Josh Cummings
40b84d3e44
Merge branch '6.4.x'
2025-03-27 16:34:39 -06:00
Josh Cummings
6c5b6d1c51
Merge branch '6.3.x' into 6.4.x
...
Closes gh-16837
2025-03-27 16:32:12 -06:00
Josh Cummings
15b9a50060
Add Test
...
Issue gh-16819
2025-03-27 16:18:00 -06:00
Steve Riesenberg
860f130bc4
Add additional validation when refreshing ID tokens
...
Issue gh-16589
2025-03-26 15:34:17 -05:00
Evgeniy Cheban
ad1ee28f01
Update HandlerMappingIntrospector Usage in CORS support
...
Closes gh-16501
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com >
2025-03-26 13:11:05 -06:00
Josh Cummings
86599afd43
Rename servletPath to basePath
...
Closes gh-16765
2025-03-21 12:04:46 -06:00
Josh Cummings
c91656c27a
Add Authorization Event Tests
...
- These ensure that the parameterized version of authorization events
can be listened to
Issue gh-16700
2025-03-20 13:12:36 -06:00
Josh Cummings
e6008b6067
Add RedirectToHttps to XML
...
Closes gh-16775
2025-03-19 15:26:05 -06:00
Steve Riesenberg
5bb5d0f6be
Polish gh-16589
2025-03-18 18:07:56 -05:00
Josh Cummings
be23268c37
Add redirectToHttps DSL Configurer
...
Closes gh-16679
2025-02-28 09:38:07 -07:00
Max Batischev
fa35c5b4d8
Make DefaultOneTimeToken Serializable
...
Closes gh-16617
Signed-off-by: Max Batischev <mblancer@mail.ru >
2025-02-27 12:49:48 -07:00
Rob Winch
76a566265c
Use PortResolver Beans by Default
...
Closes gh-16664
2025-02-26 16:13:10 -06:00
Josh Cummings
7d301f87d6
Add Opt-in PathPattern Strategy
...
Closes gh-16573
2025-02-21 13:40:24 -07:00
Josh Cummings
51ce91f07b
Merge branch '6.4.x'
2025-02-18 15:11:08 -07:00
Josh Cummings
cc2cfc62b0
Add Test Requiring serialVersionUID
...
Issue gh-16276
2025-02-18 15:06:50 -07:00
tejas-teju
c4b223266c
Return Invalid Credentials message on login error
...
Closes gh-16484
Signed-off-by: tejas-teju <tejas8196@gmail.com >
2025-02-14 16:01:22 -07:00
Josh Cummings
e42865b926
Merge branch '6.4.x'
2025-02-14 13:08:17 -07:00
Josh Cummings
946812691e
Make AuthenticatorAttestation Serializable
...
Issue gh-16481
2025-02-14 13:07:56 -07:00
Max Batischev
b5a4218a0b
Make WebAuthnAuthenticationRequestToken Serializable
...
Closes gh-16481
Signed-off-by: Max Batischev <mblancer@mail.ru >
2025-02-14 11:51:46 -07:00
Josh Cummings
666d3a4af6
Merge branch '6.4.x'
2025-02-13 17:25:39 -07:00
Max Batischev
879b44f9a1
Make PublicKeyCredentialRequestOptions Serializable
...
Closes gh-16432
Signed-off-by: Max Batischev <mblancer@mail.ru >
2025-02-13 17:17:16 -07:00
Joe Grandja
2480d41981
Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)
...
Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com >
2025-02-11 14:10:23 -05:00
Daniel Garnier-Moiroux
238f47ce5e
One Time Token login registers the default login page
...
closes gh-16414
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf >
2025-02-10 09:55:51 -06:00
Max Batischev
9676739c88
TestServerOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable
...
Signed-off-by: Max Batischev <mblancer@mail.ru >
2025-02-05 14:14:16 -07:00
Max Batischev
be81377235
Add Support ServerGenerateOneTimeTokenRequestResolver
...
Closes gh-16488
Signed-off-by: Max Batischev <mblancer@mail.ru >
2025-02-05 14:14:16 -07:00
Josh Cummings
981e3fd779
Merge branch '6.4.x'
2025-02-05 13:59:12 -07:00
Josh Cummings
b4c7795699
Support Serialization for Authorization Components
...
Closes gh-16544
2025-02-05 13:58:32 -07:00
Josh Cummings
5ff87128b1
Make Saml2AuthenticationToken Serializable
...
Issue gh-16286
2025-02-03 10:13:14 -07:00
Tran Ngoc Nhan
bcc4b415b3
Make RelyingPartyRegistration Serializable
...
Closes gh-16286
2025-02-03 10:13:13 -07:00
Rob Winch
10394c8f2a
OTT Tests use Mocks Instead of Comparing Expires
...
Previously, expires was compared to test if a custom implementations
were used. Now the tests verify this through mocks.
Closes gh-16515
2025-01-31 16:47:50 -06:00
Josh Cummings
5af4b9a2ad
Merge branch '6.4.x'
2025-01-30 18:06:01 -07:00
Josh Cummings
4b5bacf71a
Make Saml2AuthenticationToken Serializable
...
Issue gh-16286
2025-01-30 18:05:17 -07:00
Tran Ngoc Nhan
e50415de85
Make RelyingPartyRegistration Serializable
...
Closes gh-16286
2025-01-30 17:45:41 -07:00
Josh Cummings
28615e7f64
Remove Stray Import
2025-01-24 11:47:40 -07:00
Rob Winch
a841737941
Use credPropsField.getType()
...
Using the type from a field retains generics information.
Issue gh-16432
2025-01-23 20:13:11 -06:00
Max Batischev
c7bc4c98db
Make PublicKeyCredentialRequestOptions Serializable
...
Closes gh-16432
Signed-off-by: Max Batischev <mblancer@mail.ru >
2025-01-23 20:13:10 -06:00
Josh Cummings
e1a42db845
Merge branch '6.4.x'
2025-01-23 17:03:53 -07:00
Josh Cummings
e1e5970a24
Support Serialization for LDAP Components
...
Issue gh-16276
2025-01-23 16:55:30 -07:00
Josh Cummings
36716d12ba
Serialization Support of Core Components
...
Issue gh-16276
2025-01-23 16:50:30 -07:00
Josh Cummings
d7921daa13
Support Serialization for SecurityConfig
...
Issue gh-16276
2025-01-23 16:44:53 -07:00
Josh Cummings
d043884e32
Support Serialization
...
Issue gh-16276
2025-01-23 16:44:45 -07:00
Rob Winch
177ce59a4b
Merge branch '6.4.x'
...
Implement Serializable for WebAuthnAuthentication
Closes gh-16474
2025-01-23 14:12:30 -06:00
Tran Ngoc Nhan
e557c7227b
Implement Serializable for WebAuthnAuthentication
...
Closes gh-16273
Closes gh-16285
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-01-23 13:53:26 -06:00
Rob Winch
f8132018d5
Merge branch '6.4.x'
...
TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable
Closes gh-16472
2025-01-23 12:45:09 -06:00
Rob Winch
751b5580a1
TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable
...
Previously there were race conditions on the static member lastToken of
TestOneTimeTokenGenerationSuccessHandler. This is because the tests run in
parallel and one test may override the other tests lastToken and thus
make the assertion on it incorrect.
This commit changes lastToken to be a non-static variable to ensure that
each test has it's own lastToken for asserting the expected value.
Closes gh-16471
2025-01-23 12:43:22 -06:00
Steve Riesenberg
4f860a5481
Merge branch '6.4.x'
...
# Conflicts:
# config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java
2025-01-22 17:30:29 -06:00
Max Batischev
474b5e151a
Add Support GenerateOneTimeTokenRequestResolver
...
Closes gh-16291
Signed-off-by: Max Batischev <mblancer@mail.ru >
2025-01-22 17:09:55 -06:00
Steve Riesenberg
d97e01d1de
Merge branch '6.3.x' into 6.4.x
...
Closes gh-16466
2025-01-22 17:09:34 -06:00
Steve Riesenberg
211fa52649
Favor provided instances over shared objects
...
Prior to this commit, providing oauth2Login() and oauth2Client() with
clientRegistrationRepository() and authorizedClientRepository() caused
objects to be shared across both configurers.
These configurers will now prefer explicitly provided instances of
those objects when they are available.
Closes gh-16105
2025-01-22 17:07:44 -06:00
Rob Winch
68c8a5ad99
Remove debug test
...
Issue gh-16443
2025-01-22 16:11:25 -06:00
