Spring/spring-authorization-server
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,597 Commits 8 Branches 0 Tags
6febd2aedaa0209f02e2d9ea40d0ec12c0d6c76c
Commit Graph

632 Commits

Author SHA1 Message Date
Joe Grandja
81c25ef6cb Fix test in OAuth2PushedAuthorizationRequestEndpointFilterTests 
Issue gh-1925
 2025-03-04 07:07:38 -05:00
Joe Grandja
30ebf1ecc6 Polish gh-1908 2025-03-04 06:35:00 -05:00
arefbehboudi
bbca6b02b7 Polish JdbcOAuth2AuthorizationService 
Closes gh-1908

Signed-off-by: arefbehboudi <behboodiaref@gmail.com>
 2025-03-04 06:34:01 -05:00
Joe Grandja
5bd47b6c2d Polish gh-1907 2025-03-04 06:17:14 -05:00
arefbehboudi
2e9fe7e99e Use pattern matching 
Closes gh-1907

Signed-off-by: arefbehboudi <behboodiaref@gmail.com>
 2025-03-04 06:17:13 -05:00
Joe Grandja
4337884e87 Add support for OAuth 2.0 Pushed Authorization Requests (PAR) 
Closes gh-210

Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>
 2025-03-03 20:37:06 -05:00
Joe Grandja
629239fde1 Polish gh-1874 2025-02-24 14:41:17 -05:00
sylvain-costanzo
b0fca27c7b Support POST for authorization code request flow 
Closes gh-1811

Signed-off-by: sylvain-costanzo <sylvain.costanzo1@decathlon.com>
 2025-02-24 12:06:38 -05:00
Joe Grandja
a5ce97fefe Merge branch '1.4.x' 2025-02-14 12:09:28 -05:00
Joe Grandja
ded6faae76 Merge branch '1.3.x' into 1.4.x 2025-02-14 12:04:06 -05:00
Joe Grandja
29472a17a9 Polish gh-1889 2025-02-14 11:41:51 -05:00
Nick Holloway
8d4da24892 Fix device access token response error codes 
Closes gh-1885

Signed-off-by: Nick Holloway <nick.holloway@pyrites.org.uk>
 2025-02-14 11:39:08 -05:00
Joe Grandja
779d87a279 Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) 
Closes gh-1813
 2025-02-14 05:44:30 -05:00
Joe Grandja
bf7f4f4af9 Bump next minor version 2025-02-11 15:51:26 -05:00
Loren
f1d54279e6 Replace deprecated fromHttpUrl with fromUriString 
Closes gh-1883

Signed-off-by: Loren <cn.luowenjie@qq.com>
 2025-01-21 09:20:05 -05:00
Loren
1f28280e7b Add Override annotation 
Closes gh-1878

Signed-off-by: Loren <cn.luowenjie@qq.com>
 2025-01-21 09:05:55 -05:00
Tran Ngoc Nhan
d238794229 Polish diamond operator 
Closes gh-1848
 2024-12-11 16:05:04 -05:00
Tran Ngoc Nhan
ed0265bf02 Polish 
Closes gh-1842
 2024-11-29 11:38:04 -05:00
Leon Linhart
e8f627f01e Use empty map for missing additional parameters 
Closes gh-1826
 2024-11-29 11:23:26 -05:00
Joe Grandja
0d2dac20af Merge branch '1.3.x' 2024-10-25 12:05:15 -04:00
Joe Grandja
92f7371021 Merge branch '1.2.x' into 1.3.x 
Closes gh-1791
 2024-10-25 12:02:25 -04:00
Joe Grandja
572255bebe Use toLower/toUpperCase with Locale argument 
Closes gh-1790
 2024-10-25 12:01:30 -04:00
Joe Grandja
a8d3960b97 Merge branch '1.3.x' 2024-10-21 15:17:23 -04:00
Joe Grandja
a60b1f65ee Merge branch '1.2.x' into 1.3.x 
Closes gh-1782
 2024-10-21 15:13:29 -04:00
William Koch
c6c20b9dba AOT contributions will be registered for JbcOAuth2AuthorizationService subclasses 
Prior to this commit, String-based class name comparisons were used for determining if a bean was of type JdbcOAuth2AuthorizationService or
JdbcRegisteredClientRepository.

Now JdbcOAuth2AuthorizationService.class.isAssignableFrom(...) and JdbcRegisteredClientRepository.class.isAssignableFrom(...) is used so that any subclasses are
detected and the necessary AOT hints are contributed.

Closes gh-1778
 2024-10-21 07:23:10 -04:00
Max Batischev
145599b44a Replace DelegatingAuthenticationConverter with one in Spring Security 
Closes gh-1736
 2024-10-17 10:12:44 -04:00
Joe Grandja
b1dcb87422 Merge branch '1.3.x' 2024-10-04 06:16:39 -04:00
Joe Grandja
68300d4cf9 Polish gh-1729 2024-10-04 05:57:16 -04:00
Selene Feigl
8c297b1252 Fix verification_uri in device authorization response when context path exists 
Closes gh-1714
 2024-10-04 05:54:24 -04:00
Joe Grandja
2c7975485f Simplify configuring authorization server using HttpSecurity.with() 
Closes gh-1707
 2024-10-03 15:28:16 -04:00
Joe Grandja
4d1e2d9711 Polish gh-1723 2024-10-01 17:19:45 -04:00
Daniel Garnier-Moiroux
acd4fd0227 Support custom validation in OidcLogoutAuthenticationProvider 
- Similar to custom validation in OAuth2AuthorizationCodeRequestAuthenticationProvider

Closes gh-1693
 2024-10-01 17:18:36 -04:00
Joe Grandja
8edbc26b18 Add convenience method for invalidating an OAuth2Token 
Closes gh-1717
 2024-09-12 15:10:11 -04:00
Joe Grandja
82413f4a3e Fix tests 2024-08-19 18:02:53 -04:00
Joe Grandja
f885df4343 Allow customizing LogoutHandler in OidcLogoutEndpointFilter 
Closes gh-1244
 2024-08-13 12:07:15 -04:00
Joe Grandja
19dfcd4ba9 Add support for OpenID Connect 1.0 prompt=none parameter 
Closes gh-501
 2024-08-08 06:03:27 -04:00
Joe Grandja
c0182f5441 Merge branch '1.3.x' 2024-08-02 15:00:11 -04:00
Joe Grandja
f56ac535d9 Merge branch '1.2.x' into 1.3.x 
Closes gh-1685
 2024-08-02 14:55:40 -04:00
Joe Grandja
1fcd0046dd Polish gh-1680 2024-08-02 14:44:00 -04:00
aijaz2
48115faee7 Fix empty code parameter in CodeVerifierAuthenticator 
Closes gh-1680
 2024-08-02 14:18:58 -04:00
Joe Grandja
4bfabf59f5 Merge branch '1.3.x' 2024-07-31 11:02:33 -04:00
Joe Grandja
acb49b94d4 Merge branch '1.2.x' into 1.3.x 
Closes gh-1683
 2024-07-31 10:58:59 -04:00
MrJovanovic13
72d7fb195e Fix json deserialization of multi-valued authorization request parameters 
Closes gh-1666
 2024-07-31 09:54:44 -04:00
Joe Grandja
7c86fb22e8 Merge branch '1.3.x' 2024-07-22 09:24:57 -04:00
Joe Grandja
14f38e10c5 Merge branch '1.2.x' into 1.3.x 2024-07-22 09:14:34 -04:00
Joe Grandja
ab6f4e4186 Revert "AuthorizationServerContext is accessible in custom consent controller" 
This reverts commit 9addcf65b3.

Closes gh-1668 in 1.2.x
 2024-07-22 09:04:25 -04:00
Joe Grandja
021b60b2e7 Merge branch '1.3.x' 2024-07-19 15:55:40 -04:00
Joe Grandja
41d3c30b49 Merge branch '1.2.x' into 1.3.x 2024-07-19 15:49:04 -04:00
Joe Grandja
9addcf65b3 AuthorizationServerContext is accessible in custom consent controller 
Closes gh-1668
 2024-07-19 15:35:47 -04:00
Joe Grandja
413363b130 Polish gh-1667 2024-07-19 05:19:03 -04:00