Josh Cummings
9b724377ce
Rework Saml2 Authentication Statement
...
This commit separates the authentication principal, the assertion details,
and the relying party tenant into separate components. This allows the
principal to be completely decoupled from how Spring Security triggers and
processes SLO.
Specifically, it adds Saml2AssertionAuthentication, a new authentication
implementation that allows an Object principal and a Saml2ResponseAssertionAccessor
credential. It also moves the relying party registration id from
Saml2AuthenticatedPrincipal to Saml2AssertionAuthentication.
As such, Saml2AuthenticatedPrincipal is now deprecated in favor of
placing its assertion components in Saml2ResponseAssertionAccessor and
the relying party registration id in Saml2AssertionAuthentication.
Closes gh-10820
2025-06-10 17:21:03 -06:00
Josh Cummings
aa3135169d
Polish Documentation
...
Closes gh-14635
2025-06-09 16:49:36 -06:00
Josh Cummings
eaab42a73c
Polish BearerTokenAuthenticationConverter Support
...
- Moved to BearerTokenAuthenticationFilter constructor to align with
AuthenticationFilter
- Undeprecated BearerTokenResolver to reduce number of migration scenarios
- Updated to 7.0 schema
- Added migration docs
Issue gh-14750
2025-06-04 18:17:17 -06:00
Josh Cummings
492444c588
Update shouldConvertGetRequests Migration Steps
...
Issue gh-17099
2025-06-03 13:12:38 -06:00
Josh Cummings
4ed131f6ab
Add shouldConvertGetRequests Migration Steps
...
Issue gh-17099
2025-06-03 13:10:45 -06:00
Josh Cummings
6d3b54df21
Change Type Validation Default
...
NimbusJwtDecoder and NimbusReactiveJwtDecoder now use
Spring Security's JwtTypeValidator by default instead
of Nimbus's type validator.
Closes gh-17181
2025-05-28 16:11:13 -06:00
Josh Cummings
37a814bc29
Add 7.0 -> 8.0 Migration Guide
...
Closes gh-17182
2025-05-28 16:11:12 -06:00
Josh Cummings
f280593566
Move Preparation Steps
...
Closes gh-16873
2025-04-03 11:08:24 -06:00
Josh Cummings
09b75719c2
Merge branch '6.4.x'
2025-04-03 11:08:11 -06:00
Josh Cummings
616b43f261
Restore 6.x Migration Steps
...
Issue gh-16873
2025-04-03 11:05:53 -06:00
Tran Ngoc Nhan
3be8e92187
Fix typo
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-03-27 16:40:35 -06:00
Josh Cummings
99345537d6
Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter
...
Issue gh-16417
2025-03-26 16:38:39 -06:00
Josh Cummings
91ee5e7f2b
Add RequestMatcher Migration Path for CAS
...
Issue gh-16417
2025-03-26 16:38:38 -06:00
Josh Cummings
15d9c13984
Add RequestMatcher MigrationPath for SwitchUserFilter
...
To simplify migration, the filter's setter methods still use AntPathRequestMatcher.
Users can call the equivalent RequestMatcher setter methods to opt-in to the change early.
Issue gh-16417
2025-03-26 16:38:38 -06:00
Josh Cummings
ff52e05b24
Favor PathPatternRequestMatcher in XML Configuration
...
Update BeanDefinitionParsers to use PathPatternRequestMatcher conditionally
on the presence of a PathPatternRequestMatcher.Builder bean
Closes gh-16828
2025-03-26 13:40:04 -06:00
Josh Cummings
0091cf697c
Add RedirectToHttps Migration Doc
...
Issue gh-16775
Issue gh-16678
2025-03-19 15:27:09 -06:00
Josh Cummings
ab43a660b9
Add RFC 9068 Support
...
Closes gh-13185
2025-02-27 12:40:01 -07:00
Josh Cummings
7d301f87d6
Add Opt-in PathPattern Strategy
...
Closes gh-16573
2025-02-21 13:40:24 -07:00
Josh Cummings
aea7f333f7
Document OpaqueTokenIntrospector Migration
...
Issue gh-15988
2025-01-16 20:41:56 -07:00
Marcus Da Coregio
5ceea9e2aa
Include information about -parameters flag in 6.2 upgrade notes
...
Closes gh-13552
2023-07-19 11:07:34 -03:00
Marcus Da Coregio
4c77a550ae
Change to Migrating to 6.2
...
Issue gh-13552
2023-07-19 10:30:23 -03:00
Rob Winch
8407c9ebee
Merge branch '6.0.x'
...
Closes gh-13407
2023-06-18 21:41:16 -05:00
Rob Winch
f66a5bab99
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13406
2023-06-18 21:33:58 -05:00
Rob Winch
7da99acca7
Merge branch '5.7.x' into 5.8.x
...
Closes gh-13405
2023-06-18 21:32:35 -05:00
Rob Winch
312b758b3a
Merge branch '5.7.x' into 5.8.x
...
Closes gh-13292
2023-06-08 17:14:34 -05:00
Josh Cummings
9d19435eb0
Merge branch '6.0.x'
2023-06-05 13:08:47 -06:00
delver
2629fb2061
Fix Kotlin typo
2023-06-05 13:08:17 -06:00
delver
77c337bac4
Fix invalid link
2023-06-05 13:08:17 -06:00
Marcus Da Coregio
5c88b95af5
Mention that authorizeHttpRequests does not support GrantedAuthorityDefaults
...
Closes gh-13227
2023-05-25 09:51:36 -03:00
Josh Cummings
68b052218a
Add @EnableTransactionManagement Details
...
Closes gh-13152
2023-05-24 10:10:00 -06:00
daisuzz
734dc98e50
Fix typo in authorization.adoc
2023-05-18 09:59:23 -06:00
Steve Riesenberg
491041dc60
Merge branch '6.0.x'
2023-05-12 15:44:33 -05:00
Steve Riesenberg
e234f85b2f
Fix hard-coded link in remote build
...
Issue gh-13156
2023-05-12 15:43:14 -05:00
Steve Riesenberg
0c3bafb505
Fix hard-coded link in remote build
...
Issue gh-12675
2023-05-12 15:41:51 -05:00
Steve Riesenberg
e96a5e9bd1
Merge branch '6.0.x'
...
Closes gh-13157
2023-05-12 13:54:56 -05:00
Steve Riesenberg
72d86f1cbc
Update links to 5.8 migration guide
...
Closes gh-13156
2023-05-12 13:46:54 -05:00
Steve Riesenberg
6a42d5c17b
Update link to 6.0 migration guide
...
Closes gh-12675
2023-05-12 13:43:02 -05:00
Josh Cummings
e5fcf1ebcf
Revisit Request and Method Security Docs
...
Issue gh-13088
2023-05-01 14:09:22 -06:00
Josh Cummings
9244989b2e
Fix allOf/anyOf Abstain Logic
...
Closes gh-13069
2023-04-24 15:36:17 -06:00
Brummolix
a513fc0f38
Fix SecurityWebApplicationInitializer.getSecurityDispatcherTypes example in doc #12939
2023-03-30 09:38:17 -03:00
Marcus Da Coregio
b4b4cd0ffa
Merge branch '5.8.x' into 6.0.x
...
Closes gh-12941
2023-03-28 15:23:21 -03:00
Marcus Da Coregio
eb58655fa9
Improve Docs by mentioning that Empty SecurityContext should be saved
...
Closes gh-12906
2023-03-28 15:21:30 -03:00
Josh Cummings
35cf52d3bd
Add DefaultMethodSecurityExpressionHandler
...
Closes gh-12356
2023-02-21 16:58:08 -07:00
Josh Cummings
6bf11181ef
Adjust AfterInvocationManager Migration Docs
...
The original documentation only addresses the post-authorize case.
Some implementations want also to modify the return type.
Issue gh-12620
2023-02-21 15:07:17 -07:00
Steve Riesenberg
2876605324
Polish migration doc
...
Issue gh-12675
2023-02-15 17:18:09 -06:00
Steve Riesenberg
bf2951b5af
Add sections for migrating exploit protection in 6.0
...
Issue gh-12462
2023-02-15 17:18:09 -06:00
Steve Riesenberg
ca1961d35e
Link to the latest 6.0.x release
...
Issue gh-12675
2023-02-15 17:01:28 -06:00
Steve Riesenberg
821db0a1ea
Polish migration doc
...
Issue gh-12675
2023-02-15 17:00:49 -06:00
Tao Sun
6f5c633241
Fix typo in Authentication Migrations page
2023-02-15 15:14:09 -07:00
Steve Riesenberg
45b81b194b
Expand migration docs regarding CSRF
...
Closes gh-12462
2023-02-15 14:53:28 -06:00
