cdd4b36d37
Update Antora UI Spring to v0.4.26
2026-03-16 08:26:19 -05:00
7672f76fde
Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16
2026-03-16 08:26:12 -05:00
3db4999da4
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
2026-03-16 08:26:04 -05:00
59ef1c490f
Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.5 to 7.0.6.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:17:36 +00:00
5339565cbf
Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.4
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2025.1.3 to 2025.1.4.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.3...2025.1.4 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2025.1.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:17:23 +00:00
21593ab39f
Bump org.hibernate.orm:hibernate-core from 7.2.6.Final to 7.2.7.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.2.6.Final to 7.2.7.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.2.7/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.2.6...7.2.7 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.2.7.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:16:53 +00:00
3813627a15
Bump org.springframework:spring-framework-bom from 7.0.5 to 7.0.6
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 7.0.5 to 7.0.6.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.5...v7.0.6 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 7.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:13:40 +00:00
9616e6b640
Bump org.springframework.data:spring-data-bom from 2025.1.3 to 2025.1.4
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2025.1.3 to 2025.1.4.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.3...2025.1.4 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2025.1.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:13:21 +00:00
a708d2f61b
Bump org.springframework:spring-framework-bom from 6.2.16 to 6.2.17
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.16 to 6.2.17.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.16...v6.2.17 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.2.17
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 03:07:46 +00:00
ae827b6e1b
Fix Jackson 3 deserializer for AuthenticationExtensionsClientOutputs
...
The deserializer is updated to properly ignore unknown extensions.
This fix addresses the WebAuthn authentication failure appeared when
using FIDO2 security keys on Safari.
Closes gh-18643
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:34:34 +08:00
65bf54d842
Test Jackson 3 deserializer with unknown primitive WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:34:24 +08:00
7f75fd611e
Test Jackson 3 deserializer with unknown obj/arr WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:34:13 +08:00
a013bfaaec
Merge branch 'gh-18643-6.5.x' into gh-18643-7.0.x
2026-03-15 15:25:04 +08:00
e726c05e76
Fix Jackson 2 deserializer for AuthenticationExtensionsClientOutputs
...
The deserializer is updated to properly ignore unknown extensions.
Closes gh-18643
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:04:14 +08:00
a7039fb3e6
Test Jackson 2 deserializer with unknown primitive WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:03:28 +08:00
88ea668f47
Test Jackson 2 deserializer with unknown obj/arr WebAuthn ext
...
Signed-off-by: Ziqin Wang <ziqin@wangziqin.net >
2026-03-15 15:03:17 +08:00
2c1c50ddca
Update Antora Spring UI to v0.4.26
2026-03-13 17:45:06 +00:00
03a5de1955
Update Antora Spring UI to v0.4.26
2026-03-13 17:45:05 +00:00
22a98583f1
Enable null-safety in spring-security-oauth2-jose
...
Closes gh-17821
2026-03-13 11:58:29 -04:00
78f762fab8
Remove checkstyle suppressions for spring-security-oauth2-jose
...
Issue gh-17821
2026-03-13 11:38:08 -04:00
a29422950a
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-13 03:16:31 +00:00
91167adaa8
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-13 03:09:24 +00:00
06cbea383e
Bump org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.13 to 3.9.14.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.14
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-13 03:07:50 +00:00
e250236279
Read relayState from authenticationRequest
...
Closes gh-18243
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-12 10:30:11 -06:00
eae1a0a55c
Bump org.mockito:mockito-bom from 5.22.0 to 5.23.0
...
Bumps [org.mockito:mockito-bom](https://github.com/mockito/mockito ) from 5.22.0 to 5.23.0.
- [Release notes](https://github.com/mockito/mockito/releases )
- [Commits](https://github.com/mockito/mockito/compare/v5.22.0...v5.23.0 )
---
updated-dependencies:
- dependency-name: org.mockito:mockito-bom
dependency-version: 5.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-12 03:18:20 +00:00
266d2608f1
Clarify Nullability on Saml2AuthenticationRequestRepository
...
Issue gh-17823
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-11 16:51:48 -06:00
ddb825f7a5
Merge branch '7.0.x'
2026-03-11 16:47:02 -06:00
5b4fc73878
Merge branch '6.5.x' into 7.0.x
2026-03-11 16:46:51 -06:00
ef76ba040d
Require non-null authenticationRequest
...
Closes gh-18880
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-11 16:45:23 -06:00
c342b89760
Remove setRequestEntityConverter
...
Given that RestClient does not read RequestEntity objects, let's
leave it out of a class built around using RestClient
Issue gh-18745
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-11 15:15:15 -06:00
5687867a09
Fix Checkstyle
...
Issue gh-18874
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-11 14:46:24 -06:00
61177aed85
Remove NullAway SuppressWarnings in ClaimAccessor
...
Issue gh-17820
2026-03-11 13:53:30 -04:00
36450d6c26
Fix checkstyle error
...
Issue gh-18874
2026-03-11 12:25:13 -04:00
763a8d4691
Bump io.projectreactor:reactor-bom from 2025.0.3 to 2025.0.4
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2025.0.3 to 2025.0.4.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2025.0.3...2025.0.4 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2025.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-11 03:08:26 +00:00
d69af716c8
Bump io.projectreactor:reactor-bom from 2024.0.15 to 2024.0.16
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2024.0.15 to 2024.0.16.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2024.0.15...2024.0.16 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2024.0.16
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-11 03:06:57 +00:00
a980368f26
Move Integration Test from Spring LDAP
...
Closes gh-18874
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-10 15:44:07 -06:00
37992d896b
Add to What's New
...
Issue gh-18745
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-10 15:44:05 -06:00
703ffaf143
Merge branch '7.0.x'
2026-03-10 15:59:29 -04:00
1906075b0c
OAuth2DeviceVerificationEndpointFilter is applied after AuthorizationFilter
...
Closes gh-18873
2026-03-10 15:32:24 -04:00
8dcaa6dfcb
Polish Documentation
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-03-10 07:57:43 -06:00
d1ce69ca99
Specify charset in WWW-Authenticate for Basic Auth
...
In this commit, we add support for the charset from RFC-7617, which
definitely solves the problem when the client does not know what charset
we are parsing with.
Closes: gh-18755
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com >
2026-03-10 07:57:43 -06:00
c7235ec0a3
Allow custom token settings for OAuth 2.0 dynamic client registration
...
Closes gh-18870
2026-03-10 07:48:37 -04:00
16cc1dd8d6
Bump io.micrometer:micrometer-observation from 1.16.3 to 1.16.4
...
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer ) from 1.16.3 to 1.16.4.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.3...v1.16.4 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.16.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-10 03:19:43 +00:00
17d2131fe9
Merge remote-tracking branch 'origin/7.0.x'
2026-03-09 17:13:45 -06:00
e8e0da1ec6
Add Null Guard for Setting ReactiveUserDetailsPasswordService
...
This use case specifically arises when using `ReactiveUserDetailsService`
without `ReactiveUserDetailsPasswordService`.
Closes gh-17986
Signed-off-by: Ronny Perinke <23166289+sephiroth-j@users.noreply.github.com >
2026-03-09 17:12:59 -06:00
8c0d2cccf1
Initialize RefreshOidcUserReactiveOAuth2AuthorizationSuccessHandler when jose is on classpath
...
Issue gh-17246
2026-03-09 17:03:49 -04:00
612f7884ea
Apply javadoc warnings plugin to aspects
...
The aspects module currently runs :javadoc as NO-SOURCE because it only contains AspectJ sources. Apply javadoc-warnings-error for consistency with other modules and future Java sources.
Closes gh-18446
Signed-off-by: ddingjoo <ddingsha9@teambind.co.kr >
2026-03-09 16:14:47 -04:00
0f7a6d45fd
Polish websocket
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2026-03-09 15:59:27 -04:00
c34cb108cb
Merge Fix spring-security-webauthn dependency in passkeys documentation
2026-03-09 15:41:05 -04:00
2f81d2d99e
Merge Fix spring-security-webauthn dependency in passkeys documentation
2026-03-09 15:39:54 -04:00
Robert Winch