Josh Cummings b3e262187c Make OneTimeTokenAuthenticationProvider Account Status Checks Opt-In ...

OneTimeTokenAuthenticationProvider no longer validates account status
by default. Applications can opt in via setUserDetailsChecker, for
example by providing AccountStatusUserDetailsChecker to reject locked,
disabled, or expired accounts.

Issue gh-17655

Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>

2026-08-11 15:18:49 -07:00

..

assets/images

Add Spring Security Kerberos

2025-09-12 14:25:20 -05:00

examples

Update Kerberos Sample Copyright

2025-09-12 15:12:47 -05:00

pages

Make OneTimeTokenAuthenticationProvider Account Status Checks Opt-In

2026-08-11 15:18:49 -07:00

partials

Remove deprecated implementations of OAuth2AccessTokenResponseClient

2025-07-03 14:23:23 -04:00

nav.adoc

Publish KDoc for the Kotlin DSL

2026-03-25 13:58:38 -06:00