c2441e5a58
Bump com.nimbusds:oauth2-oidc-sdk from 11.35 to 11.37
...
Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions ) from 11.35 to 11.37.
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt )
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.37..11.35 )
---
updated-dependencies:
- dependency-name: com.nimbusds:oauth2-oidc-sdk
dependency-version: '11.37'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-30 03:18:42 +00:00
036326d70b
Merge branch '7.0.x'
2026-03-27 16:49:33 -06:00
611786e4b5
Merge branch '6.5.x' into 7.0.x
2026-03-27 16:49:26 -06:00
ac63cf4fa5
Polish CustomAuthorizationManager Docs
...
Issue gh-13967
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 16:45:25 -06:00
f6bb55effb
Fix documentation for Custom Authorization Manager
...
Closes gh-13967
Signed-off-by: as1605 <1605.aditya.singh@gmail.com >
2026-03-27 16:45:25 -06:00
c489136515
Merge branch '7.0.x'
2026-03-27 16:40:04 -06:00
6020ab8e65
Polish CustomAuthorizationManager Docs
...
Issue gh-13967
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 16:36:00 -06:00
3076367168
Fix documentation for Custom Authorization Manager
...
Closes gh-13967
Signed-off-by: as1605 <1605.aditya.singh@gmail.com >
2026-03-27 16:36:00 -06:00
2c32a9a969
Merge branch '7.0.x'
2026-03-27 16:10:36 -06:00
721b22d87a
Merge remote-tracking branch 'origin/6.5.x' into 7.0.x
2026-03-27 16:10:18 -06:00
85b756cb74
Update FilterChainProxy#getFilters(String) javadoc
...
Closes gh-18157
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-03-27 16:09:50 -06:00
b92c072501
add tests
...
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-27 15:26:57 -06:00
6335caabae
polish
...
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-27 15:26:57 -06:00
c3e0b98b7e
Use idiomatic Kotlin in custom filter documentation
...
This will make Kotlin and all users more native and readable.
Closes: gh-18967
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-27 15:26:57 -06:00
acbf64a47d
Improve And/Or-RequestMatcher/ServerWebExchangeMatcher API
...
Currently, the List-receiving constructors of AndRequestMatcher,
OrRequestMatcher, AndServerWebExchangeMatcher, and OrServerWebExchangeMatcher
don't support covariance, which adds obstacles to users of these
APIs. For example, one cannot pass a List<PathPatternRequestMatcher>
to OrRequestMatcher(List<RequestMatcher>).
This commit resolves the aforementioned problem. It should not
break existing code.
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-27 15:24:55 -06:00
46e27aa693
Remove compiler warnings in spring-security-web
...
- fix compiler warnings in ServerOneTimeTokenAuthenticationConverter
- Replace deprecated API calls to create a OneTimeTokenAuthenticationToken.unauthenticated with OneTimeTokenAuthenticationToken(String token) call
- Update HttpMessageConverterAuthenticationSuccessHandler to replace deprecated MappingJackson2HttpMessageConverter with JacksonJsonHttpMessageConverter
- Replace updated OneTimeTokenAuthenticationConverter to use non-deprecated OneTimeTokenAuthenticationToken constructor
- update tests to remove use of deprecated methods
- refactor JdbcTokenRepositoryImpl to remove extension of deprecated JdbcDaoSupport class
- enable compile-warnings-error plugin
Closes gh-18441
Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com >
2026-03-27 15:14:55 -06:00
441e0fc976
Bump org.apereo.cas.client:cas-client-core from 4.0.4 to 4.1.0
...
Bumps [org.apereo.cas.client:cas-client-core](https://github.com/apereo/java-cas-client ) from 4.0.4 to 4.1.0.
- [Release notes](https://github.com/apereo/java-cas-client/releases )
- [Commits](https://github.com/apereo/java-cas-client/compare/cas-client-4.0.4...cas-client-4.1.0 )
---
updated-dependencies:
- dependency-name: org.apereo.cas.client:cas-client-core
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 19:45:26 +00:00
41efee0d35
Merge branch '7.0.x'
2026-03-27 13:27:15 -06:00
0ce76d2c5d
Merge branch '6.5.x' into 7.0.x
2026-03-27 13:27:03 -06:00
66cf02c6b0
Bump spring-io/spring-gradle-build-action from 2.0.5 to 2.0.6
...
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action ) from 2.0.5 to 2.0.6.
- [Release notes](https://github.com/spring-io/spring-gradle-build-action/releases )
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/efc55f07f4dfa22f2afd97f9ea1be4212eeed737...c8668747d7c264864c8c7f7026d0d277d14a78dc )
---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
dependency-version: 2.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 13:26:10 -06:00
7441ce7f16
Bump spring-io/spring-security-release-tools/.github/workflows/perform-release.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/perform-release.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/729fed56d42122f88583aff1be35c0800b7d77e9...b92832ecbc7cbe969201e6beafbde0ee400cf095 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/perform-release.yml
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 13:25:46 -06:00
9dbcd8cf00
Bump spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml
...
Bumps [spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml](https://github.com/spring-io/spring-security-release-tools ) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/729fed56d42122f88583aff1be35c0800b7d77e9...b92832ecbc7cbe969201e6beafbde0ee400cf095 )
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools/.github/workflows/update-scheduled-release-version.yml
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 13:25:35 -06:00
63e0d66811
Merge branch '7.0.x'
2026-03-27 13:23:08 -06:00
e6db4418b0
Merge branch '6.5.x' into 7.0.x
2026-03-27 13:22:44 -06:00
835d6c1fbd
Add Issuer Validation to withIssuerLocation Snippets
...
Closes gh-19000
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 13:22:24 -06:00
95b6dc753a
Merge branch '7.0.x'
2026-03-27 12:14:47 -06:00
9fb3e14989
Merge branch '6.5.x' into 7.0.x
2026-03-27 12:14:41 -06:00
fc90a1ffeb
Merge branch '7.0.x'
2026-03-27 12:13:54 -06:00
de14d9684f
Add Reference Docs for DelegatingJwtGrantedAuthoritiesConverter
...
Issue gh-18300
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 12:13:49 -06:00
2c90edd7b7
Merge branch '6.5.x' into 7.0.x
2026-03-27 12:12:27 -06:00
95b2cdf7f4
Clarify JavaDoc
...
Removed note about DelegatingJwtGrantedAuthoritiesConverter from
ExpressionJwtGrantedAuthoritiesConverter and further explained in
DelegatingJwtGrantedAuthoritiesConverter where it comes in handy.
Issue gh-18300
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-27 11:48:56 -06:00
d5d466b0eb
Bump org.jetbrains.dokka from 2.1.0 to 2.2.0
...
Bumps [org.jetbrains.dokka](https://github.com/Kotlin/dokka ) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/Kotlin/dokka/releases )
- [Commits](https://github.com/Kotlin/dokka/compare/v2.1.0...v2.2.0 )
---
updated-dependencies:
- dependency-name: org.jetbrains.dokka
dependency-version: 2.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 03:17:45 +00:00
2970d2baf9
Bump org.jetbrains.dokka:dokka-gradle-plugin from 2.1.0 to 2.2.0
...
Bumps [org.jetbrains.dokka:dokka-gradle-plugin](https://github.com/Kotlin/dokka ) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/Kotlin/dokka/releases )
- [Commits](https://github.com/Kotlin/dokka/compare/v2.1.0...v2.2.0 )
---
updated-dependencies:
- dependency-name: org.jetbrains.dokka:dokka-gradle-plugin
dependency-version: 2.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 03:17:37 +00:00
826f5d6d72
Bump spring-io/spring-gradle-build-action from 2.0.5 to 2.0.6
...
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action ) from 2.0.5 to 2.0.6.
- [Release notes](https://github.com/spring-io/spring-gradle-build-action/releases )
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/efc55f07f4dfa22f2afd97f9ea1be4212eeed737...c8668747d7c264864c8c7f7026d0d277d14a78dc )
---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
dependency-version: 2.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-27 00:46:59 +00:00
f0e71a8bc4
Merge pull request #18990 from rwinch/7.0.x-gh-18970-null-oncommitted
...
Merge Handle null value in OnCommittedResponseWrapper header methods
2026-03-26 17:33:33 -04:00
4704aea72a
Merge pull request #18991 from rwinch/main-gh-18970-null-oncommitted
...
Merge Handle null value in OnCommittedResponseWrapper header methods
2026-03-26 17:31:43 -04:00
3ecf84855e
Merge pull request #18989 from rwinch/gh-18970-null-oncommitted
...
Merge Handle null value in OnCommittedResponseWrapper header methods
2026-03-26 17:29:33 -04:00
9f67afee42
Merge Handle null value in OnCommittedResponseWrapper header methods
2026-03-26 15:58:12 -05:00
2848b95fe0
Merge Handle null value in OnCommittedResponseWrapper header methods
2026-03-26 15:44:49 -05:00
0039bc0cf0
Handle null value in OnCommittedResponseWrapper header methods
...
Closes gh-18970
2026-03-26 14:50:44 -05:00
aff736903d
Bump picomatch from 2.3.1 to 2.3.2 in /javascript
...
Bumps [picomatch](https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-25 21:48:06 +00:00
0606ff152b
Merge branch '7.0.x'
2026-03-25 15:20:07 -06:00
671a53e850
Merge branch '6.5.x' into 7.0.x
2026-03-25 15:19:59 -06:00
057e5181ea
Adjust Formatting
...
Issue gh-18805
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-25 15:19:29 -06:00
178ca56aaf
Fallback defaultTargetUrl if refererHeader is empty
...
Closes gh-18805
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-03-25 15:19:29 -06:00
a80447c65f
Merge branch '7.0.x'
2026-03-25 15:11:59 -06:00
164fbaf007
Merge branch '6.5.x' into 7.0.x
2026-03-25 15:11:52 -06:00
61ccf14953
Bump org.hibernate.orm:hibernate-core from 6.6.44.Final to 6.6.45.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.44.Final to 6.6.45.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.45/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.44...6.6.45 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.45.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-25 15:11:27 -06:00
608b36bb1d
Add docs-build to Dependabot Auto-Merge
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-25 14:45:37 -06:00
51ce11cbd2
Move InetAddressMatcher to spring-security-core
...
Closes gh-18979
2026-03-25 15:25:57 -05:00
dependabot[bot]