Spring Security
Go to file
Steve Riesenberg 9090f62d9b
Merge branch '5.8.x'
2022-10-13 16:46:53 -05:00
.github Add Reference to Security Reporting 2022-10-06 21:33:21 -05:00
.idea Fix checkstyle rules could not be parsed 2020-11-23 14:33:18 -05:00
acl Merge branch '5.8.x' 2022-08-23 16:03:50 -05:00
aspects Merge remote-tracking branch 'origin/5.8.x' 2022-09-20 16:11:16 -06:00
bom fix bom 2021-05-17 22:29:45 -05:00
buildSrc Update junit-bom to 5.9.0 2022-09-16 15:57:45 -03:00
config Remove CsrfSpec.tokenFromMultipartDataEnabled 2022-10-13 11:29:15 -05:00
core Add hints to invoke SecurityContextImpl#getAuthentication 2022-10-13 09:06:16 -03:00
crypto Remove deprecated constructors in PasswordEncoders 2022-10-12 02:38:25 -04:00
data Use SecurityContextHolderStrategy for Data 2022-06-27 16:36:13 -06:00
dependencies Add Micrometer Dependency 2022-10-12 19:26:21 -06:00
docs Polish whats-new.adoc 2022-10-13 13:42:04 -05:00
etc Merge branch '5.8.x' 2022-10-10 09:24:50 -03:00
git/hooks Use 6.0.x instead of 3.0.x as default branch 2022-08-24 16:38:27 -05:00
gradle/wrapper Update to Gradle 7.4.2 2022-04-13 18:12:01 +02:00
itest use-authorization-manager defaults to true 2022-10-06 08:12:46 -06:00
ldap Add RuntimeHints suffix for RuntimeHintsRegistrar 2022-07-13 10:14:43 -03:00
messaging Add remaining methods from ExpressionUrlAuthorizationConfigurer to MessageMatcherDelegatingAuthorizationManager 2022-08-16 15:12:47 -06:00
oauth2 Add SecurityContextHolderStrategy to OAuth2 2022-10-05 23:50:54 -06:00
rsocket Adjust OAuth2 Resource Server packaging 2022-09-23 16:31:21 -06:00
saml2/saml2-service-provider Add SecurityContextHolderStrategy to Saml2 2022-10-05 23:50:55 -06:00
scripts Exclude duplicate issues from changelog 2022-04-20 09:03:57 -03:00
taglibs Use SecurityContextHolderStrategy for Taglibs 2022-06-27 17:48:30 -06:00
test Default to Xor CSRF tokens in CsrfFilter 2022-10-13 09:39:55 -05:00
web Merge branch '5.8.x' 2022-10-13 16:46:53 -05:00
.editorconfig Fixed link in .editorconfig 2021-10-13 15:36:10 -06:00
.gitattributes Install Structure101 Plugin 2021-09-27 14:56:03 -06:00
.gitignore Ignore Lock Files 2020-02-07 13:59:05 -06:00
.sdkmanrc Update java version to 17.0.3-tem 2022-06-14 14:43:34 -05:00
CONTRIBUTING.adoc Add rncToXsd task description to CONTRIBUTING.adoc 2022-10-03 10:09:27 -03:00
LICENSE.txt Add LICENSE.txt 2020-04-15 16:44:13 -05:00
README.adoc add information to README describing how to build the reference docs 2022-09-19 10:01:43 -05:00
RELEASE.adoc Add automated release info to release doc 2022-08-16 11:46:04 -05:00
build.gradle Merge branch '5.8.x' 2022-10-10 11:02:22 -03:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Remove Duplicate Property 2022-10-13 09:02:35 -06:00
gradlew Update to Gradle 7.3 2021-11-10 11:05:18 -03:00
gradlew.bat Update to Gradle 6.6.1 2020-10-12 17:41:16 -06:00
notice.txt URL Cleanup 2019-03-19 23:53:23 -05:00
settings.gradle Update Gradle Enterprise plugin to 3.11.1 2022-09-16 13:14:53 -03:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://github.com/spring-projects/spring-security/workflows/CI/badge.svg?branch=main["Build Status", link="https://github.com/spring-projects/spring-security/actions?query=workflow%3ACI"]

image:https://img.shields.io/badge/Revved%20up%20by-Gradle%20Enterprise-06A0CE?logo=Gradle&labelColor=02303A["Revved up by Gradle Enterprise", link="https://ge.spring.io/scans?search.rootProjectNames=spring-security"]

= Spring Security

Spring Security provides security services for the https://docs.spring.io[Spring IO Platform]. Spring Security 6.0 requires Spring 6.0 as
a minimum and also requires Java 17.

For a detailed list of features and access to the latest release, please visit https://spring.io/projects[Spring projects].

== Code of Conduct
Please see our https://github.com/spring-projects/.github/blob/main/CODE_OF_CONDUCT.md[code of conduct]

== Downloading Artifacts
See https://docs.spring.io/spring-security/site/docs/current/reference/html5/#getting[Getting Spring Security] for how to obtain Spring Security.

== Documentation
Be sure to read the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the https://docs.spring.io/spring-security/site/docs/current/api/[Spring Security API Documentation].

== Quick Start
See https://docs.spring.io/spring-security/site/docs/current/reference/html5/#servlet-hello[Hello Spring Security] to get started with a "Hello, World" application.

== Building from Source
Spring Security uses a https://gradle.org[Gradle]-based build system.
In the instructions below, https://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
https://help.github.com/set-up-git-redirect[Git] and the https://www.oracle.com/technetwork/java/javase/downloads[JDK17 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk-17` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all spring-\* jars into your local Maven cache
[indent=0]
----
./gradlew publishToMavenLocal
----

=== Compile and test; build all jars, distribution zips, and docs
[indent=0]
----
./gradlew build
----

The reference docs are not currently included in the distribution zip.
You can build the reference docs for this branch by running the following command:

----
./gradlew :spring-security-docs:antora
----

That command publishes the docs site to the _docs/build/site_ directory.
The https://github.com/spring-projects/spring-security/tree/docs-build[playbook branch] describes how to build the reference docs in detail.

Discover more commands with `./gradlew tasks`.
See also the https://github.com/spring-projects/spring-framework/wiki/Gradle-build-and-release-FAQ[Gradle build and release FAQ].

== Getting Support
Check out the https://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
https://spring.io/services[Commercial support] is available too.

== Contributing
https://help.github.com/articles/creating-a-pull-request[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/main/CONTRIBUTING.adoc[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
https://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].