1e30882290
Merge branch '7.0.x'
2026-06-01 14:07:53 -06:00
7fc97c6ee2
Select Most Specific RDN in X500 Principal Extractor
...
SubjectX500PrincipalExtractor now returns the left-most, most-specific
matching RDN value, matching both convention and
SubjectDnX509PrincipalExtractor. Since LdapName#getRdns lists RDNs
most-significant first, the extractor reads them in reverse so that a
subject with more than one matching attribute (e.g. two CNs) resolves to
the most specific value.
Closes gh-19254
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-06-01 14:05:58 -06:00
4a5379ee7e
Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4
...
Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 3.1.3 to 3.1.4.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-3.1.3...jackson-bom-3.1.4 )
---
updated-dependencies:
- dependency-name: tools.jackson:jackson-bom
dependency-version: 3.1.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-01 05:26:30 +00:00
180bec35dc
Bump io.mockk:mockk from 1.14.9 to 1.14.11
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.9 to 1.14.11.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.9...v1.14.11 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-01 05:25:18 +00:00
2cff85e380
Merge branch 7.0.x
2026-05-29 15:25:40 -06:00
241bf2c148
Merge branch 6.5.x into 7.0.x
2026-05-29 15:06:52 -06:00
cf06871200
Rework Logout Validation Logic
...
This commit simplifies the code, favoring the construction
of a list of error codes over composing a set of consumers.
This will simplify future analysis by making the code more
readable.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 14:45:44 -06:00
e50c2a6a74
Rework Login Validation Logic
...
This commit simplifies the validation code, favoring the
construction of a list of error codes over using an
accumulating Saml2ResponseValidationResult. This will
simplify future analysis by making the code more readable.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 14:45:36 -06:00
30c2c8dc68
Merge branch 7.0.x
2026-05-29 14:43:34 -06:00
b175e4487e
Merge branch 6.5.x into 7.0.x
2026-05-29 14:31:43 -06:00
356131b1ea
Use FormPostRedirectStrategy
...
Closes gh-16673
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 11:56:50 -06:00
6e17259030
Merge branch 7.0.x
2026-05-29 11:50:00 -06:00
97a49aa3bf
Add setRowMapper
...
This commit makes so that the strategy for reading an
AssertingPartyMetadata can be configured.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-29 11:48:20 -06:00
83f5dd0603
Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.11 to 1.14.12.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.11...v1.14.12 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-29 00:54:55 +00:00
dce01c5701
Merge branch '7.0.x'
2026-05-28 11:09:59 -04:00
e4a78c26d6
Polish redirect flows
2026-05-28 10:25:03 -04:00
9027e10b00
Merge branch '7.0.x'
2026-05-28 06:56:18 -04:00
c50e4c02bb
Merge branch '6.5.x' into 7.0.x
2026-05-28 06:55:13 -04:00
a14c9d66b1
Favor Relative URIs in CookieRequestCache
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-28 06:54:59 -04:00
f1d6451ded
Merge branch '7.0.x'
2026-05-28 06:46:22 -04:00
2924dd29f7
Merge branch '6.5.x' into 7.0.x
2026-05-28 06:39:55 -04:00
9d4d9065b4
Cap Deflate Size
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-28 06:39:29 -04:00
7c9cecc9e4
Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.33
...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback ) from 1.5.32 to 1.5.33.
- [Release notes](https://github.com/qos-ch/logback/releases )
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.33 )
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.33
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-28 03:17:13 +00:00
5c932b222e
Merge branch '7.0.x'
2026-05-27 16:44:01 -04:00
b844b12dc4
Revert "Add Test Against Snapshot"
...
This reverts commit 6241327862
2026-05-27 16:43:10 -04:00
3f1a794cd9
Revert "Add Test Against Snapshots"
...
This reverts commit c5de4096b4
2026-05-27 16:42:53 -04:00
6241327862
Add Test Against Snapshots
...
This commit uses a GH workflow to use
JDK 25 to test against snapshot versions
of various dependencies
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-27 16:18:01 -04:00
6833fc4152
Merge branch '7.0.x'
2026-05-27 16:12:42 -04:00
c5de4096b4
Add Test Against Snapshots
...
This commit uses a GH workflow that uses JDK 17 and tests
against snapshot versions of various upstream OSS projects.
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-27 16:12:29 -04:00
2ddb365607
Merge branch '7.0.x'
2026-05-27 11:29:24 -04:00
95d375c8d8
Partial revert fe2e52f646
...
Remove test against snapshots
Related gh-17558
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com >
2026-05-27 11:25:11 -04:00
98f5b363ed
Add micrometerVersion to check-snapshots.yml
...
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com >
2026-05-27 10:06:43 -04:00
4300a7fccb
Bump org.hibernate.orm:hibernate-core from 7.3.6.Final to 7.4.0.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.3.6.Final to 7.4.0.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.0/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.6...7.4.0 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.4.0.Final
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-27 05:06:16 +00:00
0a321da396
Merge branch '7.0.x'
2026-05-26 16:16:36 -06:00
b486d2695a
Update to Micrometer 1.16.5
...
Closes gh-19225
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 16:16:16 -06:00
c90acad0c2
Merge branch '7.0.x'
2026-05-26 15:31:13 -06:00
8b34113c2a
Merge branch '6.5.x' into 7.0.x
2026-05-26 15:27:35 -06:00
fe2e52f646
Add Micrometer Version Override
...
Closes gh-19187
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 15:18:01 -06:00
0ea87ca3bf
Upgrade Micrometer to 1.15.11
...
Closes gh-19224
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-26 15:17:57 -06:00
6555199ff7
Bump org.hibernate.orm:hibernate-core from 7.3.5.Final to 7.3.6.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.3.5.Final to 7.3.6.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.6/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.3.5...7.3.6 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.3.6.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-25 03:38:40 +00:00
02725ed7fd
Merge branch '7.0.x'
2026-05-22 22:28:06 -06:00
71fd23429c
Merge branch '6.5.x' into 7.0.x
2026-05-22 22:27:27 -06:00
85514a9b34
Update NodeJS to 24.15
...
This commit declares a NodeJS value whereas previously,
Antora would use the latest LTS version. When it updated to
Node 24.16, site production stopped, possibly due to
https://github.com/nodejs/node/commit/e95570c054 .
Either way, it is helpful to have a pinned version in order
to stabilize builds, allowing us to update it in an orderly
fashion like other dependencies.
Issue gh-19206
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:27:00 -06:00
6a029fd853
Merge branch '7.0.x'
2026-05-22 22:05:47 -06:00
d039e0191f
Move Doc Sample to Correct Package
...
Issue gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 22:05:29 -06:00
78685cdd77
Merge branch '7.0.x'
2026-05-22 21:37:30 -06:00
cfdadfea01
Apply Builder Bean Only to Application Endpoints
...
A published PathPatternRequestMatcher.Builder bean is intended to align
application endpoint matchers, which commonly are from the same servlet.
This commit ensures that this bean is used by securityMatcher(s),
authorizeHttpRequests, and WebSecurity#ignoring, which target
application endpoints typically served by servlets.
This commit also adds tests ensuring that the bean is not applied to filter-chain
security endpoints such as those configured by formLogin, logout,
oneTimeTokenLogin, OAuth 2.0 Login, and SAML 2.0 Login, since
these endpoints are, by default, handled by filters independent from
any target servlet and servlet path.
Closes gh-19128
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-22 21:36:19 -06:00
4942459250
Update to nimbus-jose-jwt 10.9
...
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com >
2026-05-21 19:23:26 +00:00
22d99d20ae
Bump com.nimbusds:oauth2-oidc-sdk from 11.37 to 11.37.2
...
Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions ) from 11.37 to 11.37.2.
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt )
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.37.2..11.37 )
---
updated-dependencies:
- dependency-name: com.nimbusds:oauth2-oidc-sdk
dependency-version: 11.37.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-21 19:23:26 +00:00
0c6e069454
Merge branch '7.0.x'
2026-05-21 12:55:43 -06:00
Josh Cummings