Joe Grandja
dab989d7c3
Fix NPE with DPoP tokenAuthenticationManager
...
Closes gh-17172
2025-06-05 16:06:55 -04:00
damable-nuvolex
3b12e758d3
Fix inconsistent constructor declaration
...
Closes gh-16325
Signed-off-by: damable-nuvolex <damable@nuvolex.com>
2025-06-05 12:36:27 -06:00
Evgeniy Cheban
33ae1711a7
Set Precedence Order for Spring MVC TargetVisitor
...
Closes gh-17185
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>
2025-06-04 12:47:36 -06:00
Josh Cummings
4bf03bde5b
Merge branch '6.4.x' into 6.5.x
2025-05-21 16:47:25 -06:00
Josh Cummings
3186e8df84
Merge remote-tracking branch 'origin/6.3.x' into 6.4.x
2025-05-21 16:46:54 -06:00
Andrey Litvitski
4048b2bd7d
Use HttpStatus in BackChannel Logout Filters
...
Closes gh-17125
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
2025-05-21 16:45:46 -06:00
Joe Grandja
a265ac6ae7
Polish gh-17080
2025-05-13 14:35:23 -04:00
Joe Grandja
e3c39f02bc
Add documentation for DPoP support
...
Closes gh-17072
2025-05-09 16:02:14 -04:00
Max Batischev
66e614cb0b
WebAuthnConfigurer Code Cleanup
...
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-05-06 15:20:08 -05:00
Max Batischev
421fcaee12
Add Assertions To WebAuthnConfigurer
...
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-05-06 15:20:08 -05:00
Josh Cummings
1a9f62dce4
Merge branch '6.4.x'
2025-05-05 16:00:59 -06:00
Josh Cummings
0220e471bb
Move Serialization Samples
...
To make SpringSecurityCoreVersionSerializableTests more manageable,
this commit moves the sample class constructions to a separate file.
In this way, the tests file only changes when serialization tests are
added. When classes are introduced, they can be added to SerializationSamples,
separating the two concerns
2025-05-05 15:51:10 -06:00
Josh Cummings
12a18c3792
Polish Serialization Tests
...
If Instancio fails to instatiate the class sample, it will
now also delete the serialized sample file. Otherwise, it will
leave a zero-byte file on the filesystem, confusing future test runs
2025-05-05 15:39:33 -06:00
Josh Cummings
d04f7071c2
Add Missing Serialization Samples
...
Closes gh-17038
2025-05-05 15:34:24 -06:00
Josh Cummings
8726e547d5
Add Serialization Samples for 6.5
...
Issue gh-16221
2025-05-05 15:31:51 -06:00
Josh Cummings
2949b5d5a4
Regenerate Incorrect Serialization Files
...
Given that these classes each have a consistent serialization UID
across minor versions, but that the 6.5.x serialized version is using a
different UID, these serialized files were likely generated in error.
As such, this commit replaces the serialized files with correct ones.
Issue gh-16432
2025-05-05 15:30:15 -06:00
Josh Cummings
34a9f57aa6
Merge branch '6.4.x'
2025-05-05 15:29:44 -06:00
Josh Cummings
c3c2bcd6b7
Ignore Serialization in Test Components
...
Since we don't need to ensure the serializability of test components
across versions, we can ignore missing version UIDs when those
test components aren't about testing Java serialization.
Issue gh-17038
2025-05-05 15:09:50 -06:00
Josh Cummings
39fdceab59
Add Missing Serializable Samples
...
Issue gh-17038
2025-05-05 15:09:50 -06:00
Josh Cummings
65d53beff8
Polish Serialization Tests
...
- Error when public, non-ignored, serializable file is missing a sample
- Provide mechanism for creating an InstancioApi from scratch
Issue gh-17038
2025-05-05 15:09:49 -06:00
Josh Cummings
34afa64c0c
Add Current-Version Deserialization Test
...
We should test that serialized files from the current minor version
can be deserialized. This ensures that serializations remain
deserializable in patch releases.
Issue gh-3737
2025-05-05 15:09:43 -06:00
Josh Cummings
f44ab7afdf
Update Deprecated Security Usage
2025-04-23 14:16:29 -06:00
Max Batischev
4a12382d2b
Remove unused classes
...
Remove DeferringObservationAuthorizationManager.java and DeferringObservationReactiveAuthorizationManager.java
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-04-23 14:09:05 -06:00
Josh Cummings
a683a3a730
Favor PathPatternMessageMatcher when activated
...
Issue gh-16500
2025-04-23 12:11:10 -06:00
Josh Cummings
0ab01eac14
Update Deprecated Security Usage
2025-04-23 12:11:08 -06:00
Josh Cummings
834370d8eb
Update Deprecated Spring Web Usage
2025-04-23 11:29:19 -06:00
Josh Cummings
2ad859a63c
Add Missing Deprecation Markers
2025-04-23 11:29:18 -06:00
Josh Cummings
3f7f3dabe7
Correct JavaDoc Class Reference
2025-04-23 11:29:18 -06:00
Josh Cummings
f86c4ad383
Polish Native Support
...
- Remove unneeded deprecateion marker
- Add missing reflected class
Issue gh-16536
2025-04-14 14:08:57 -06:00
Josh Cummings
178ca73673
Fix Type Check
...
Issue gh-16536
2025-04-14 13:42:44 -06:00
Josh Cummings
ae82be70c3
Add Needed Runtime Hints
...
Issue gh-16536
2025-04-14 11:06:18 -06:00
Josh Cummings
0e70482725
Fix Formatting
2025-04-10 15:55:00 -06:00
Josh Cummings
09ba5397fb
Add Support for Authorizing Spring MVC Return Types
...
Closes gh-16059
2025-04-10 15:48:10 -06:00
Josh Cummings
6438603cb6
Pick Up TargetVisitor Beans
...
Closes gh-16923
2025-04-10 15:48:09 -06:00
Josh Cummings
5841e35cae
Invert AuthorizeReturnObjectMethodInterceptor Dependency
...
Closes gh-16922
2025-04-10 15:48:09 -06:00
Daeho Kwon
9908d96644
DeferredCsrfToken Implements Supplier
...
Closes gh-16870
Signed-off-by: Daeho Kwon <trewq231@naver.com>
2025-04-09 14:24:11 -06:00
Josh Cummings
f93a7a2f85
Deprecate HandlerMappingIntrospectorRequestTransformer
...
Closes gh-16536
2025-04-07 13:56:18 -06:00
Steve Riesenberg
03e090c2d7
Merge branch '6.4.x'
...
Closes gh-16902
2025-04-07 10:57:12 -05:00
Steve Riesenberg
db34de59bc
Merge branch '6.3.x' into 6.4.x
...
Closes gh-16901
2025-04-07 10:55:51 -05:00
Steve Riesenberg
3c0fef59b5
Polish gh-16039
...
Closes gh-16038
2025-04-07 10:54:09 -05:00
Jonah Klöckner
da94fbe431
Evaluate URI query parameter only if enabled
...
Issue gh-16038
2025-04-07 10:54:07 -05:00
Joe Grandja
9c073dbcde
Add AuthenticationEntryPoint for DPoP
...
Issue gh-16574
Closes gh-16900
2025-04-07 09:38:51 -04:00
chu3la
8cbe02e3aa
Update WebAuthn Test Objects Class Names
...
Closes gh-16604
Signed-off-by: chu3la <elmansouri.houssam@gmail.com>
2025-04-03 16:33:34 -06:00
Josh Cummings
4cdc6dab21
Fix Formatting
...
Issue gh-16604
2025-04-03 12:55:51 -06:00
Vasanth
04d7130975
Update WebAuthn Test Objects Class Names
...
Renamed the WebAuthn test object class names
Closes gh-16604
Signed-off-by: Vasanth <76898064+vasanth-79@users.noreply.github.com>
2025-04-03 12:55:50 -06:00
Josh Cummings
2885b0f75f
Add valueOf
...
This commit adds a static factory for returning a constant
ClientAuthenticationMethod or creating a new one when there
is no match.
Issue gh-16825
2025-04-02 11:16:30 -06:00
Steve Riesenberg
7a937ca369
Merge branch '6.4.x'
...
Closes gh-16845
2025-03-28 16:34:35 -05:00
Steve Riesenberg
26c63aeb01
Merge branch '6.3.x' into 6.4.x
...
Closes gh-16844
2025-03-28 16:34:01 -05:00
Steve Riesenberg
b7df86197c
Apply request-handler-ref to CsrfAuthenticationStrategy
...
Closes gh-16801
2025-03-28 16:25:52 -05:00
Steve Riesenberg
c84c438075
Apply request-handler-ref to CsrfAuthenticationStrategy
...
Closes gh-16801
2025-03-28 16:08:36 -05:00
