21 Commits

Author SHA1 Message Date
Josh Cummings
cb33fd7850
Add OIDC Back-Channel Logout Support
Closes gh-12570
2023-09-16 15:12:21 -06:00
Rob Winch
f66a5bab99 Merge branch '5.8.x' into 6.0.x
Closes gh-13406
2023-06-18 21:33:58 -05:00
Rob Winch
0cf95dbf61 Merge branch '5.6.x' into 5.7.x
Closes gh-13404
2023-06-18 21:31:35 -05:00
Rob Winch
39c43159f4 Convert to Asciidoctor Tabs
Closes gh-13403
2023-06-18 21:30:41 -05:00
Rob Winch
04692d9ee8 Fix Antora Warnings
Closes gh-13210
2023-06-08 17:02:19 -05:00
Josh Cummings
3469bcb822
Address Antora Warnings 2023-05-10 15:51:49 -06:00
Josh Cummings
cca999c57d
Merge remote-tracking branch 'origin/5.8.x' 2022-11-01 13:46:08 -06:00
Josh Cummings
c94e33b6c8
Merge branch '5.6.x' into 5.7.x 2022-11-01 13:42:35 -06:00
Ger Roza
8315545144 Update RP-Initiated Logout target URLs.
The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs.

Fixes: gh-12081
2022-11-01 12:35:39 -06:00
Steve Riesenberg
181ee7410b
Change default authority for oauth2Login()
Previously, the default authority was ROLE_USER when using
oauth2Login() for both OAuth2 and OIDC providers.

* Default authority for OAuth2UserAuthority is now OAUTH2_USER
* Default authority for OidcUserAuthority is now OIDC_USER

Documentation has been updated to include this implementation detail.

Closes gh-7856
2022-09-26 10:06:31 -05:00
Rob Winch
a5069d7e35 Fix Add @Configuration to @Enable*Security Usage
Issue gh-6613
2022-08-09 17:00:16 -05:00
Joshua Sattler
040111ae9e Remove Configuration meta-annotation from Enable* annotations
Before, Spring Security's @Enable* annotations were meta-annotated with @Configuration.
While convenient, this is not consistent with the rest of the Spring projects and most notably
Spring Framework's @Enable annotations. Additionally, the introduction of support for
@Configuration(proxyBeanMethods=false) in Spring Framework provides a compelling reason to
remove @Configuration meta-annotation from Spring Security's @Enable annotations and allow
users to opt into their preferred configuration mode.

Closes gh-6613

Signed-off-by: Joshua Sattler <joshua.sattler@mailbox.org>
2022-07-30 03:48:42 +02:00
Eleftheria Stein
4142f06259 Replace WebSecurityConfigurerAdapter with SecurityFilterChain in docs
Closes gh-10003
2022-02-08 18:10:58 +01:00
Eleftheria Stein
4492e5b667 Replace WebSecurityConfigurerAdapter with SecurityFilterChain in docs
Closes gh-10003
2022-02-08 16:12:10 +01:00
Rob Winch
2fb056b5c1 Merge Clean up Reference Documentation
Closes gh-9668
2021-12-13 16:57:36 -06:00
Steve Riesenberg
73e1506e5e Consistency update for servlet docs 2021-11-11 14:24:29 -06:00
Steve Riesenberg
ab794bf67a Consistency update for servlet docs 2021-11-11 10:41:12 -06:00
Josh Cummings
b60020a40c Use authorizeHttpRequests in Docs
Issue gh-8900
2021-11-10 16:09:50 -07:00
Josh Cummings
812d6f7b18 Use authorizeHttpRequests in Docs
Issue gh-8900
2021-11-10 16:08:57 -07:00
Josh Cummings
7708418fae Separate OAuth 2.0 Login Servlet Docs
Issue gh-10367
2021-11-05 12:45:46 -06:00
Josh Cummings
3db13de1e2 Separate OAuth 2.0 Login Servlet Docs
Issue gh-10367
2021-11-04 11:55:53 -06:00