-version: 1.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-06 00:37:07 +00:00
40682415ba
Bump @antora/collector-extension from 1.0.2 to 1.0.3 in /docs
...
---
updated-dependencies:
- dependency-name: "@antora/collector-extension"
dependency-version: 1.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-06 00:37:05 +00:00
57434fc597
Update RestTemplateBuilder usage in opaque-token.adoc
...
We just now use a new form instead of the deprecate one.
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-03 16:48:22 -07:00
20a7f96062
Merge branch '6.5.x' into 7.0.x
2026-03-03 16:44:12 -07:00
706b059ea8
Update logout.adoc
...
Directives should be Directive
Signed-off-by: HaiYan <haiyan_qi@hotmail.com >
2026-03-03 16:43:18 -07:00
c29af014f4
Merge remote-tracking branch 'origin/6.5.x' into 7.0.x
2026-02-26 17:10:16 -07:00
4501ae7d1c
Update Reactive Resource Server startup exceptations
...
Issue gh-16708
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-02-26 16:56:22 -07:00
48112d3d74
Polish Resource Server startup expectations
...
Issue gh-16708
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-02-26 16:56:22 -07:00
b8735abb63
Clarify Resource Server startup expectations
...
Clarify that Spring Boot defers OIDC discovery by default.
Closes gh-16708
Signed-off-by: [CLOUD4] 한현 <gusgus1467@naver.com >
2026-02-26 16:56:22 -07:00
7c3c8bbdcb
Update Remember-Me example
...
Closes gh-18639
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-02-26 15:28:32 -07:00
731848d5d3
Merge branch '6.5.x' into 7.0.x
2026-02-26 15:09:45 -07:00
68a02ff176
Update Link to CRSF Docs in FAQ
...
Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com >
2026-02-26 14:47:21 -07:00
73ee893d98
Merge remote-tracking branch 'origin/6.5.x' into 7.0.x
2026-02-24 17:10:14 -07:00
4d43edfb20
Polish Documentation
...
- Combined explanation of method attribute with usage recommendations
- Used one sentence per line format
Issue gh-16530
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-02-24 14:24:11 -07:00
9f9699f8a5
Clarify need for method attribute in JSP authorize tag
...
Closes gh-16530
This aligns the JSP documentation with the changes made in gh-16529.
Added a NOTE to clarify that the method attribute is required when the underlying RequestMatcher is method-specific.
Signed-off-by: onhann <gusgus1467@naver.com >
2026-02-24 14:24:11 -07:00
fec988c82d
Add Kerberos Migration Section
...
This links to the updated dependency coordinates
Issue gh-18773
Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com >
2026-02-23 11:29:50 -06:00
17b434c1c1
Document the change in dependency coordinates with Spring Security 7
...
Signed-off-by: busoco-sjb <169069865+busoco-sjb@users.noreply.github.com >
2026-02-23 11:21:59 -06:00
50fad46df6
Bump @antora/atlas-extension in /docs
...
---
updated-dependencies:
- dependency-name: "@antora/atlas-extension"
dependency-version: 1.0.0-alpha.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-06 12:12:48 -06:00
e28eea208b
Bump @springio/antora-extensions from 1.14.4 to 1.14.7 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.4 to 1.14.7.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.4...v1.14.7 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-06 12:11:58 -06:00
f646392542
Bump @antora/collector-extension from 1.0.1 to 1.0.2 in /docs
...
---
updated-dependencies:
- dependency-name: "@antora/collector-extension"
dependency-version: 1.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-06 12:11:57 -06:00
52ca16fa4b
Bump antora from 3.2.0-alpha.8 to 3.2.0-alpha.11 in /docs
...
Bumps [antora](https://gitlab.com/antora/antora ) from 3.2.0-alpha.8 to 3.2.0-alpha.11.
- [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc )
- [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-alpha.8...v3.2.0-alpha.11 )
---
updated-dependencies:
- dependency-name: antora
dependency-version: 3.2.0-alpha.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-06 17:52:25 +00:00
075c48c0d8
Fix typo in documentation
...
Signed-off-by: Vincent Stradiot <vincentstradiot@hotmail.com >
2026-02-05 17:22:43 -07:00
2c97b3376b
Document Client PKCE settings
...
Updated the documentation to reflect recent changes to enable PKCE by default for `authorization_code` flows in the documentation for the client.
Closes gh-18304
Signed-off-by: Elayne Bloom <5840349+bloomsei@users.noreply.github.com >
2026-02-02 16:30:27 -05:00
74b93a19f6
Externalize java-toolchain configuration
...
We should not use subprojects to perform configuration becaause it
does not allow for lazy loading and it can cause ordering problems.
In this case, the toolchain was not being used but instead it was
using the JAVA_HOME.
By splitting the configuration into a plugin and applying it to each
project it fixes the toolchain configuration
2026-01-26 22:06:36 -06:00
1f39a3dd3e
Merge branch '6.5.x' into 7.0.x
2026-01-15 12:41:22 -07:00
84b124d29d
Merge branch '6.4.x' into 6.5.x
2026-01-15 12:41:16 -07:00
fee6a9bb0e
docs: add CurrentSecurityContext section and link references
...
Signed-off-by: songhee <songhee9327@gmail.com >
2026-01-15 12:31:58 -07:00
508b3f26e3
docs: Typo in page Preparing for 7.0 / Web (version 6.5)
...
In section 'Include the Servlet Path Prefix in Authorization Rules', `PathPatternRequestParser` should be replaced by `PathPatternRequestMatcher`.
Signed-off-by: Guillaume Husta <guillaume.husta@gmail.com >
2026-01-14 14:35:26 -07:00
63c99b9438
Revert "Update to 7.1.0-SNAPSHOT"
...
This reverts commit b77ea8d3a3
2026-01-12 14:31:57 -06:00
b77ea8d3a3
Update to 7.1.0-SNAPSHOT
2026-01-12 13:37:32 -06:00
e9a92a8e9a
Replacing use of deprecated 'check' in authorization documentation
...
check() was deprecated in Spring Security 7, but is referenced in documentation
Signed-off-by: Fr05ty-hub <frostylucas@gmail.com >
2026-01-09 15:27:00 -06:00
ed774d3595
Replacing use of deprecated 'check' in authorization documentation
...
check() was deprecated in Spring Security 7, but was referenced in documentation
Signed-off-by: Fr05ty-hub <frostylucas@gmail.com >
2026-01-09 15:27:00 -06:00
e588a3528f
Update Antora Spring UI to v0.4.25
2026-01-09 15:22:22 -06:00
7ea5be4b98
Update Antora Spring UI to v0.4.25
2026-01-09 15:21:48 -06:00
2344fe5ebb
Use proper xref syntax
...
Incldue the required resource id and required # of the fragment.
See
- https://docs.antora.org/antora/latest/page/xref/#xref-macro
- https://docs.antora.org/antora/latest/page/resource-id-coordinates/#id-resource
2026-01-09 09:21:02 -06:00
ba18f681e5
Use xref anchor id
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-01-09 09:21:02 -06:00
3d9bc6a5cf
Update mfa.adoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-01-09 09:21:02 -06:00
1d8ea63a9e
Fix typo in HTTP Basic Auth Provider documentation
...
The documentation states that setting the header `X-Requested-By` will remove the `WWW-Authenticate` header from the response.
However, after testing this and reading the library code it looks like the header to set is `X-Requested-With` (X-Requested-By is mentioned nowhere except in this documentation file), so I propose this simple PR to fix this.
Signed-off-by: Martin Boulais <31805063+martinboulais@users.noreply.github.com >
2026-01-08 13:59:34 -06:00
Josh Cummings