Spring/spring-authorization-server
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,635 Commits 8 Branches 0 Tags
eb6ce03e494d37357cba32690106a83f70bafb47
Commit Graph

1635 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]
eb6ce03e49 Bump io.spring.security.release from 1.0.4 to 1.0.5 
Bumps io.spring.security.release from 1.0.4 to 1.0.5.

---
updated-dependencies:
- dependency-name: io.spring.security.release
  dependency-version: 1.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-22 05:19:23 -04:00
Joe Grandja
9dd5e2814a Merge branch '1.4.x' 2025-04-21 21:33:45 -04:00
Joe Grandja
f43dce384d Merge branch '1.3.x' into 1.4.x 2025-04-21 21:24:30 -04:00
Joe Grandja
c624d0a908 Revert "Fix client_secret_basic authentication failures and return challenge" 
This reverts commit 42c18c856f.
 2025-04-21 21:15:05 -04:00
Joe Grandja
7e41e87142 Revert "Allow customizing client authentication failures with AuthenticationEntryPoint" 
This reverts commit f415f2a52c.
 2025-04-21 21:05:05 -04:00
dependabot[bot]
ad3c5924be Bump org.springframework:spring-framework-bom from 6.2.5 to 6.2.6 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.5 to 6.2.6.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.5...v6.2.6)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 6.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-21 07:11:47 -04:00
dependabot[bot]
7870f476f7 Bump org.springframework:spring-framework-bom from 6.2.5 to 6.2.6 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.5 to 6.2.6.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.5...v6.2.6)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 6.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-21 07:11:29 -04:00
dependabot[bot]
6ae338245f Bump org.springframework:spring-framework-bom from 6.1.18 to 6.1.19 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.1.18 to 6.1.19.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.18...v6.1.19)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-version: 6.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-21 07:11:12 -04:00
dependabot[bot]
fe5ace864c Bump io.spring.security.release from 1.0.3 to 1.0.4 
Bumps io.spring.security.release from 1.0.3 to 1.0.4.

---
updated-dependencies:
- dependency-name: io.spring.security.release
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-21 06:49:53 -04:00
dependabot[bot]
88d9724eeb Bump io.spring.security.release from 1.0.3 to 1.0.4 
Bumps io.spring.security.release from 1.0.3 to 1.0.4.

---
updated-dependencies:
- dependency-name: io.spring.security.release
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-21 06:49:34 -04:00
dependabot[bot]
6663a87261 Bump io.spring.security.release from 1.0.3 to 1.0.4 
Bumps io.spring.security.release from 1.0.3 to 1.0.4.

---
updated-dependencies:
- dependency-name: io.spring.security.release
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-21 06:49:11 -04:00
dependabot[bot]
81030e63cc Bump spring-io/spring-doc-actions from 0.0.19 to 0.0.20 
Bumps [spring-io/spring-doc-actions](https://github.com/spring-io/spring-doc-actions) from 0.0.19 to 0.0.20.
- [Commits](c203826512...e28269199d)

---
updated-dependencies:
- dependency-name: spring-io/spring-doc-actions
  dependency-version: 0.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-21 06:08:45 -04:00
dependabot[bot]
5a50a0caf5 Bump spring-io/spring-doc-actions from 0.0.19 to 0.0.20 
Bumps [spring-io/spring-doc-actions](https://github.com/spring-io/spring-doc-actions) from 0.0.19 to 0.0.20.
- [Commits](c203826512...e28269199d)

---
updated-dependencies:
- dependency-name: spring-io/spring-doc-actions
  dependency-version: 0.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-21 06:07:53 -04:00
Joe Grandja
f415f2a52c Allow customizing client authentication failures with AuthenticationEntryPoint 
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>
 2025-04-18 07:46:25 -04:00
Joe Grandja
9ecfe49658 Merge branch '1.4.x' 2025-04-18 06:17:46 -04:00
Joe Grandja
f3820e5601 Merge branch '1.3.x' into 1.4.x 
Closes gh-1982
 2025-04-18 06:10:21 -04:00
Joe Grandja
42c18c856f Fix client_secret_basic authentication failures and return challenge 
Closes gh-468
 2025-04-18 05:45:25 -04:00
Joe Grandja
2dff08834c Add authorization server metadata for OAuth 2.0 Pushed Authorization Requests (PAR) 
Issue gh-1925

Closes gh-1975
 2025-04-16 15:21:44 -04:00
Joe Grandja
4b78a5e991 Enforce one-time use for request_uri used in PAR 
Issue gh-1925

Closes gh-1974
 2025-04-16 06:26:33 -04:00
Joe Grandja
c82aace6d4 Polish tests 
Issue gh-1925
 2025-04-16 05:50:59 -04:00
Joe Grandja
39cb9bfcea Validate expiry for request_uri used in PAR 
Issue gh-1925

Closes gh-1973
 2025-04-16 05:50:58 -04:00
Joe Grandja
5458e0855a request_uri used in PAR must be bound to the client 
Issue gh-1925

Closes gh-1971
 2025-04-15 15:36:09 -04:00
dependabot[bot]
b87bf077ed Bump org.springframework:spring-framework-bom from 6.2.4 to 6.2.5 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.4 to 6.2.5.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.4...v6.2.5)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-28 16:22:05 -04:00
dependabot[bot]
cb7da6aae0 Bump spring-io/spring-doc-actions from 0.0.18 to 0.0.19 
Bumps [spring-io/spring-doc-actions](https://github.com/spring-io/spring-doc-actions) from 0.0.18 to 0.0.19.
- [Commits](852920ba3f...c203826512)

---
updated-dependencies:
- dependency-name: spring-io/spring-doc-actions
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-28 16:21:41 -04:00
dependabot[bot]
bcdf144b5b Bump @springio/asciidoctor-extensions in /docs 
Bumps [@springio/asciidoctor-extensions](https://github.com/spring-io/asciidoctor-extensions) from 1.0.0-alpha.16 to 1.0.0-alpha.17.
- [Changelog](https://github.com/spring-io/asciidoctor-extensions/blob/main/CHANGELOG.adoc)
- [Commits](https://github.com/spring-io/asciidoctor-extensions/compare/v1.0.0-alpha.16...v1.0.0-alpha.17)

---
updated-dependencies:
- dependency-name: "@springio/asciidoctor-extensions"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-28 16:21:19 -04:00
Joe Grandja
2e78d267e2 Merge branch '1.4.x' 2025-03-28 16:19:53 -04:00
dependabot[bot]
254b94521f Bump org.springframework:spring-framework-bom from 6.2.4 to 6.2.5 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.4 to 6.2.5.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.4...v6.2.5)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-28 16:16:56 -04:00
dependabot[bot]
26be6caa30 Bump @springio/asciidoctor-extensions in /docs 
Bumps [@springio/asciidoctor-extensions](https://github.com/spring-io/asciidoctor-extensions) from 1.0.0-alpha.16 to 1.0.0-alpha.17.
- [Changelog](https://github.com/spring-io/asciidoctor-extensions/blob/main/CHANGELOG.adoc)
- [Commits](https://github.com/spring-io/asciidoctor-extensions/compare/v1.0.0-alpha.16...v1.0.0-alpha.17)

---
updated-dependencies:
- dependency-name: "@springio/asciidoctor-extensions"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-28 16:16:34 -04:00
dependabot[bot]
1e9751a8c0 Bump spring-io/spring-doc-actions from 0.0.18 to 0.0.19 
Bumps [spring-io/spring-doc-actions](https://github.com/spring-io/spring-doc-actions) from 0.0.18 to 0.0.19.
- [Commits](852920ba3f...c203826512)

---
updated-dependencies:
- dependency-name: spring-io/spring-doc-actions
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-28 16:16:11 -04:00
Joe Grandja
8b48ace042 Merge branch '1.4.x' 2025-03-28 16:12:17 -04:00
Joe Grandja
5de6f97fd6 Merge branch '1.3.x' into 1.4.x 2025-03-28 16:11:01 -04:00
dependabot[bot]
e83addafd4 Bump @springio/asciidoctor-extensions in /docs 
Bumps [@springio/asciidoctor-extensions](https://github.com/spring-io/asciidoctor-extensions) from 1.0.0-alpha.16 to 1.0.0-alpha.17.
- [Changelog](https://github.com/spring-io/asciidoctor-extensions/blob/main/CHANGELOG.adoc)
- [Commits](https://github.com/spring-io/asciidoctor-extensions/compare/v1.0.0-alpha.16...v1.0.0-alpha.17)

---
updated-dependencies:
- dependency-name: "@springio/asciidoctor-extensions"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-28 16:07:13 -04:00
Joe Grandja
65e3a5ec9b Add authorization server metadata for DPoP support 
Issue gh-1813

Closes gh-1951
 2025-03-27 06:13:33 -04:00
Joe Grandja
48fd6ab60f Verify DPoP Proof public key during refresh_token grant for public clients 
Issue gh-1813

Closes gh-1949
 2025-03-25 15:56:38 -04:00
github-actions[bot]
dc167bfdf7 Next development version 2025-03-18 15:29:43 +00:00
github-actions[bot]
796d7713a2 Release 1.5.0-M2 2025-03-18 15:22:13 +00:00
dependabot[bot]
b5e7c1bf16 Bump org.springframework.security:spring-security-bom 
Bumps [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) from 6.5.0-M2 to 6.5.0-M3.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/6.5.0-M2...6.5.0-M3)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-18 10:27:37 -04:00
dependabot[bot]
dfc50b8aeb Bump org.springframework:spring-framework-bom from 6.2.3 to 6.2.4 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.3 to 6.2.4.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.3...v6.2.4)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-18 10:16:52 -04:00
Joe Grandja
6febd2aeda Merge branch '1.4.x' 2025-03-18 10:02:40 -04:00
Joe Grandja
be2600b820 Merge branch '1.3.x' into 1.4.x 2025-03-18 09:55:19 -04:00
dependabot[bot]
6b8d378f66 Bump org.springframework.security:spring-security-bom 
Bumps [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) from 6.4.3 to 6.4.4.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/6.4.3...6.4.4)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-18 09:42:39 -04:00
dependabot[bot]
8d6555919f Bump org.springframework.security:spring-security-bom 
Bumps [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) from 6.3.7 to 6.3.8.
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/6.3.7...6.3.8)

---
updated-dependencies:
- dependency-name: org.springframework.security:spring-security-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-18 09:36:58 -04:00
Joe Grandja
d1787669a0 Merge branch '1.4.x' 2025-03-17 16:59:47 -04:00
Joe Grandja
23f8970258 Merge branch '1.3.x' into 1.4.x 2025-03-17 16:40:40 -04:00
dependabot[bot]
4e3c3f76e6 Bump org.springframework:spring-framework-bom from 6.2.3 to 6.2.4 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.3 to 6.2.4.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.3...v6.2.4)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-17 16:38:02 -04:00
dependabot[bot]
811388ecef Bump org.springframework:spring-framework-bom from 6.1.17 to 6.1.18 
Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.1.17 to 6.1.18.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.17...v6.1.18)

---
updated-dependencies:
- dependency-name: org.springframework:spring-framework-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-17 16:15:58 -04:00
Joe Grandja
d32c185afb Fix redirect loop in default/demo-authorizationserver samples 
Closes gh-1920
 2025-03-04 10:55:19 -05:00
Joe Grandja
81c25ef6cb Fix test in OAuth2PushedAuthorizationRequestEndpointFilterTests 
Issue gh-1925
 2025-03-04 07:07:38 -05:00
Joe Grandja
30ebf1ecc6 Polish gh-1908 2025-03-04 06:35:00 -05:00
arefbehboudi
bbca6b02b7 Polish JdbcOAuth2AuthorizationService 
Closes gh-1908

Signed-off-by: arefbehboudi <behboodiaref@gmail.com>
 2025-03-04 06:34:01 -05:00