Josh Cummings
6f1232ce79
Address Checkstyle
...
Issue gh-17447
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2025-08-05 09:15:56 -06:00
Mike Heath
93cb01612b
Add ExpressionTemplateValueProvider
...
Closes gh-17447
Signed-off-by: Mike Heath <michael.heath@familysearch.org>
2025-08-05 09:15:56 -06:00
Tran Ngoc Nhan
dfc8be0d48
Fix typo
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-08-04 09:40:20 -06:00
Tran Ngoc Nhan
371bee685f
Polish User#withDefaultPasswordEncoder
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-08-04 09:40:20 -06:00
Marcin Lewandowski
f61a8deccc
Update index.adoc
...
Signed-off-by: Marcin Lewandowski <marcin@ravendb.net>
2025-07-31 11:09:06 -06:00
Tran Ngoc Nhan
d6e378e9bb
Apply Diamond Operator
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-31 10:59:55 -06:00
Josh Cummings
bd98db4fe8
Update to Nimbus JOSE JWT 10.4
...
PR gh-17644
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
2025-07-31 10:57:22 -06:00
dependabot[bot]
c9bf821402
Bump com.nimbusds:oauth2-oidc-sdk from 11.26 to 11.26.1
...
Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions ) from 11.26 to 11.26.1.
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt )
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.26.1..11.26 )
---
updated-dependencies:
- dependency-name: com.nimbusds:oauth2-oidc-sdk
dependency-version: 11.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 10:57:22 -06:00
Deep Dhamala
ca557a9880
Simplify Error Message for Unsupported Security XSD Versions
...
Closes gh-17153
Signed-off-by: Deep Dhamala <dhamaladeep2@gmail.com>
2025-07-31 10:40:54 -06:00
Andrey Litvitski
2fbe8dd8f6
Make Stricter IP Format Check
...
Closes gh-17499
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
2025-07-31 10:30:57 -06:00
Josh Cummings
1af665d6c8
Merge branch '6.5.x'
2025-07-31 10:21:50 -06:00
Josh Cummings
c966139338
Merge branch '6.4.x' into 6.5.x
2025-07-31 10:21:36 -06:00
Josh Cummings
a411fb7b8d
Merge remote-tracking branch 'origin/6.3.x' into 6.4.x
2025-07-31 10:21:26 -06:00
Michał Sobkiewicz
c963f4250e
Update Angular documentation links in csrf.adoc
...
Replaced `angular.io` links with their corresponding `angular.dev` URLs.
This change ensures that users referencing CSRF documentation are
directed to the most current Angular resources.
Signed-off-by: Michał Sobkiewicz <perceptron8@users.noreply.github.com>
2025-07-31 10:21:06 -06:00
Tran Ngoc Nhan
1a56023f7f
Use Spring Framework Nullability Annotations
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-31 10:18:51 -06:00
Josh Cummings
6873685fd0
Merge remote-tracking branch 'origin/6.5.x'
2025-07-31 10:12:39 -06:00
Tim Boeckstaens
f180a04b74
Use final values in equals and hashCode
...
Closes gh-17584
Signed-off-by: Tim Boeckstaens <boeckstaenstim@gmail.com>
2025-07-31 10:12:24 -06:00
Josh Cummings
0956846905
Merge branch '6.5.x'
2025-07-31 09:31:47 -06:00
Josh Cummings
940d378c3f
Merge branch '6.4.x' into 6.5.x
2025-07-31 09:31:26 -06:00
Josh Cummings
3c93a6728d
Merge remote-tracking branch 'origin/6.3.x' into 6.4.x
2025-07-31 09:31:07 -06:00
dependabot[bot]
97597389cc
Bump org.gretty:gretty from 4.1.6 to 4.1.7
...
Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty ) from 4.1.6 to 4.1.7.
- [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases )
- [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md )
- [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.6...v4.1.7 )
---
updated-dependencies:
- dependency-name: org.gretty:gretty
dependency-version: 4.1.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:29:13 -06:00
dependabot[bot]
6dba7b5051
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.6 to 1.0.10.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.6...v1.0.10 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:28:43 -06:00
dependabot[bot]
aa83b852b8
Bump org.gretty:gretty from 4.1.6 to 4.1.7
...
Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty ) from 4.1.6 to 4.1.7.
- [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases )
- [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md )
- [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.6...v4.1.7 )
---
updated-dependencies:
- dependency-name: org.gretty:gretty
dependency-version: 4.1.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:28:20 -06:00
dependabot[bot]
c82dffc03f
Bump io.spring.develocity.conventions from 0.0.23 to 0.0.24
...
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions ) from 0.0.23 to 0.0.24.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases )
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.23...v0.0.24 )
---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
dependency-version: 0.0.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:27:49 -06:00
dependabot[bot]
487c2c8ed0
Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8
...
Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom ) from 2024.1.7 to 2024.1.8.
- [Release notes](https://github.com/spring-projects/spring-data-bom/releases )
- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2024.1.7...2024.1.8 )
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2024.1.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:27:19 -06:00
dependabot[bot]
c84fd8a04b
Bump io.spring.nullability:io.spring.nullability.gradle.plugin
...
Bumps [io.spring.nullability:io.spring.nullability.gradle.plugin](https://github.com/spring-gradle-plugins/nullability-plugin ) from 0.0.1 to 0.0.2.
- [Release notes](https://github.com/spring-gradle-plugins/nullability-plugin/releases )
- [Commits](https://github.com/spring-gradle-plugins/nullability-plugin/compare/v0.0.1...v0.0.2 )
---
updated-dependencies:
- dependency-name: io.spring.nullability:io.spring.nullability.gradle.plugin
dependency-version: 0.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 10:27:07 -05:00
dependabot[bot]
1a96b026f3
Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.23.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.20.Final to 6.6.23.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.23/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.20...6.6.23 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.23.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:26:48 -06:00
dependabot[bot]
0dd19fd7ef
Bump io.spring.develocity.conventions from 0.0.23 to 0.0.24
...
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions ) from 0.0.23 to 0.0.24.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases )
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.23...v0.0.24 )
---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
dependency-version: 0.0.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:26:12 -06:00
dependabot[bot]
2866fa67ad
Bump org.jfrog.buildinfo:build-info-extractor-gradle
...
Bumps [org.jfrog.buildinfo:build-info-extractor-gradle](https://github.com/jfrog/build-info ) from 4.34.1 to 4.34.2.
- [Release notes](https://github.com/jfrog/build-info/releases )
- [Changelog](https://github.com/jfrog/build-info/blob/master/RELEASE.md )
- [Commits](https://github.com/jfrog/build-info/compare/build-info-gradle-extractor-4.34.1...build-info-gradle-extractor-4.34.2 )
---
updated-dependencies:
- dependency-name: org.jfrog.buildinfo:build-info-extractor-gradle
dependency-version: 4.34.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:25:46 -06:00
dependabot[bot]
b6ab504c64
Bump org.hibernate.orm:hibernate-core from 7.0.6.Final to 7.0.8.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.6.Final to 7.0.8.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.8/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.6...7.0.8 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.8.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:25:27 -06:00
dependabot[bot]
4aebb36255
Bump org.jfrog.buildinfo:build-info-extractor-gradle
...
Bumps [org.jfrog.buildinfo:build-info-extractor-gradle](https://github.com/jfrog/build-info ) from 4.34.1 to 4.34.2.
- [Release notes](https://github.com/jfrog/build-info/releases )
- [Changelog](https://github.com/jfrog/build-info/blob/master/RELEASE.md )
- [Commits](https://github.com/jfrog/build-info/compare/build-info-gradle-extractor-4.34.1...build-info-gradle-extractor-4.34.2 )
---
updated-dependencies:
- dependency-name: org.jfrog.buildinfo:build-info-extractor-gradle
dependency-version: 4.34.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:25:02 -06:00
dependabot[bot]
7ef9b0bbf5
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.8 to 6.2.9.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.8...v6.2.9 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.2.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-31 09:24:33 -06:00
Josh Cummings
9baee6fb14
Merge branch '6.5.x'
2025-07-30 12:14:37 -06:00
Josh Cummings
368cb7d7aa
Merge branch '6.4.x' into 6.5.x
2025-07-30 12:14:24 -06:00
Josh Cummings
63e4156b49
Merge remote-tracking branch 'origin/6.3.x' into 6.4.x
2025-07-30 12:14:03 -06:00
dependabot[bot]
c18c07011b
Bump io.mockk:mockk from 1.14.4 to 1.14.5
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.4 to 1.14.5.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.4...1.14.5 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 12:12:58 -06:00
dependabot[bot]
99f689eb52
Bump @springio/antora-extensions from 1.14.6 to 1.14.7 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.6 to 1.14.7.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.6...v1.14.7 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:50:42 -06:00
dependabot[bot]
de14fb8f77
Bump @springio/antora-extensions from 1.14.6 to 1.14.7 in /docs
...
Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions ) from 1.14.6 to 1.14.7.
- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc )
- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.6...v1.14.7 )
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:50:19 -06:00
dependabot[bot]
0ba2b3e0eb
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:47:23 -06:00
dependabot[bot]
4c0d1fcc60
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:47:04 -06:00
dependabot[bot]
ccf66f338b
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.6 to 1.0.10.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.6...v1.0.10 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:46:22 -06:00
dependabot[bot]
94cb87c696
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.8 to 6.2.9.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.8...v6.2.9 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.2.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:45:53 -06:00
dependabot[bot]
8b92f08c75
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9
...
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer ) from 1.14.8 to 1.14.9.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.8...v1.14.9 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:45:26 -06:00
dependabot[bot]
78a102c502
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.6 to 1.0.10.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.6...v1.0.10 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:44:53 -06:00
dependabot[bot]
ce922b486b
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:44:25 -06:00
dependabot[bot]
ffda336276
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9
...
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer ) from 1.14.8 to 1.14.9.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.8...v1.14.9 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:43:12 -06:00
dependabot[bot]
5cda51b5b8
Bump org.gretty:gretty from 4.1.6 to 4.1.7
...
Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty ) from 4.1.6 to 4.1.7.
- [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases )
- [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md )
- [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.6...v4.1.7 )
---
updated-dependencies:
- dependency-name: org.gretty:gretty
dependency-version: 4.1.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:42:30 -06:00
dependabot[bot]
7bd7ff6b42
Bump com.fasterxml.jackson:jackson-bom from 2.19.1 to 2.19.2
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.1 to 2.19.2.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.1...jackson-bom-2.19.2 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:41:52 -06:00
dependabot[bot]
6c19a355b5
Bump org.gretty:gretty from 4.1.6 to 4.1.7
...
Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty ) from 4.1.6 to 4.1.7.
- [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases )
- [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md )
- [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.6...v4.1.7 )
---
updated-dependencies:
- dependency-name: org.gretty:gretty
dependency-version: 4.1.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:41:20 -06:00
dependabot[bot]
ae514b320f
Bump io.spring.develocity.conventions from 0.0.23 to 0.0.24
...
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions ) from 0.0.23 to 0.0.24.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases )
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.23...v0.0.24 )
---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
dependency-version: 0.0.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:40:49 -06:00
dependabot[bot]
5e783abbe7
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.6 to 1.0.10.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.6...v1.0.10 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:40:01 -06:00
dependabot[bot]
7e112bf652
Bump org.hibernate.orm:hibernate-core from 6.6.20.Final to 6.6.23.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 6.6.20.Final to 6.6.23.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.23/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.20...6.6.23 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 6.6.23.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-30 11:39:24 -06:00
Rob Winch
517a2b185f
Merge branch '6.5.x'
2025-07-29 15:30:58 -05:00
Rob Winch
4d4f13f1df
Merge branch '6.4.x' into 6.5.x
2025-07-29 15:30:34 -05:00
Rob Winch
f2769e6eff
Fix META-INF/LICENSE.txt
...
Previously the update put everything into META-INF
Issue gh-17638
2025-07-29 15:29:47 -05:00
Rob Winch
d5107dd752
Merge Add META-INF/LICENSE.txt to published jars
2025-07-29 10:55:43 -05:00
Rob Winch
a2e85dd187
Merge branch '6.5.x'
...
Closes gh-17640
2025-07-29 10:54:36 -05:00
Rob Winch
f6cb0bd610
Merge Use 2004-present Copyright Header
...
The original merge into main did not apply the changes. This fixes it.
Closes gh-17635
2025-07-29 10:52:42 -05:00
Rob Winch
731cdacb77
Merge branch '6.4.x' into 6.5.x
...
Closes gh-17639
2025-07-29 10:47:22 -05:00
Rob Winch
ead8ec6e35
Add META-INF/LICENSE.txt to published jars
...
Closes gh-17638
2025-07-29 10:46:51 -05:00
Josh Cummings
4775fe41db
Merge branch '6.5.x'
2025-07-29 09:28:20 -06:00
Josh Cummings
a9fcec8b46
Merge branch '6.4.x' into 6.5.x
2025-07-29 09:27:47 -06:00
Josh Cummings
452d311a9b
Merge remote-tracking branch 'origin/6.3.x' into 6.4.x
2025-07-29 09:27:23 -06:00
Bernie Schelberg
edcb3b024e
Update Shibboleth repository URL
...
Signed-off-by: Bernie Schelberg <bernard.schelberg@invicara.com>
2025-07-29 09:26:42 -06:00
Rob Winch
116bee1303
Merge branch '6.5.x'
...
Closes gh-17635
2025-07-29 09:50:09 -05:00
Rob Winch
2fdca16c1a
Merge branch '6.4.x' into 6.5.x
...
Closes gh-17634
2025-07-29 09:47:52 -05:00
Rob Winch
392129b616
Use 2004-present Copyright Header
...
The Spring portfolio is changing to use <inception-year>-present in
the copyright headers to simplify keeping headers up to date. This
commit updates the headers and the checkstyle accordingly.
The commit updated etc/checkstyle/header.txt
It also updated the copyright headers using the following find/replace:
Find: (Copyright \d{4})\s*(\-\d{4})? the original author or authors.
Replace: Copyright 2004-present the original author or authors.
Closes gh-17633
2025-07-29 09:45:23 -05:00
Rob Winch
bf877a9864
Add OAuth2User to OidcUser Conversion Params
...
Previously the Oidc(Reactive)OAuth2UserService APIs allowed a strategy
for converting to the OidcUser with the OidcUserRequest and OidcUserInfo.
The input should also include the OAuth2User to make
it simple to use the OAuth2User as a part of the conversion.
This commit introduces OidcUserSource as a POJO containing
OidcUserRequest, OidcUserInfo, and OAuth2User.
It then updates the OidcUser conversion strategy in OidcUserService and
OidcReactiveOAuth2UserService to accept OidcUserSource as the source for
the Converter used to create OidUser.
Closes gh-17626
2025-07-25 09:09:24 -05:00
Rob Winch
34742c9743
Reapply "Move webauthn runtimehints to spring-security-webauthn"
...
This reverts commit 9489ab48abcbd192d87e5535f2459804d9826a80.
2025-07-23 13:32:34 -05:00
Rob Winch
4ffec6dcdd
Merge branch '6.5.x'
2025-07-23 09:42:57 -05:00
Rob Winch
8ab36cdf13
Merge branch '6.4.x' into 6.5.x
2025-07-23 09:42:49 -05:00
Rob Winch
c85aa61118
Bump org.gretty:gretty from 4.1.6 to 4.1.7
2025-07-23 09:41:51 -05:00
Rob Winch
4503947faa
Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10
2025-07-23 09:41:49 -05:00
Rob Winch
d58b068098
Bump com.fasterxml.jackson:jackson-bom from 2.19.1 to 2.19.2
2025-07-23 09:41:46 -05:00
Rob Winch
6bdab77302
Bump io.spring.develocity.conventions from 0.0.23 to 0.0.24
2025-07-23 09:41:44 -05:00
Rob Winch
7f25f67dd0
Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.1 to 0.0.2
2025-07-23 09:41:41 -05:00
Rob Winch
fc9696794b
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
2025-07-23 09:40:53 -05:00
Rob Winch
3cc74ff8bc
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9
2025-07-23 09:40:51 -05:00
Rob Winch
d0033739e8
Bump org.gretty:gretty from 4.1.6 to 4.1.7
2025-07-23 09:40:48 -05:00
Rob Winch
ba5d3158db
Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10
2025-07-23 09:40:46 -05:00
Rob Winch
1e9eeebcef
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9
2025-07-23 09:40:43 -05:00
Rob Winch
26600dab01
Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8
2025-07-23 09:39:47 -05:00
Rob Winch
bb279c166e
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9
2025-07-23 09:39:44 -05:00
Rob Winch
95c5851fbb
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
2025-07-23 09:39:42 -05:00
Rob Winch
d5bde7f3ec
Bump io.spring.gradle:spring-security-release-plugin from 1.0.6 to 1.0.10
2025-07-23 09:39:39 -05:00
Rob Winch
f32e1eb265
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9
2025-07-23 09:39:34 -05:00
Rob Winch
9489ab48ab
Revert "Move webauthn runtimehints to spring-security-webauthn"
...
This reverts commit fe411896af5ae5d5b50babfa292152335a3bf193.
2025-07-23 09:22:47 -05:00
Rob Winch
fe411896af
Move webauthn runtimehints to spring-security-webauthn
...
Issue gh-17586
2025-07-23 09:20:39 -05:00
dependabot[bot]
79f107de76
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9
...
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:49:22 +00:00
dependabot[bot]
0d1b73e291
Bump io.spring.gradle:spring-security-release-plugin
...
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:49:13 +00:00
dependabot[bot]
dbd2ea2992
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
...
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:49:09 +00:00
dependabot[bot]
ec867129a8
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9
...
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.2.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:49:07 +00:00
dependabot[bot]
0d434ee351
Bump org.springframework.data:spring-data-bom from 2024.1.7 to 2024.1.8
...
---
updated-dependencies:
- dependency-name: org.springframework.data:spring-data-bom
dependency-version: 2024.1.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:48:57 +00:00
dependabot[bot]
2d55fd5621
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9
...
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer ) from 1.14.8 to 1.14.9.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.8...v1.14.9 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:48:46 +00:00
dependabot[bot]
e11e8fe414
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.6 to 1.0.10.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.6...v1.0.10 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:48:41 +00:00
dependabot[bot]
7432554fa8
Bump org.gretty:gretty from 4.1.6 to 4.1.7
...
Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty ) from 4.1.6 to 4.1.7.
- [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases )
- [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md )
- [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.6...v4.1.7 )
---
updated-dependencies:
- dependency-name: org.gretty:gretty
dependency-version: 4.1.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:48:30 +00:00
dependabot[bot]
ff0b8f0138
Bump org.springframework:spring-framework-bom from 6.2.8 to 6.2.9
...
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework ) from 6.2.8 to 6.2.9.
- [Release notes](https://github.com/spring-projects/spring-framework/releases )
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.8...v6.2.9 )
---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
dependency-version: 6.2.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:48:20 +00:00
dependabot[bot]
9300146b99
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:48:04 +00:00
dependabot[bot]
176c3b8457
Bump io.spring.nullability:io.spring.nullability.gradle.plugin
...
Bumps [io.spring.nullability:io.spring.nullability.gradle.plugin](https://github.com/spring-gradle-plugins/nullability-plugin ) from 0.0.1 to 0.0.2.
- [Release notes](https://github.com/spring-gradle-plugins/nullability-plugin/releases )
- [Commits](https://github.com/spring-gradle-plugins/nullability-plugin/compare/v0.0.1...v0.0.2 )
---
updated-dependencies:
- dependency-name: io.spring.nullability:io.spring.nullability.gradle.plugin
dependency-version: 0.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:26:45 +00:00
dependabot[bot]
7e1a92b091
Bump io.spring.develocity.conventions from 0.0.23 to 0.0.24
...
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions ) from 0.0.23 to 0.0.24.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases )
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.23...v0.0.24 )
---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
dependency-version: 0.0.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:26:41 +00:00
dependabot[bot]
48533ede45
Bump com.fasterxml.jackson:jackson-bom from 2.19.1 to 2.19.2
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.1 to 2.19.2.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.1...jackson-bom-2.19.2 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:26:22 +00:00
dependabot[bot]
614763041e
Bump io.spring.gradle:spring-security-release-plugin
...
Bumps [io.spring.gradle:spring-security-release-plugin](https://github.com/spring-io/spring-security-release-tools ) from 1.0.6 to 1.0.10.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases )
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.6...v1.0.10 )
---
updated-dependencies:
- dependency-name: io.spring.gradle:spring-security-release-plugin
dependency-version: 1.0.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:26:09 +00:00
dependabot[bot]
b672aae640
Bump org.gretty:gretty from 4.1.6 to 4.1.7
...
Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty ) from 4.1.6 to 4.1.7.
- [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases )
- [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md )
- [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.6...v4.1.7 )
---
updated-dependencies:
- dependency-name: org.gretty:gretty
dependency-version: 4.1.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 03:26:06 +00:00
Rob Winch
79cd982341
Extract spring-security-webauthn
...
Closes gh-17586
2025-07-22 17:18:38 -05:00
Rob Winch
7c887d2da1
Add nullability to spring-security-core
...
Closes gh-17534
2025-07-22 16:29:13 -05:00
Rob Winch
9db1ffbd79
Add Nullability to spring-security-crypto
...
Closes gh-17533
2025-07-22 16:29:13 -05:00
Rob Winch
bc4ec39fa5
Add spring nullability
...
Issue gh-16882
2025-07-22 16:28:40 -05:00
Josh Cummings
fca30e3d25
Update What's New in Spring Security 7
...
Closes gh-17582
2025-07-21 15:00:47 -06:00
github-actions[bot]
7da30c27e4
Next development version
2025-07-21 19:13:12 +00:00
github-actions[bot]
50586dff07
Next development version
2025-07-21 19:12:47 +00:00
github-actions[bot]
4fe9d915b6
Release 6.4.8
2025-07-21 18:34:22 +00:00
github-actions[bot]
84d54b94c9
Next development version
2025-07-21 15:50:52 +00:00
github-actions[bot]
02b922ce5a
Release 7.0.0-M1
2025-07-21 15:25:10 +00:00
Rob Winch
ef77d3f0cf
Merge branch '6.5.x'
2025-07-21 09:43:08 -05:00
Rob Winch
85dc06bbdf
Merge branch '6.5.x'
...
Closes gh-17581
2025-07-21 09:30:11 -05:00
Rob Winch
4fa2d323fd
Merge branch '6.5.x'
2025-07-21 08:20:45 -05:00
Rob Winch
f2886f0ffc
Bump com.fasterxml.jackson:jackson-bom from 2.19.1 to 2.19.2
2025-07-21 08:19:48 -05:00
Rob Winch
23cf29ba17
UnboundIdContainer Disables Pauses for Ephemeral Port
...
Closes gh-17543
2025-07-21 07:30:59 -05:00
Josh Cummings
63e0a56bee
Add setBasePath
...
Originally, it was thought that this feature would be rather uncommon;
however, given some feedback from the Boot team, it makes sense to make
this easier to configure.
Of specific note is migrating from an earlier version were the
servlet path did not need to be specified in authorizeHttpRequests.
Since it does in 7, this will be a significant migration for those
who have a servlet path configured. This setter simplifies that a great
deal, including simplifying Boot's support of it.
Closes gh-17579
2025-07-20 22:57:06 -06:00
dependabot[bot]
6fa82bc0e3
Bump com.fasterxml.jackson:jackson-bom from 2.19.1 to 2.19.2
...
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-21 03:58:43 +00:00
Josh Cummings
15fc898804
Make DataTargetVisitor package-private
...
Closes gh-17561
2025-07-18 11:03:21 -06:00
Rob Winch
55a2100d1a
Update to Spring Data 2025.1.0-M4
...
Closes gh-17560
2025-07-18 09:31:37 -05:00
Rob Winch
2e75929856
Update to Spring Framework 7.0.0-M7
...
Closes gh-17559
2025-07-18 09:31:37 -05:00
Rob Winch
ce6e8f9109
Force Snapshot Build is separate workflow
...
Previously builds against the forced snapshots would prevent releases.
This didn't work out in practice because breaking changes could be
introduced that were not intended to be picked up until after releases.
This change splits the snapshot builds into a separate workflow so that
we are still informed when there is a breaking change coming, but it
does not block the release.
Closes gh-17558
2025-07-18 09:31:37 -05:00
dependabot[bot]
66ddfb43a0
Bump @springio/antora-extensions from 1.14.4 to 1.14.6 in /docs
...
---
updated-dependencies:
- dependency-name: "@springio/antora-extensions"
dependency-version: 1.14.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-18 09:15:29 -05:00
Rob Winch
b8741759ce
Merge branch '6.5.x'
2025-07-18 09:14:57 -05:00
Rob Winch
eaaadefa18
Merge branch '6.5.x'
2025-07-18 09:12:17 -05:00
Joe Grandja
a1f5b343ab
Merge branch '6.5.x'
2025-07-18 09:01:01 -04:00
Josh Cummings
25f69e92c7
Merge branch '6.5.x'
2025-07-17 18:04:52 -06:00
Josh Cummings
a2d687f78b
Prepare for Publishing to Central
2025-07-17 15:29:43 -06:00
dependabot[bot]
ecad58310a
Bump io.projectreactor:reactor-bom from 2025.0.0-M4 to 2025.0.0-M5
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2025.0.0-M4 to 2025.0.0-M5.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2025.0.0-M4...2025.0.0-M5 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2025.0.0-M5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-17 14:52:47 -05:00
dependabot[bot]
84dd6376a5
Bump io.micrometer:micrometer-observation from 1.14.8 to 1.14.9
...
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer ) from 1.14.8 to 1.14.9.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.8...v1.14.9 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.14.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-17 14:52:38 -05:00
dependabot[bot]
ad5ccf2a39
Bump org.hibernate.orm:hibernate-core from 7.0.5.Final to 7.0.6.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.5.Final to 7.0.6.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.6/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.5...7.0.6 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.6.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-17 14:40:49 -05:00
dependabot[bot]
563163aab0
Bump org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.10 to 3.9.11.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-17 14:40:21 -05:00
dependabot[bot]
644c7ac821
Bump io.mockk:mockk from 1.14.4 to 1.14.5
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.4 to 1.14.5.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.4...1.14.5 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-17 14:40:02 -05:00
Rob Winch
aaa34af4f7
Merge branch '6.5.x'
2025-07-17 13:03:14 -05:00
Rob Winch
f96b9bb5cc
Work Around UnboundIdContainer Fails with TestContext
...
See gh-17543
2025-07-17 09:02:37 -05:00
Joe Grandja
b8796d84b7
Fix tests in ClientRegistrationsTests
...
Issue gh-17542
2025-07-17 09:52:55 -04:00
Joe Grandja
f0c5a85d9a
Update com.nimbusds dependencies
...
Closes gh-17542
2025-07-17 09:52:17 -04:00
DingHao
dadf4c0b8a
Remove shouldFilterAllDispatcherTypes
...
Closes gh-12139
Signed-off-by: DingHao <dh.hiekn@gmail.com>
2025-07-14 12:34:16 -06:00
DingHao
5fefdd5bb3
Remove AbstractConfiguredSecurityBuilder apply
...
Closes gh-13441
Signed-off-by: DingHao <dh.hiekn@gmail.com>
2025-07-11 16:13:25 -06:00
Josh Cummings
0c42b61cc1
Restore legacy-websocket-configuration Link
...
In this way, links to this section will still arrive at something
helpful.
Issue gh-17295
2025-07-10 15:03:10 -06:00
Josh Cummings
9df668151b
Merge branch '6.5.x'
2025-07-10 14:53:51 -06:00
Josh Cummings
4d3024cb49
Remove MessageSecurityMetadataSourceRegistry
...
Issue gh-17295
2025-07-10 14:38:03 -06:00
Josh Cummings
686cc5fc1f
Remove PathMatcher Messaging Components
...
Closes gh-17501
2025-07-10 14:38:03 -06:00
Josh Cummings
684775b46a
Use PathPatternMessageMatcher By Default
...
Issue gh-17501
2025-07-10 14:38:03 -06:00
Josh Cummings
ff7359b54a
Merge branch '6.5.x'
2025-07-10 13:19:54 -06:00
Josh Cummings
ec16322000
Merge branch '6.5.x'
2025-07-10 13:19:14 -06:00
Josh Cummings
b7ae9910b5
Remove Deprecated CookieServerCsrfTokenRepository Methods
...
Closes gh-14132
2025-07-10 11:13:37 -06:00
Josh Cummings
ee2b826362
Use setCookieCustomizer
...
Issue gh-14132
2025-07-10 11:13:21 -06:00
Josh Cummings
7f8b9c895f
Use with Instead of Apply
...
Issue gh-13204
2025-07-09 18:58:23 -06:00
Josh Cummings
728b5224cb
Add withDefaults Shortcut for Custom Configurers
...
Issue gh-13204
2025-07-09 18:58:23 -06:00
Josh Cummings
f1725b25a0
Remove authorizeRequests
...
Closes gh-15174
2025-07-09 17:33:11 -06:00
Josh Cummings
2c87270dbc
Use authorizeHttpRequests
...
Issue gh-15174
2025-07-09 17:33:11 -06:00
Josh Cummings
dadf10899c
Add WebExpressionAuthorizationManager.Builder
...
Closes gh-17504
2025-07-09 17:33:10 -06:00
Josh Cummings
c312d18191
Add Publishing Predicate
...
Closes gh-17503
2025-07-09 17:33:10 -06:00
Josh Cummings
901b386ca6
Merge branch '6.5.x'
2025-07-09 14:11:14 -06:00
Josh Cummings
da182a2d7c
Remove Deprecated OpenSaml Components
...
Closes gh-17306
2025-07-09 14:06:51 -06:00
Josh Cummings
571b6fe4a8
Fix Formatting
...
Issue gh-16858
2025-07-09 14:05:41 -06:00
Josh Cummings
9dea1c2eb5
Update to Latest HttpRequestValues Contract
...
Issue gh-16858
2025-07-09 13:47:06 -06:00
Josh Cummings
c06b1f4916
Remove LazyCsrfTokenRepository
...
Closes gh-13196
2025-07-09 13:47:06 -06:00
Rob Winch
e48fdd5ed4
Use UserWebTestClientConfigurer
...
Closes gh-17496
2025-07-07 15:15:51 -05:00
Rob Winch
dbb3b7e1f5
Remove Unused import
2025-07-07 15:15:51 -05:00
Rob Winch
bfa2a3613c
Fix frameworkVersion
...
Should not strip -SNAPSHOT
2025-07-07 15:15:51 -05:00
Josh Cummings
02d69ec864
Keep EnableWebMvcSecurity Link
...
So that links across the Internet that are pointed at
#mvc-enablewebmvcsecurity still arrive at a relevant place,
this commit re-adds the mvc-enablewebmvcsecurity link, even
though @EnableWebMvcSecurity itself is now removed.
Issue gh-17294
2025-07-07 13:46:03 -06:00
Tran Ngoc Nhan
a439bc65d6
Remove EnableWebMvcSecurity
...
Closes gh-17294
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-07 13:46:03 -06:00
Josh Cummings
19e88f5e35
Polish Tests
...
Issue gh-17298
2025-07-07 13:38:34 -06:00
Tran Ngoc Nhan
242956a63c
Remove deprecated elements from DaoAuthenticationProvider
...
Closes gh-17298
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-07 13:38:34 -06:00
Rob Winch
ca5e307bf4
Merge branch '6.5.x'
2025-07-07 14:31:40 -05:00
dependabot[bot]
8e94157971
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.29.3.RELEASE to 0.29.4.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.3.RELEASE...0.29.4.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.29.4.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-07 14:31:35 -05:00
dependabot[bot]
e4155e8540
Bump io-spring-javaformat from 0.0.46 to 0.0.47
...
Bumps `io-spring-javaformat` from 0.0.46 to 0.0.47.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-07 14:31:35 -05:00
dependabot[bot]
7aecd78920
Bump org.hibernate.orm:hibernate-core from 7.0.4.Final to 7.0.5.Final
...
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.5.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-07 14:31:35 -05:00
Tran Ngoc Nhan
e52987d03c
Remove RoleHierarchyImpl Deprecations
...
Closes gh-17297
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-07 13:22:22 -06:00
Matt Magoffin
62252c1232
Default to XorCsrfChannelInterceptor in XML
...
Change WebSocketMessageBrokerSecurityBeanDefinitionParser to use
XorCsrfChannelInterceptor by default, so WebSocket XML configuration
matches the default Xor-based configuration already in
WebSocketMessageBrokerSecurityConfiguration.
Closes gh-17260
Signed-off-by: Matt Magoffin <matt@solarnetwork.net>
2025-07-07 13:02:15 -06:00
Josh Cummings
a9636c72d1
Merge branch '6.5.x'
2025-07-07 12:54:26 -06:00
Josh Cummings
74771a3d42
Merge branch '6.5.x'
2025-07-07 11:43:25 -06:00
Andrey Litvitski
fdf52f021d
Use LdapName
instead of DistinguishedName
...
Closes gh-17301
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
2025-07-07 11:40:45 -06:00
Tran Ngoc Nhan
6dc77bd98b
Update JwtIssuerAuthenticationManagerResolver constructor javadoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-07 11:37:52 -06:00
Josh Cummings
42283a5c1d
Add Missing File
...
Issue gh-17484
2025-07-07 11:18:57 -06:00
Josh Cummings
5ae1b73bae
Fix Cyclic Bean Dependency
...
Closes gh-17484
2025-07-07 10:32:56 -06:00
Tran Ngoc Nhan
d8043dc8a7
Remove PrePostTemplateDefaults
...
Closes gh-17296
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-03 15:47:27 -06:00
Tran Ngoc Nhan
21036c94b4
Remove Nimbus(Reactive)OpaqueTokenIntrospector
...
Closes gh-17302
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-03 15:41:57 -06:00
Tran Ngoc Nhan
519ae241f4
Fix Mock for Spring(Reactive)OpaqueTokenIntrospector
...
Issue gh-17302
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-03 15:41:57 -06:00
Andrey Litvitski
596d44757a
Remove RequestVariablesExtractor
...
Closes gh-17308
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
2025-07-03 14:41:12 -06:00
Josh Cummings
639a9afaea
Merge branch '6.5.x'
2025-07-03 14:40:30 -06:00
Tran Ngoc Nhan
9312fb7004
Remove Deprecated AuthorizationDecision Elements
...
Closes gh-17299
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-03 14:32:49 -06:00
Josh Cummings
448283b30c
Merge branch '6.5.x'
2025-07-03 14:19:44 -06:00
Josh Cummings
ce107795d8
Fix Broken JavaDoc Link
...
Issue gh-16886
2025-07-03 14:14:00 -06:00
Josh Cummings
af2985a269
Merge branch '6.5.x'
2025-07-03 13:43:24 -06:00
Josh Cummings
d3e9e3138d
Remove AntPath and MvcRequestMatcher
...
Closes gh-16886
Closes gh-16887
2025-07-03 13:37:50 -06:00
Josh Cummings
b71a66bdaa
Use PathPatternRequestMatcher in docs
...
Issue gh-16886
Issue gh-16887
2025-07-03 13:37:50 -06:00
Josh Cummings
e9506776f1
Use PathPatternRequestMatcher in test
...
Issue gh-16887
2025-07-03 13:37:49 -06:00
Josh Cummings
b6d61b2f10
Use PathPatternRequestMatcher in itest
...
Issue gh-16887
2025-07-03 13:37:49 -06:00
Josh Cummings
919ae1d636
Use PathPatternRequestMatcher in oauth2
...
Issue gh-16887
2025-07-03 13:37:49 -06:00
Josh Cummings
7da352129c
Use PathPatternRequestMatcher in saml2
...
Issue gh-16887
2025-07-03 13:37:48 -06:00
Josh Cummings
558b7e0b47
Use PathPatternRequestMatcher in cas
...
Issue gh-16887
2025-07-03 13:37:48 -06:00
Josh Cummings
e8ed0f1b03
Use PathPatternRequestMatcher in web
...
Issue gh-16887
2025-07-03 13:37:48 -06:00
Josh Cummings
3e53cc2c4a
Use PathPatternRequestMatcher in config
...
This commit changes the config module to use
PathPatternRequestMatcher in favor of
MvcRequestMatcher and AntPathRequestMatcher.
This allows removing several HandlerMappingIntrospector
support classes as well which were in place to
support MvcRequestMatcher.
Issue gh-16886
Issue gh-16887
2025-07-03 13:37:47 -06:00
Josh Cummings
f709a9efef
Add pathPattern Factory Methods
...
Closes gh-17476
2025-07-03 13:37:47 -06:00
Josh Cummings
98686a5139
Standardize Mock Request Paths
...
Closes gh-17449
2025-07-03 13:37:47 -06:00
Josh Cummings
d869686d09
Add TestMockHttpServleRequests
...
Closes gh-17450
2025-07-03 13:37:46 -06:00
Josh Cummings
d5f986f733
Deprecate createMvcMatchers
...
Issue gh-16631
2025-07-03 13:37:46 -06:00
Josh Cummings
f0d523b0ab
Merge remote-tracking branch 'origin/6.5.x'
2025-07-03 13:20:53 -06:00
Tran Ngoc Nhan
1583c90433
Remove Unused Method in TestOpenSamlObjects
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-03 13:15:44 -06:00
Tran Ngoc Nhan
a9e28a2ae9
Remove OpenSamlRelyingPartyRegistration
...
Issue gh-17309
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-03 13:15:44 -06:00
Tran Ngoc Nhan
8c100c5c27
Update RelyingPartyRegistration JavaDoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-03 13:15:44 -06:00
Tran Ngoc Nhan
4d524b1fe1
Remove RelyingPartyRegistration Deprecations
...
Closes gh-17309
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-07-03 13:15:44 -06:00
Deep Dhamala
081c92a9e5
Improve logging clarity in CsrfFilter
...
Update toString() method in DefaultRequiresCsrfMatcher to better reflect its logic during trace-level logging.
Closes gh-17250
Signed-off-by: Deep Dhamala <dhamaladeep2@gmail.com>
2025-07-03 13:00:55 -06:00
Josh Cummings
a22b2ffc94
Merge branch '6.5.x'
2025-07-03 12:52:08 -06:00
Soumik Sarker
06bd81b1da
Removed deprecated class BearerTokenAuthenticationFilter
...
Closes gh-17309
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
2025-07-03 12:44:06 -06:00
Soumik Sarker
526f8a6200
Removed deprecated class BearerTokenAuthenticationToken
...
Issue gh-17309
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
2025-07-03 12:44:06 -06:00
Soumik Sarker
edb7a642c7
Removed deprecated class ObjectPostProcessor
...
Issue gh-17309
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
2025-07-03 12:44:06 -06:00
Soumik Sarker
dff5780e09
Removed deprecated class ServiceAuthenticationDetails
...
Issue gh-17309
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
2025-07-03 12:44:06 -06:00
dependabot[bot]
465d46caa1
Bump io.mockk:mockk from 1.14.2 to 1.14.4
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.2 to 1.14.4.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.2...1.14.4 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-03 12:24:08 -06:00
dependabot[bot]
f8cb1b77fa
Bump org-apache-maven-resolver from 1.9.23 to 1.9.24
...
Bumps `org-apache-maven-resolver` from 1.9.23 to 1.9.24.
Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.23 to 1.9.24
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.23...maven-resolver-1.9.24 )
Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.23 to 1.9.24
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.23...maven-resolver-1.9.24 )
Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.23 to 1.9.24
---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-03 12:23:39 -06:00
Joe Grandja
e869bcdfa3
Remove deprecated implementations of OAuth2AccessTokenResponseClient
...
Closes gh-16909
2025-07-03 14:23:23 -04:00
Joe Grandja
cfe38957d7
Remove Resource Owner Password Credentials grant
...
Closes gh-17446
2025-07-03 14:23:23 -04:00
dependabot[bot]
ee171a1c17
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-03 12:23:17 -06:00
dependabot[bot]
eb468316fc
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.4.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.4.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.4/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.1...7.0.4 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.4.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-03 12:22:49 -06:00
dependabot[bot]
eb3f32772f
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.12 to 3.2.13.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.12...3.2.13 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-03 12:22:07 -06:00
Josh Cummings
890049c6f7
Merge remote-tracking branch 'origin/6.5.x'
2025-07-02 13:19:00 -06:00
Rob Winch
75efb17c49
Merge branch '6.5.x'
2025-07-02 10:54:10 -05:00
Rob Winch
2e4259f359
Bump org-apache-maven-resolver from 1.9.23 to 1.9.24
2025-07-02 10:46:30 -05:00
Rob Winch
7153d7930b
Bump io.mockk:mockk from 1.14.2 to 1.14.4
2025-07-02 10:46:27 -05:00
Rob Winch
d1aecb1ade
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.4.Final
2025-07-02 10:46:25 -05:00
Rob Winch
4d9c81e3d1
Bump com.webauthn4j:webauthn4j-core from 0.29.3.RELEASE to 0.29.4.RELEASE
2025-07-02 10:46:23 -05:00
Rob Winch
eed4ae751e
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
2025-07-02 10:46:21 -05:00
dependabot[bot]
c43b128f1a
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-02 03:27:07 +00:00
dependabot[bot]
f22f41ba19
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.29.3.RELEASE to 0.29.4.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.3.RELEASE...0.29.4.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.29.4.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-02 03:26:57 +00:00
dependabot[bot]
3d9069ac4d
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.4.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.4.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.4/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.1...7.0.4 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.4.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-02 03:26:45 +00:00
dependabot[bot]
a5b7bf989e
Bump io.mockk:mockk from 1.14.2 to 1.14.4
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.2 to 1.14.4.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.2...1.14.4 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-02 03:26:34 +00:00
dependabot[bot]
3c5e6a32c2
Bump org-apache-maven-resolver from 1.9.23 to 1.9.24
...
Bumps `org-apache-maven-resolver` from 1.9.23 to 1.9.24.
Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.23 to 1.9.24
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.23...maven-resolver-1.9.24 )
Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.23 to 1.9.24
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.23...maven-resolver-1.9.24 )
Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.23 to 1.9.24
---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
dependency-version: 1.9.24
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-02 03:26:29 +00:00
Rob Winch
725745defd
Merge branch '6.5.x'
2025-07-01 16:39:58 -05:00
Rob Winch
25a5105b86
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
2025-07-01 16:37:35 -05:00
Rob Winch
7704b4e986
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.4.Final
2025-07-01 16:37:32 -05:00
Rob Winch
1c6fb12dde
Bump io.mockk:mockk from 1.14.2 to 1.14.4
2025-07-01 16:37:30 -05:00
Rob Winch
f54c75f0f3
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
2025-07-01 16:37:28 -05:00
Rob Winch
ff59dc35e9
Bump io-spring-javaformat from 0.0.46 to 0.0.47
2025-07-01 16:37:25 -05:00
dependabot[bot]
2cccfe88a1
Bump io-spring-javaformat from 0.0.46 to 0.0.47
...
Bumps `io-spring-javaformat` from 0.0.46 to 0.0.47.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-01 08:00:31 +00:00
dependabot[bot]
0cc49b8788
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-01 08:00:16 +00:00
dependabot[bot]
4ca80cdd28
Bump io.mockk:mockk from 1.14.2 to 1.14.4
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.2 to 1.14.4.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.2...1.14.4 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-01 07:59:55 +00:00
dependabot[bot]
a979094a48
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.4.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.4.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.4/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.1...7.0.4 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.4.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-01 07:33:39 +00:00
dependabot[bot]
3f9bb81164
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.12 to 3.2.13.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.12...3.2.13 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-01 07:16:03 +00:00
Rob Winch
0137d0254c
Merge branch '6.5.x'
2025-06-30 14:01:26 -05:00
Rob Winch
f79c0bc734
Bump io-spring-javaformat from 0.0.46 to 0.0.47
2025-06-30 13:57:24 -05:00
Rob Winch
d4c580ad49
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
2025-06-30 13:57:22 -05:00
Rob Winch
418dc793ac
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
2025-06-30 13:57:20 -05:00
Rob Winch
a2f756264a
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.4.Final
2025-06-30 13:57:18 -05:00
Rob Winch
20a486c83d
Bump io.mockk:mockk from 1.14.2 to 1.14.4
2025-06-30 13:57:17 -05:00
dependabot[bot]
08cdf7d53b
Bump io.mockk:mockk from 1.14.2 to 1.14.4
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.2 to 1.14.4.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.2...1.14.4 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-30 04:39:09 +00:00
dependabot[bot]
8f0f3343fa
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.12 to 3.2.13.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.12...3.2.13 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-30 04:38:00 +00:00
dependabot[bot]
91a5a97c50
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.4.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.4.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/main/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/commits )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.4.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-30 04:38:00 +00:00
dependabot[bot]
a373ebd009
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-30 04:36:51 +00:00
dependabot[bot]
f34337a4e0
Bump io-spring-javaformat from 0.0.46 to 0.0.47
...
Bumps `io-spring-javaformat` from 0.0.46 to 0.0.47.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-30 04:36:16 +00:00
Rob Winch
e37424c637
Fix cycle in DefaultOAuth2AuthorizationRequestResolver
...
DefaultOAuth2AuthorizationRequestResolver should not depend on
OAuth2AuthorizationRequestRedirectFilter because
OAuth2AuthorizationRequestRedirectFilter already depends on
DefaultOAuth2AuthorizationRequestResolver.
OAuth2AuthorizationRequestRedirectFilter also takes advantage of the
new constructor that defaults the base uri.
Polishes gh-16384
2025-06-27 15:49:28 -05:00
DingHao
7587048f95
Add default authorizationRequestBaseUri to DefaultOAuth2AuthorizationRequestResolver
...
Closes gh-16383
Signed-off-by: DingHao <dh.hiekn@gmail.com>
2025-06-27 15:49:28 -05:00
Kevin Yue
7de4217469
Don't cache WebSocket request
...
PR gh-16741
Signed-off-by: Kevin Yue <yuezk001@gmail.com>
2025-06-27 15:47:05 -05:00
Soumik Sarker
2f53a2edb3
Removed deprecated Base64 of crypto package
...
Signed-off-by: Soumik Sarker <ronodhirsoumik@gmail.com>
2025-06-27 14:24:54 -05:00
Konstantin Filtschew
e4a2ac27d6
Fixed link to CSRF checks
2025-06-27 14:18:01 -05:00
Rob Winch
401f836051
Merge branch '6.5.x'
2025-06-27 09:02:23 -05:00
Rob Winch
6798a0c2c4
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
2025-06-27 09:00:58 -05:00
Rob Winch
a4012d60df
Bump io.mockk:mockk from 1.14.2 to 1.14.4
2025-06-27 09:00:56 -05:00
Rob Winch
7bf0cba45d
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.3.Final
2025-06-27 09:00:54 -05:00
Rob Winch
f812a847df
Bump io-spring-javaformat from 0.0.46 to 0.0.47
2025-06-27 09:00:53 -05:00
Rob Winch
4f602cb1a5
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
2025-06-27 09:00:51 -05:00
dependabot[bot]
4e6e25d3a5
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-27 13:35:27 +00:00
dependabot[bot]
feffe23a0e
Bump io.mockk:mockk from 1.14.2 to 1.14.4
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.2 to 1.14.4.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.2...1.14.4 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-27 13:35:12 +00:00
dependabot[bot]
5dce2ab500
Bump io-spring-javaformat from 0.0.46 to 0.0.47
...
Bumps `io-spring-javaformat` from 0.0.46 to 0.0.47.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-27 13:35:01 +00:00
dependabot[bot]
586340b2ae
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.12 to 3.2.13.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.12...3.2.13 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-27 13:34:29 +00:00
dependabot[bot]
123ba5a81a
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.3.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.3.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.3/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.1...7.0.3 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.3.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-26 22:33:45 +00:00
Rob Winch
00ead7f24d
Update to Kotlin 2.2
2025-06-26 17:29:12 -05:00
Rob Winch
8fd2401a2e
Merge branch '6.5.x'
2025-06-25 10:10:08 -05:00
Rob Winch
302d9a879f
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.3.Final
2025-06-25 10:09:23 -05:00
Rob Winch
71cd14a165
Bump io.mockk:mockk from 1.14.2 to 1.14.4
2025-06-25 10:09:21 -05:00
Rob Winch
f7d5390e74
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
2025-06-25 10:09:18 -05:00
Rob Winch
f6f8417c11
Bump io-spring-javaformat from 0.0.46 to 0.0.47
2025-06-25 10:09:15 -05:00
Rob Winch
cd14e3d161
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
2025-06-25 10:09:13 -05:00
Tran Ngoc Nhan
e686ac6b11
Remove AbstractSecurityWebSocketMessageBrokerConfigurer
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-06-24 12:56:05 -06:00
Tran Ngoc Nhan
a74ce06dae
Remove JwtIssuer(Reactive)AuthenticationManagerResolver deprecations
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-06-24 12:33:00 -06:00
dependabot[bot]
edfae34178
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.12 to 3.2.13.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.12...3.2.13 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-24 04:28:50 +00:00
dependabot[bot]
a8bd1d0143
Bump io-spring-javaformat from 0.0.46 to 0.0.47
...
Bumps `io-spring-javaformat` from 0.0.46 to 0.0.47.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-24 04:08:03 +00:00
dependabot[bot]
054909694b
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-24 04:03:54 +00:00
dependabot[bot]
fb6d29759c
Bump io.mockk:mockk from 1.14.2 to 1.14.4
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.2 to 1.14.4.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.2...1.14.4 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-24 03:58:33 +00:00
dependabot[bot]
3fb987ed17
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.3.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.3.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.3/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.1...7.0.3 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.3.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-24 03:58:18 +00:00
Rob Winch
afb3d5d571
Merge branch '6.5.x'
2025-06-23 10:25:02 -05:00
Rob Winch
6ccadbd880
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
2025-06-23 10:23:37 -05:00
Rob Winch
b4a447a99e
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
2025-06-23 10:23:34 -05:00
Rob Winch
8a0d746008
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.3.Final
2025-06-23 10:23:31 -05:00
Rob Winch
f04d5b9f05
Bump io-spring-javaformat from 0.0.46 to 0.0.47
2025-06-23 10:23:29 -05:00
Rob Winch
14d9de2793
Bump io.mockk:mockk from 1.14.2 to 1.14.4
2025-06-23 10:23:26 -05:00
dependabot[bot]
d26d76ecb3
Bump io.mockk:mockk from 1.14.2 to 1.14.4
...
Bumps [io.mockk:mockk](https://github.com/mockk/mockk ) from 1.14.2 to 1.14.4.
- [Release notes](https://github.com/mockk/mockk/releases )
- [Commits](https://github.com/mockk/mockk/compare/1.14.2...1.14.4 )
---
updated-dependencies:
- dependency-name: io.mockk:mockk
dependency-version: 1.14.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-23 03:30:42 +00:00
dependabot[bot]
3fd697f9a6
Bump io-spring-javaformat from 0.0.46 to 0.0.47
...
Bumps `io-spring-javaformat` from 0.0.46 to 0.0.47.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.46 to 0.0.47
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.46...v0.0.47 )
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-version: 0.0.47
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-23 03:30:22 +00:00
dependabot[bot]
90ddb00c00
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.3.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.3.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.3/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.1...7.0.3 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.3.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-23 03:28:29 +00:00
Josh Cummings
08cbdb4640
Merge remote-tracking branch 'origin/6.5.x'
2025-06-20 14:43:25 -06:00
Josh Cummings
396809bf01
Polish Stream Advice
...
Issue gh-17097
2025-06-20 14:01:19 -06:00
Tran Ngoc Nhan
3e9d585410
Update Contribution Guidelines About Streams
...
Closes gh-17097
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-06-20 14:01:19 -06:00
Josh Cummings
a4c338f8a5
Format authorizeExchange Blocks
...
This commit formats authorizeExchange blocks to
use a common variable name and ensure the
variable and reference are on the same line.
Issue gh-13067
2025-06-20 10:46:52 -06:00
Josh Cummings
da6c7b8759
Format Lambda Usage
...
This commit updates Lambda DSL usage to favor
having the variable and reference on the same line
Issue gh-13067
2025-06-20 10:46:52 -06:00
Josh Cummings
777447e1d9
Format authorizeHttpRequests Blocks
...
This commit formats authorizeHttpRequests blocks
to use the same parameter name and places the
reference on the same line as the parameter.
Issue gh-13067
2025-06-20 10:46:51 -06:00
Josh Cummings
cf6b52d6f7
Format authorizeRequests Blocks
...
This commit changes all auhorizeRequests
declarations to use the same variable name
and declare the lambda parameter and reference
on the same line.
Issue gh-13067
2025-06-20 10:46:51 -06:00
Josh Cummings
5dd40a7f10
Remove ServerHttpSecurity and() DSL Methods
...
This commit removes all and() DSL methods with
the exception of featurePolicy, which will be
removed as a whole at another time.
Closes gh-13067
2025-06-20 10:46:43 -06:00
Josh Cummings
f789abc87f
Use ServerHttpSecurity Lambda DSL in JavaDoc
...
Issue gh-13067
2025-06-20 10:41:32 -06:00
Josh Cummings
461f00ed38
Use ServerHttpSecurity Lambda DSL in Config
...
Issue gh-13067
2025-06-20 10:41:31 -06:00
Josh Cummings
9fcfacf283
Use ServerHttpSecurity Lambda DSL in Tests
...
Issue gh-13067
2025-06-20 10:41:31 -06:00
Josh Cummings
1a7b1fcc7c
Remove HttpSecurity and() DSL Methods
...
This commit removes all and() methods that have been
deprecated in the HttpSecurity DSL with the exception
of featurePolicy, which will be removed when that
feature is removed. Note that since featurePolicy
does not have a lambda equivalent, the and support
needs to remain for the moment.
Issue gh-13067
2025-06-20 10:41:31 -06:00
Josh Cummings
45a1447e9b
Use HttpSecurity Lambda DSL in JavaDoc
...
Issue gh-13067
2025-06-20 10:41:30 -06:00
Josh Cummings
1435e0f3d3
Use HttpSecurity Lambda DSL in Config Tests
...
Issue gh-13067
2025-06-20 10:41:30 -06:00
Josh Cummings
13e738e733
Use HttpSecurity Lambda DSL in Test
...
Issue gh-13067
2025-06-20 10:41:29 -06:00
Josh Cummings
c43afbf5e1
Format Lambda Expressions
...
This commit updats lambda expressions so that
their variable is surrounded in parentheses.
Issue gh-13067
2025-06-20 10:41:29 -06:00
Josh Cummings
20a2213e11
Merge branch '6.5.x'
2025-06-19 11:56:03 -06:00
Josh Cummings
09983e2349
Add ApacheDS Migration Steps
...
Issue gh-13852
2025-06-19 11:55:44 -06:00
Josh Cummings
6ddb964c61
Remove ApacheDS Support
...
Closes gh-13852
2025-06-19 11:55:34 -06:00
dependabot[bot]
349451c8a5
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-18 04:01:03 +00:00
dependabot[bot]
e17c256fce
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.12 to 3.2.13.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.12...3.2.13 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-18 04:00:21 +00:00
Josh Cummings
42e24aa53c
Fix Formatting
2025-06-17 16:55:22 -06:00
evga7
06ed6ef342
Simplify Csrf Processor Decision Logic
...
Replaces repeated if-else string comparisons with a Set.contains() check
for known WebSocket handshake handler class names in MessageSecurityPostProcessor.
Improves readability and maintainability without changing behavior.
Signed-off-by: Wonpyo Hong <evga7@naver.com>
2025-06-17 16:55:22 -06:00
Josh Cummings
676b44ebb0
Polish NimbusJwtEncoder Builders
...
- Simplify withKeyPair methods to match withPublicKey convention
in NimbusJwtDecoder
- Update tests to confirm support of other algorithms
- Update constructor to apply additional JWK properties
to the default header
- Deduce the possibly algorithms for a given key based
on curve and key size
- Remove algorithm method from EC builder since the
algorithm is determined by the Curve of the EC Key
Issue gh-16267
Co-Authored-By: Suraj Bhadrike <surajbh2233@gmail.com>
2025-06-17 16:47:39 -06:00
Suraj Bhadrike
ee09215f89
Add NimbusJwtEncoder Builders
...
Closes gh-16267
Signed-off-by: Suraj Bhadrike <surajbh2233@gmail.com>
2025-06-17 16:47:39 -06:00
Tran Ngoc Nhan
709f5db0e5
Polish Webauthn4JRelyingPartyOperations
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-06-17 13:35:52 -05:00
Rob Winch
18010f9914
Fix JwtAuthenticationProvider Checkstyle
...
Issue gh-17251
2025-06-17 13:32:43 -05:00
chanbinme
9cf5638914
Add null check for authentication token in JwtAuthenticationProvider
...
Add Assert.notNull validation to ensure the authentication token returned by jwtAuthenticationConverter is not null, preventing potential NullPointerException in subsequent operations.
Signed-off-by: chanbinme <gksmfcksqls@gmail.com>
2025-06-17 13:32:43 -05:00
Tran Ngoc Nhan
c2c84c4243
Update HttpSecurity javadoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-06-17 13:31:24 -05:00
Rob Winch
b2325e4176
Add OAuth Support for HTTP Interface Client
...
Closes gh-16858
2025-06-17 09:53:51 -05:00
Rob Winch
502b0b7f95
Merge branch '6.5.x'
2025-06-17 08:46:37 -05:00
Rob Winch
87bb5d4e2d
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
2025-06-17 08:45:26 -05:00
Rob Winch
df676b3089
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
2025-06-17 08:45:23 -05:00
Rob Winch
fc587913a7
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.2.Final
2025-06-17 08:45:21 -05:00
dependabot[bot]
fce40bc3ed
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.2.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.2.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.2/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.1...7.0.2 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.2.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 03:48:38 +00:00
dependabot[bot]
c2ecc8b538
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.12 to 3.2.13.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.12...3.2.13 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 03:47:07 +00:00
dependabot[bot]
bd31a40824
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-17 03:32:10 +00:00
Rob Winch
6036e1ceb5
Merge branch '6.5.x'
2025-06-16 09:46:09 -05:00
Rob Winch
f33b7b5479
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
2025-06-16 09:45:47 -05:00
Rob Winch
32d0be9364
Merge branch '6.5.x'
2025-06-16 09:06:29 -05:00
Rob Winch
468a07b1a0
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.2.Final
2025-06-16 09:05:40 -05:00
Rob Winch
7da4712056
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
2025-06-16 09:05:38 -05:00
dependabot[bot]
1f57df6caa
Bump com.fasterxml.jackson:jackson-bom from 2.19.0 to 2.19.1
...
Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom ) from 2.19.0 to 2.19.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.19.0...jackson-bom-2.19.1 )
---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-16 03:37:16 +00:00
dependabot[bot]
5130cbb99f
Bump org.springframework.ldap:spring-ldap-core from 3.2.12 to 3.2.13
...
Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap ) from 3.2.12 to 3.2.13.
- [Release notes](https://github.com/spring-projects/spring-ldap/releases )
- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt )
- [Commits](https://github.com/spring-projects/spring-ldap/compare/3.2.12...3.2.13 )
---
updated-dependencies:
- dependency-name: org.springframework.ldap:spring-ldap-core
dependency-version: 3.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-13 03:48:15 +00:00
dependabot[bot]
043464fd3d
Bump org.hibernate.orm:hibernate-core from 7.0.1.Final to 7.0.2.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.1.Final to 7.0.2.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.2/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.1...7.0.2 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.2.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-13 03:47:51 +00:00
Rob Winch
e1d8033ee3
Merge branch '6.5.x'
2025-06-12 12:26:43 -05:00
Rob Winch
8e57014c50
Merge branch 'gradle/main/org.hibernate.orm-hibernate-core-7.0.1.Final'
2025-06-12 12:22:35 -05:00
Rob Winch
025995ef97
Merge branch 'gradle/main/io.projectreactor-reactor-bom-2025.0.0-M4'
2025-06-12 12:22:06 -05:00
Rob Winch
040ffe17e5
Add SubjectX500PrincipalExtractor to Whats New
...
Issue gh-16984
2025-06-12 12:19:37 -05:00
Evgeniy Cheban
092bbfc8e7
ReactiveAuthorizationManager replace deprecated #check calls with #authorize
...
Closes gh-16936
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>
2025-06-12 11:11:49 -06:00
Evgeniy Cheban
b0cecb37d2
Replace deprecated #check calls with #authorize
...
Closes gh-16936
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>
2025-06-12 11:11:49 -06:00
Rob Winch
e3add59550
Update x509 Reference
...
- Use include-code
- Demo how to customize SubjectX500PrincipalExtractor
2025-06-12 12:09:20 -05:00
Rob Winch
7bf2730a53
Add x509@principal-extractor-ref
...
Enables customizing the X500PrincipalExtractor
2025-06-12 12:09:20 -05:00
Rob Winch
88ed4a5ccf
Use principalExtractor reference instead of properties
2025-06-12 12:09:20 -05:00
Rob Winch
2b740b7f1f
Update SubjectX500PrincipalExtractor Javadoc
...
- Provide more details on how the principalName is extracted
- Update to specify an OID is used for emailAddress
2025-06-12 12:09:20 -05:00
Rob Winch
f690a7f3df
Encapsulate extractPrincipalNameFromEmail property
...
This simplifies the logic when extracting the principal and allows
more flexibility in the future by allowing the format and regex to be
added as setters.
2025-06-12 12:09:20 -05:00
Rob Winch
5f2efbea6a
Remove unused statement
2025-06-12 12:09:20 -05:00
Max Batischev
aba437d469
Add Support SubjectX500PrincipalExtractor
...
Closes gh-16980
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-06-12 12:09:20 -05:00
Josh Cummings
e8f920e0ee
Polish JdbcAssertingPartyMetadataRepository
...
- Remove GetBytes since it's not used yet
- Remove customizable RowMapper since this can be added
later
- Change signing_algorithms to be a String since the conversion
strategy is simple
- Standardize test names
- Simplify conversion of credentials using ThrowingFunction
- Change column names to match RelyingPartyRegistration
field names
Issue gh-16012
2025-06-11 18:08:31 -06:00
Josh Cummings
2bd05128ec
Add JdbcAssertingPartyMetadataRepository#save
...
Issue gh-16012
Co-Authored-By: chao.wang <chao.wang@zatech.com>
2025-06-11 18:08:31 -06:00
Josh Cummings
e2e42a5580
Fix Checkstyle
...
Issue gh-16012
2025-06-11 18:08:31 -06:00
chao.wang
16fd24c002
Add JdbcAssertingPartyMetadataRepository
...
Closes gh-16012
Signed-off-by: chao.wang <chao.wang@zatech.com>
2025-06-11 18:08:31 -06:00
dependabot[bot]
60f729156b
Bump org.hibernate.orm:hibernate-core from 7.0.0.Final to 7.0.1.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.0.Final to 7.0.1.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.0.1/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.0...7.0.1 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.1.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-11 03:15:08 +00:00
dependabot[bot]
220f49d86e
Bump io.projectreactor:reactor-bom from 2025.0.0-M3 to 2025.0.0-M4
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2025.0.0-M3 to 2025.0.0-M4.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2025.0.0-M3...2025.0.0-M4 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2025.0.0-M4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-11 03:14:31 +00:00
Josh Cummings
9b724377ce
Rework Saml2 Authentication Statement
...
This commit separates the authentication principal, the assertion details,
and the relying party tenant into separate components. This allows the
principal to be completely decoupled from how Spring Security triggers and
processes SLO.
Specifically, it adds Saml2AssertionAuthentication, a new authentication
implementation that allows an Object principal and a Saml2ResponseAssertionAccessor
credential. It also moves the relying party registration id from
Saml2AuthenticatedPrincipal to Saml2AssertionAuthentication.
As such, Saml2AuthenticatedPrincipal is now deprecated in favor of
placing its assertion components in Saml2ResponseAssertionAccessor and
the relying party registration id in Saml2AssertionAuthentication.
Closes gh-10820
2025-06-10 17:21:03 -06:00
Christian Schuster
02a8c416aa
Add NameID to SAML 2.0 Authentication Info
...
Issue gh-10820
2025-06-10 17:21:03 -06:00
Christian Schuster
36c7b91fb9
SAML 2.0 Single Logout Uses Saml2AuthenticationInfo
...
This allows SLO to be triggered without the authentication
principal needing to implement a given interface.
Issue gh-10820
2025-06-10 17:21:03 -06:00
Rob Winch
ffd6e3c0f7
Merge branch '6.5.x'
2025-06-10 10:49:13 -05:00
Rob Winch
2c5bd4c916
Explicit Permissions for codeql.yml
2025-06-10 10:46:23 -05:00
Rob Winch
dc954875f3
Merge branch '6.5.x'
2025-06-10 09:56:09 -05:00
dependabot[bot]
a060f7b462
Bump io.micrometer:micrometer-observation from 1.14.7 to 1.14.8
...
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer ) from 1.14.7 to 1.14.8.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.7...v1.14.8 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.14.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-10 03:41:53 +00:00
Lidoca
d0db5e3ea3
Update database-schema.adoc
...
docs: match the database schema with https://github.com/spring-projects/spring-security/blob/6.5.0/docs/modules/ROOT/pages/servlet/authentication/passwords/jdbc.adoc
Signed-off-by: Lidoca <32785562+Lidoca@users.noreply.github.com>
2025-06-09 22:17:57 -05:00
Josh Cummings
aa3135169d
Polish Documentation
...
Closes gh-14635
2025-06-09 16:49:36 -06:00
Liviu Gheorghe
3ddf201d66
Updated Copyrights
...
Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com>
2025-06-09 16:45:24 -06:00
1livv
edfd7b9b43
Addressed review comments
...
Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com>
2025-06-09 16:45:24 -06:00
1livv
358f6c96b5
Update config tests
...
Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com>
2025-06-09 16:45:24 -06:00
Liviu Gheorghe
eaf8184142
Send saml logout response even when validation errors happen
...
Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com>
2025-06-09 16:45:24 -06:00
Rob Winch
097640b72a
Merge branch '6.5.x'
2025-06-09 17:11:12 -05:00
Rob Winch
35e8aa6435
Merge branch 'gradle/main/org.apache.maven-maven-resolver-provider-3.9.10'
2025-06-09 17:09:36 -05:00
Rob Winch
8e1db3fe2b
Merge branch '6.5.x'
2025-06-09 17:06:04 -05:00
Rob Winch
28174a6d3e
Bump io.spring.develocity.conventions from 0.0.22 to 0.0.23
2025-06-09 16:56:15 -05:00
Rob Winch
3948440ee4
Bump io.spring.develocity.conventions from 0.0.22 to 0.0.23
2025-06-09 16:53:33 -05:00
Rob Winch
72b5e96a0d
Bump io-spring-javaformat from 0.0.45 to 0.0.46
2025-06-09 16:24:44 -05:00
Rob Winch
a47022799e
Bump com.webauthn4j:webauthn4j-core from 0.29.2.RELEASE to 0.29.3.RELEASE
2025-06-09 16:20:57 -05:00
Joe Grandja
98c3453aa4
Merge branch '6.5.x'
2025-06-06 07:19:08 -04:00
dependabot[bot]
adca1b31be
Bump org.apache.maven:maven-resolver-provider from 3.9.9 to 3.9.10
...
Bumps org.apache.maven:maven-resolver-provider from 3.9.9 to 3.9.10.
---
updated-dependencies:
- dependency-name: org.apache.maven:maven-resolver-provider
dependency-version: 3.9.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-06 03:52:18 +00:00
Joe Grandja
2e913d2af9
Merge branch '6.5.x'
2025-06-05 16:22:35 -04:00
Josh Cummings
c8b843c4c5
Merge branch '6.5.x'
2025-06-05 12:36:53 -06:00
Josh Cummings
eaab42a73c
Polish BearerTokenAuthenticationConverter Support
...
- Moved to BearerTokenAuthenticationFilter constructor to align with
AuthenticationFilter
- Undeprecated BearerTokenResolver to reduce number of migration scenarios
- Updated to 7.0 schema
- Added migration docs
Issue gh-14750
2025-06-04 18:17:17 -06:00
Max Batischev
30577bd291
Add Additional Tests To BearerTokenAuthenticationFilterTests
...
Issue gh-14750
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-06-04 18:17:17 -06:00
Max Batischev
4967f3feee
Add Support BearerTokenAuthenticationConverter
...
Closes gh-14750
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-06-04 18:17:17 -06:00
Josh Cummings
3f0326d3f1
Merge remote-tracking branch 'origin/6.5.x'
2025-06-04 12:49:12 -06:00
dependabot[bot]
0ec7a7a305
Bump io.spring.develocity.conventions from 0.0.22 to 0.0.23
...
Bumps [io.spring.develocity.conventions](https://github.com/spring-io/develocity-conventions ) from 0.0.22 to 0.0.23.
- [Release notes](https://github.com/spring-io/develocity-conventions/releases )
- [Commits](https://github.com/spring-io/develocity-conventions/compare/v0.0.22...v0.0.23 )
---
updated-dependencies:
- dependency-name: io.spring.develocity.conventions
dependency-version: 0.0.23
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-04 03:47:25 +00:00
Josh Cummings
492444c588
Update shouldConvertGetRequests Migration Steps
...
Issue gh-17099
2025-06-03 13:12:38 -06:00
Josh Cummings
f73f253beb
Add Switch for Processing GET Requests
...
Issue gh-17099
2025-06-03 13:12:37 -06:00
Josh Cummings
32c7e8a6ee
Use Saml2Error Static Factories
2025-06-03 13:12:37 -06:00
Josh Cummings
3de7312658
Add Saml2Error Static Factories
2025-06-03 13:12:37 -06:00
Josh Cummings
4ed131f6ab
Add shouldConvertGetRequests Migration Steps
...
Issue gh-17099
2025-06-03 13:10:45 -06:00
Tran Ngoc Nhan
8953f464fb
Add Switch for Processing GET Requests
...
Closes gh-17099
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-06-03 13:10:45 -06:00
dependabot[bot]
b20cfceabb
Bump io-spring-javaformat from 0.0.45 to 0.0.46
...
Bumps `io-spring-javaformat` from 0.0.45 to 0.0.46.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.45 to 0.0.46
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.45...v0.0.46 )
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.45 to 0.0.46
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.45...v0.0.46 )
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-version: 0.0.46
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-version: 0.0.46
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-03 03:48:10 +00:00
dae won
9654e51bd4
Include UsernameNotFoundException in BadCredentialsException
...
Closes gh-16496
Signed-off-by: dae won <eodnjs01477@gmail.com>
2025-06-02 16:12:47 -06:00
Josh Cummings
d52e0b6a05
Polish NimbusJwtDecoder
...
- Aligned JwkSourceJwtDecoderBuilder's relative position with its
corresponding static factory
- Added @since to JwkSourceJwtDecoderBuilder
PR gh-17046
2025-06-02 15:53:59 -06:00
Josh Cummings
195f933438
Allow Default Ordering for TargetVisitor
...
In tests, we want to both test that functionality works and also
demonstrate common or expected usage, where possible. It is likely
incorrect to use @Order(0) for a target visitor as this states that
it should take precedence over all Spring Security visitors defined
at a lower precedence.
Also, it appears this may have been added this way because of a mock
visitor that appears to be unused by any tests. Further, when an
application has multiple visitors, they should use the TargetVisitor.of
method to publish one bean with the order determined by the order
of the method parameters instead of having two separate beans.
This commit removes the @Order(0) annotation and also the mock
visitor, deferring to the natural ordering afforded by the
framework.
Issue gh-15994
2025-06-02 13:41:21 -06:00
Mark Bonnekessel
ada75e76a6
Add builder to create NimbusJwtDecoder with JwkSource
...
Signed-off-by: Mark Bonnekessel <2949525+marbon87@users.noreply.github.com>
2025-06-02 13:33:39 -06:00
dependabot[bot]
227a2cc0c7
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.29.2.RELEASE to 0.29.3.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.2.RELEASE...0.29.3.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.29.3.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-06-02 03:51:03 +00:00
Pat McCusker
5517d8fe3a
Deprecate the X5T JOSE Header name
...
Closes gh-16979
Signed-off-by: Pat McCusker <patmccusker14@gmail.com>
2025-05-30 06:45:02 -06:00
Evgeniy Cheban
fd4f06a66e
Support Spring Data container types for AuthorizeReturnObject
...
Closes gh-15994
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>
2025-05-29 17:05:27 -06:00
Josh Cummings
6d3b54df21
Change Type Validation Default
...
NimbusJwtDecoder and NimbusReactiveJwtDecoder now use
Spring Security's JwtTypeValidator by default instead
of Nimbus's type validator.
Closes gh-17181
2025-05-28 16:11:13 -06:00
Josh Cummings
37a814bc29
Add 7.0 -> 8.0 Migration Guide
...
Closes gh-17182
2025-05-28 16:11:12 -06:00
Josh Cummings
215547f8c8
Use UsernameNotFoundException Factory
...
Issue gh-17179
2025-05-28 14:13:02 -06:00
Josh Cummings
da2d9aa868
Add Username Property to Exception
...
Closes gh-17179
2025-05-28 14:12:27 -06:00
Yanming Zhou
42790403da
Use SpringReactiveOpaqueTokenIntrospector
...
Now that NimbusReactiveOpaqueTokenIntrospector is
deprecated, this commit changes the Spring
Security default to now use SpringReactiveOpaqueTokenIntrospector.
Issue gh-15988
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
2025-05-27 14:25:31 -06:00
Maximilian Klose
ec05e65668
Add Equals and HashCode methods for better comparison.
...
Closes gh-16394
Signed-off-by: Maximilian Klose <maximilian.klose@adesso.de>
2025-05-27 13:53:07 -06:00
Ferenc Kemeny
bf05b8b430
Support Requiring exp and nbf in JwtTimestampsValidator
...
Closes gh-17004
Signed-off-by: Ferenc Kemeny <ferenc.kemeny79+oss@gmail.com>
2025-05-27 12:22:25 -06:00
Ferenc Kemeny
91b21663db
Polish JwtTimestampValidatorTests
...
This commit corrects the test that checks for both
nbf and exp missing. It also adds one for just exp
and on for just nbf.
Issue gh-17004
Signed-off-by: Ferenc Kemeny <ferenc.kemeny79+oss@gmail.com>
2025-05-27 12:22:25 -06:00
Josh Cummings
596449d882
Polish
...
Issue gh-14149
2025-05-27 11:44:33 -06:00
Felix Hagemans
1a4de49977
Create CsrfCustomizer for SPA configuration
...
Closes gh-14149
Signed-off-by: Felix Hagemans <felixhagemans@gmail.com>
2025-05-27 11:44:33 -06:00
Josh Cummings
52394c1f07
Propagate Any AccessDeniedException
...
Any time a response handler throws an exception, we want to
propagate an underlying AccessDeniedException if their is one.
Issue gh-16058
2025-05-23 15:18:01 -06:00
Evgeniy Cheban
fae61b9426
Propagate AccessDeniedException for Authorized Objects Returned from a Controller
...
Closes gh-16058
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>
2025-05-23 15:18:01 -06:00
dae won
8612e952fe
Make AuthorizationProxyFactory#proxy Generic
...
Closes gh-16706
Signed-off-by: dae won <eodnjs01477@gmail.com>
2025-05-23 14:48:11 -06:00
Max Batischev
f4b8e2421a
Add Support Credentialless COEP Header
...
Closes gh-16991
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-05-23 14:45:59 -06:00
John Niang
9ba5c7b2ce
Add SwitchUserGrantedAuthority to Web Jackson Module
...
Closes gh-17041
Signed-off-by: John Niang <johnniang@foxmail.com>
2025-05-23 14:42:54 -06:00
Tran Ngoc Nhan
8e2067bb3e
Remove deprecated MemberCategory#DECLARED_FIELDS
...
Issue gh-16889
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-05-23 14:36:54 -06:00
Tran Ngoc Nhan
88369cd252
Polish
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-05-23 14:36:54 -06:00
Josh Cummings
c9bbf3787b
Merge branch '6.5.x'
2025-05-23 11:36:22 -06:00
universe
50f8ad55a8
Remove Redundant Punctation in JavaDoc
...
Signed-off-by: universe <daofei8754@126.com>
2025-05-23 10:05:27 -05:00
Rob Winch
64d3397a9c
Add netty's SNAPSHOT repository to snapshot build
2025-05-22 15:44:26 -05:00
Rob Winch
ff22866c6d
RepositoryConventionPlugin supports arbitrary repositories
2025-05-22 15:43:38 -05:00
Rob Winch
cd27290260
Merge branch '6.5.x'
...
Closes gh-17163
2025-05-22 15:01:27 -05:00
Rob Winch
e686621e92
Merge branch '6.5.x'
...
Closes gh-17162
2025-05-22 15:01:13 -05:00
Josh Cummings
d9c894fae8
Merge branch '6.5.x'
2025-05-22 12:31:54 -06:00
Josh Cummings
47338f7e56
Remove Conflict Markers
2025-05-22 12:29:05 -06:00
Josh Cummings
97923ebfaf
Merge branch '6.5.x'
2025-05-21 16:47:45 -06:00
dependabot[bot]
c46f263483
Bump org.hibernate.orm:hibernate-core from 7.0.0.CR2 to 7.0.0.Final
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.0.CR2 to 7.0.0.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/main/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.0.CR2...7.0.0 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.0.Final
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-21 14:54:58 -06:00
dependabot[bot]
b3340536dc
Bump io-spring-javaformat from 0.0.43 to 0.0.45
...
Bumps `io-spring-javaformat` from 0.0.43 to 0.0.45.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.43 to 0.0.45
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.43...v0.0.45 )
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.43 to 0.0.45
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](https://github.com/spring-io/spring-javaformat/compare/v0.0.43...v0.0.45 )
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-version: 0.0.45
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-version: 0.0.45
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-21 14:54:45 -06:00
Josh Cummings
07575d2e2e
Merge remote-tracking branch 'origin/6.5.x'
2025-05-21 14:53:48 -06:00
Josh Cummings
7e4c72806c
Merge branch '6.5.x'
2025-05-21 14:52:47 -06:00
Josh Cummings
0ee3fe2a58
Merge branch '6.5.x'
2025-05-21 14:51:44 -06:00
Josh Cummings
45e81c2d0a
Merge branch '6.5.x'
2025-05-21 14:44:23 -06:00
Rob Winch
b7909a56c5
Merge branch '6.5.x'
2025-05-20 16:04:42 -05:00
Josh Cummings
a339dbc893
Merge branch '6.5.x'
2025-05-19 11:18:54 -06:00
Josh Cummings
e772025646
Update What's New in 6.5
2025-05-19 11:18:38 -06:00
Josh Cummings
e19c9995ae
Merge branch '6.5.x'
2025-05-19 09:46:36 -06:00
Josh Cummings
cc0faeaa9c
Merge branch '6.5.x'
2025-05-19 09:31:39 -06:00
Josh Cummings
33a0a12a20
Merge branch '6.5.x'
2025-05-19 09:26:37 -06:00
Rob Winch
2041757607
Merge branch '6.5.x'
2025-05-19 08:45:17 -05:00
Rob Winch
9004897e2d
Merge branch '6.5.x'
2025-05-19 08:44:04 -05:00
Rob Winch
1cde8ca2c3
Merge branch '6.5.x'
2025-05-19 08:41:48 -05:00
Rob Winch
665a34da3a
Merge branch '6.5.x'
2025-05-16 10:43:06 -05:00
Josh Cummings
07a50b460a
Merge branch '6.5.x'
2025-05-15 18:17:05 -06:00
Josh Cummings
b5db32994f
Merge branch '6.5.x'
2025-05-15 17:20:23 -06:00
dependabot[bot]
4fb3dca953
Bump org.hibernate.orm:hibernate-core from 7.0.0.CR1 to 7.0.0.CR2
...
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm ) from 7.0.0.CR1 to 7.0.0.CR2.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases )
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/main/changelog.txt )
- [Commits](https://github.com/hibernate/hibernate-orm/compare/7.0.0.CR1...7.0.0.CR2 )
---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.0.0.CR2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-15 14:48:44 -06:00
Junhyeok Lee
e30dc42d1e
Update JdbcUserDetailsManager Javadoc and author
...
Signed-off-by: Junhyeok Lee <jhl221123@naver.com>
2025-05-14 13:41:02 -05:00
Junhyeok Lee
0722c2dc41
Implement UserDetailsPasswordService in JdbcUserDetailsManager
...
Signed-off-by: Junhyeok Lee <jhl221123@naver.com>
2025-05-14 13:41:02 -05:00
huhdy32
817938fa49
Add NullReturningMethodAuthorizationDeniedHandler
...
This implementation of MethodAuthorizationDeniedHandler returns null
when authorization is denied.
Closes gh-16705
Signed-off-by: huhdy32 <mong3268@gmail.com>
2025-05-14 11:45:48 -05:00
Andrey Litvitski
3b492a9628
remove 32-byte minimum keyLength restriction in Base64StringKeyGenerator
( #17012 )
...
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
2025-05-14 11:41:30 -05:00
dependabot[bot]
c22091d8be
Bump io.projectreactor:reactor-bom from 2025.0.0-M2 to 2025.0.0-M3
...
Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor ) from 2025.0.0-M2 to 2025.0.0-M3.
- [Release notes](https://github.com/reactor/reactor/releases )
- [Commits](https://github.com/reactor/reactor/compare/2025.0.0-M2...2025.0.0-M3 )
---
updated-dependencies:
- dependency-name: io.projectreactor:reactor-bom
dependency-version: 2025.0.0-M3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-14 11:15:35 -05:00
Rob Winch
aa4db57b89
Merge branch '6.5.x'
...
Preserve org.hibernate.orm:hibernate-core
2025-05-14 11:13:27 -05:00
Rob Winch
903cefceb3
Merge branch '6.5.x'
...
- Preserve io.projectreactor:reactor-bom (we want to keep the version in main)
2025-05-14 11:03:03 -05:00
Joe Grandja
a8edcca961
Merge branch '6.5.x'
2025-05-14 05:36:04 -04:00
Tran Ngoc Nhan
a511171309
Add test and update javadoc for CommonOAuth2Provider
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-05-13 12:45:38 -06:00
Tran Ngoc Nhan
86550fb84b
Cleanup code
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-05-13 12:40:18 -06:00
Joe Grandja
44303d2c80
Polish gh-17080
2025-05-13 14:36:44 -04:00
David Kowis
462e38c0e3
Fix DPoP jkt claim to be JWK SHA-256 thumbprint
...
Just used the nimbus JOSE library to do it, because it already has a
compliant implementation.
Closes gh-17080
Signed-off-by: David Kowis <david@kow.is>
2025-05-13 14:36:44 -04:00
dependabot[bot]
8b925dc4fc
Bump io.micrometer:micrometer-observation from 1.14.6 to 1.14.7
...
Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer ) from 1.14.6 to 1.14.7.
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases )
- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.6...v1.14.7 )
---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-observation
dependency-version: 1.14.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-13 12:35:27 -06:00
Josh Cummings
3f91c3effc
Merge remote-tracking branch 'origin/6.5.x'
2025-05-13 12:34:40 -06:00
Josh Cummings
cb511f501a
Merge remote-tracking branch 'origin/6.5.x'
2025-05-13 12:33:13 -06:00
Josh Cummings
87434a7b05
Merge branch '6.5.x'
2025-05-13 12:31:47 -06:00
dependabot[bot]
f1e3f2a8d3
Bump com.webauthn4j:webauthn4j-core
...
Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j ) from 0.29.1.RELEASE to 0.29.2.RELEASE.
- [Release notes](https://github.com/webauthn4j/webauthn4j/releases )
- [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml )
- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.1.RELEASE...0.29.2.RELEASE )
---
updated-dependencies:
- dependency-name: com.webauthn4j:webauthn4j-core
dependency-version: 0.29.2.RELEASE
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-13 12:29:21 -06:00
Josh Cummings
f511d0a345
Merge remote-tracking branch 'origin/6.5.x'
2025-05-13 12:28:17 -06:00
Josh Cummings
64b26cbd1f
Merge branch '6.5.x'
2025-05-13 12:26:56 -06:00
dependabot[bot]
99330bfc60
Bump org-apache-maven-resolver from 1.9.22 to 1.9.23
...
Bumps `org-apache-maven-resolver` from 1.9.22 to 1.9.23.
Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.22 to 1.9.23
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.23 )
Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.22 to 1.9.23
- [Release notes](https://github.com/apache/maven-resolver/releases )
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.23 )
Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.22 to 1.9.23
---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
dependency-version: 1.9.23
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-13 12:23:56 -06:00
Josh Cummings
21c56554c9
Merge remote-tracking branch 'origin/6.5.x'
2025-05-13 12:23:07 -06:00
Josh Cummings
c8339184a9
Merge branch '6.5.x'
2025-05-13 12:21:51 -06:00
Josh Cummings
40a18fe63c
Merge branch '6.5.x'
2025-05-13 12:19:14 -06:00
Josh Cummings
0698d3527d
Merge branch '6.5.x'
2025-05-13 11:18:43 -06:00
Josh Cummings
93a7583aa4
Merge branch '6.5.x'
2025-05-12 18:52:47 -06:00
yybmion
a90ce5142c
Add logging to CsrfTokenRequestHandler implementations
...
Add trace-level logging to show the logical path of CSRF token processing
- Log token source (header or parameter) in resolveCsrfTokenValue
- Log request attribute names in handle methods
- Log failures in XorCsrfTokenRequestAttributeHandler (especially Base64 decoding)
- Add similar logging to XorServerCsrfTokenRequestAttributeHandler
Improves debugging capabilities without changing functionality.
Closes gh-13626
Signed-off-by: yybmion <yunyubin54@gmail.com>
2025-05-12 18:48:45 -06:00
Joe Grandja
ba7be9c8b9
Merge branch '6.5.x'
2025-05-09 16:14:34 -04:00
Rob Winch
ff8b77df29
Add Twitter/X to CommonOAuth2Provider
...
Add Twitter/X to CommonOAuth2Provider
2025-05-07 15:08:23 -05:00
Tran Ngoc Nhan
48eb243012
Update javadoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-05-07 14:59:14 -05:00
Tran Ngoc Nhan
1e4dd713c5
Remove APPLICATION_JSON_UTF8 usage
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-05-07 14:59:14 -05:00
Rob Winch
6118587ff8
SavedCookieMixinTests uses readValue(String,Object.class)
...
The test should not provide SavedCookie.class to the ObjectMapper
since this is not done in production. In particular, it provides the
type that it should be deserialized, but this must be provided in the
JSON since the type is unknown at the time of deserialization.
Issue gh-17006
2025-05-07 14:55:54 -05:00
M-Faheem-Khan
241c3cd35a
Remove deprecated Cookie usage
...
Remove usage of comment and verison usage
Signed-off-by: M-Faheem-Khan <faheem5948@gmail.com>
2025-05-07 14:55:54 -05:00
Rob Winch
693a5beb24
Format CommonOAuth2Provider
2025-05-07 14:55:04 -05:00
Rob Winch
f13836c9c8
Add X to CommonOAuth2Provider Reference
...
Issue gh-16510
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
2025-05-07 11:31:28 -05:00
kiruthiga1793
23e7c9eeaa
Add Twitter/X to CommonOAuth2Provider
...
Signed-off-by: kiruthiga1793 <pkiruthiga93@gmail.com>
2025-05-07 11:24:29 -05:00
Rob Winch
d52289bd7a
Remove Unnecessary Backwards Compatability
...
Since this is going to be merged into Spring Security 7 (a major release) and AESFastEngine is deprecated,
we should no longer support it (as it will likely be removed from Bouncy Castle)
2025-05-07 11:19:27 -05:00
Steve Riesenberg
5eb232cd3d
Polish gh-16164
2025-05-07 11:19:27 -05:00
Ferdinand Jacobs
2b22cf2877
Replace BouncyCastle's deprecated AESFastEngine with the default AESEngine
...
- Update AESEngine to use the default AES engine, following BouncyCastle's recommendations
(see release-1-56 of changelog: https://www.bouncycastle.org/download/bouncy-castle-java/?filter=java%3Drelease-1-56 ).
- Migrate to the latest API 'newInstance()' method to allow removal of @SuppressWarnings("deprecation")
- Remove @SuppressWarnings("deprecation")
2025-05-07 11:19:27 -05:00
Rob Winch
5f833fa236
Fix Checkstyle Errors
2025-05-07 10:50:41 -05:00
milaneuh
7fda87aecd
Remove deprecated methods from CookieServerCsrfTokenRepository
2025-05-07 10:50:41 -05:00
Shenker93
de622d1082
Improve JdbcUserDetailsManager.userExists method
2025-05-07 10:50:03 -05:00
Rob Winch
47f7d83ee4
Merge branch '6.5.x'
2025-05-07 10:10:35 -05:00
Rob Winch
69c52cc4f7
Merge branch 'remotes/origin/main'
...
- Ignore Bump com.fasterxml.jackson:jackson-bom from 2.18.3 to 2.18.4 in favor of 2.19.0
2025-05-07 10:05:39 -05:00
Josh Cummings
46ee6eda76
Merge branch '6.5.x'
2025-05-06 16:56:10 -06:00
Josh Cummings
9c357984d7
Merge branch '6.5.x'
2025-05-06 16:45:14 -06:00
Yanming Zhou
e61544c397
Improve OAuth2ResourceServerConfigurer to eliminate deprecated operations
...
Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>
2025-05-06 15:38:19 -05:00
Rob Winch
506a801f29
Merge branch '6.5.x'
...
- WebAuthnConfigurer Code Cleanup
Closes gh-17063
2025-05-06 15:22:36 -05:00
Rob Winch
866d8d0eab
Disable samples build
...
Spring Boot doesn't support Framework 7 yet
Issue gh-17047
2025-05-06 13:42:13 -05:00
Rob Winch
e599a17303
Update SNAPSHOT tests
...
Issueh gh-17047
2025-05-06 13:40:06 -05:00
Rob Winch
276bb82e7e
Create Spring Security 7.0.0-SNAPSHOT branch
...
Closes gh-17047
2025-05-06 13:33:29 -05:00
Rob Winch
a80592a707
Use commons-logging directly
...
Closes gh-17061
2025-05-06 13:27:13 -05:00
Rob Winch
b453840c0a
HttpHeaders no longer a MultiValueMap
...
Closes gh-17060
2025-05-06 13:27:13 -05:00
Rob Winch
e5e962ef90
Jakarta Cookie HttpOnly Serialization
...
The new specification represents Cookie attribute using HttpOnly: "" vs
HttpOnly: "true".
This updates the test to correspond to the new Servlet specification and
is a breaking change related to jakarta updates.
2025-05-06 13:27:13 -05:00
Rob Winch
0e2d864b09
Update Versions
2025-05-06 13:27:11 -05:00
Rob Winch
607705347c
MediaType.sortBySpecificityAndQuality->sortBySpecificity
...
Closes gh-17059
2025-05-06 13:26:17 -05:00
Rob Winch
66319fc3bc
MockServerHttpRequest.method(String,String)->method(HttpMethod,String)
...
Closes gh-17058
2025-05-06 13:26:16 -05:00
Rob Winch
2dbf3a2d18
WebClient.exchange->exchangeToMono
...
Closes gh-17057
2025-05-06 13:26:16 -05:00
Rob Winch
5704582c52
ResponseErrorHandler.handleError(URI, HttpMethod,ClientHttpResponse)
...
Closes gh-17056
2025-05-06 13:26:16 -05:00
Rob Winch
3976e7d456
BodyInserters.fromObject -> fromProducer
...
Closes gh-17055
2025-05-06 13:26:16 -05:00
Rob Winch
b467c47ed5
ClientRequest.method->create
...
ClientRequest.method was deprecated in favor of the create method
Closes gh-17054
2025-05-06 13:26:15 -05:00
Rob Winch
11105a5c51
UriComponentsBuilder.fromHttpUrl->fromUriString
...
The fromHttpUrl method is deprecated and replaced with fromUriString
Closes gh-
2025-05-06 13:26:15 -05:00
Rob Winch
38a9aa1da9
Remove Deprecated PathMatchConfigurer usage
...
Closes gh-17052
2025-05-06 13:26:15 -05:00
Rob Winch
222faae1cb
Add junit-jupiter-engine
...
This fixes some of the compatability problems that can happen
with newer versions of junit
2025-05-06 13:26:15 -05:00
Rob Winch
cb0fdef236
Remove MediaType.APPLICATION_JSON_UTF
...
Closes gh-17050
2025-05-06 13:26:14 -05:00
Rob Winch
5abbcecccc
Update to 7.0.0-SNAPSHOT
...
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
2025-05-06 13:26:14 -05:00
Rob Winch
c385a59b68
Improve SchemaZipPlugin Error Message
...
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
2025-05-06 13:26:14 -05:00