Type user.security.* as @ConfigurationProperties + secret-free ${userSecurity} template attribute by devondragon · Pull Request #356 · devondragon/SpringUserFramework

docs: design spec for typed user.security @ConfigurationProperties

devondragon

committed

e6d84fd

docs: link tracking issue #355 in design spec

devondragon

committed

525e179

docs: implementation plan for typed user.security @ConfigurationProperties

devondragon

committed

a1fae0a

feat: add PasswordPolicyConfigProperties bound to user.security.password.*

devondragon

committed

6a62a0b

feat: add RememberMeConfigProperties bound to user.security.remember-me.*

devondragon

committed

697e40e

test: rename remember-me relaxed-binding test to follow should...When convention

devondragon

committed

0d1d77b

feat: add UserSecurityConfigProperties bound to flat user.security.* keys

devondragon

committed

78199ab

fix: populate default URI lists and add JavaDoc to all fields in UserSecurityConfigProperties

devondragon

committed

eb87719

feat: register user.security config properties beans; add defaults parity test

devondragon

committed

58553bf

test: rename parity tests to should/when convention; add rememberMe parity coverage

devondragon

committed

83ac2e7

refactor: inject PasswordPolicyConfigProperties into password consumers

devondragon

committed

2ca92a6

refactor: inject user.security config properties into WebSecurityConfig

devondragon

committed

f03d829

refactor: inject UserSecurityConfigProperties into UserSecurityBeansAutoConfiguration

devondragon

committed

6cadda2

refactor: inject UserSecurityConfigProperties into remaining service consumers

devondragon

committed

2367b03

refactor: inject UserSecurityConfigProperties into controller/web consumers

devondragon

committed

2dcc692

chore: generate user.security config metadata; drop hand-maintained entries

devondragon

committed

01ded56

feat: expose secret-free UserSecurityUriView to templates as ${userSecurity}

devondragon

committed

c48df5b

test: guard uri placeholder/bean parity; docs: typed user.security config

devondragon

committed

fe71957

test: rename uri placeholder parity test to follow should...When convention

devondragon

committed

1965c7b

test: cover user.security URI-list default parity against shipped file

devondragon

committed

5e119b5

fix: make user.security misconfiguration loud instead of silent

devondragon

committed

5c5f2e7

docs: document user.security startup guards and constructor changes

devondragon

committed

5687e83

docs: move API-surface changes into an explicit Breaking Changes section

devondragon

committed

d36ccbd

fix: restore public LoginAttemptService.getMaxFailedLoginAttempts/getAccountLockoutDuration

devondragon

committed

915219a

Navigation Menu

Type user.security.* as @ConfigurationProperties + secret-free ${userSecurity} template attribute - #356

Type user.security.* as @ConfigurationProperties + secret-free ${userSecurity} template attribute#356
devondragon merged 24 commits into
mainfrom
feature/user-security-config-properties

Commits on Aug 14, 2026

docs: design spec for typed user.security @ConfigurationProperties

docs: link tracking issue #355 in design spec

docs: implementation plan for typed user.security @ConfigurationProperties

feat: add PasswordPolicyConfigProperties bound to user.security.password.*

feat: add RememberMeConfigProperties bound to user.security.remember-me.*

test: rename remember-me relaxed-binding test to follow should...When convention

feat: add UserSecurityConfigProperties bound to flat user.security.* keys

fix: populate default URI lists and add JavaDoc to all fields in UserSecurityConfigProperties

feat: register user.security config properties beans; add defaults parity test

test: rename parity tests to should/when convention; add rememberMe parity coverage

refactor: inject PasswordPolicyConfigProperties into password consumers

refactor: inject user.security config properties into WebSecurityConfig

refactor: inject UserSecurityConfigProperties into UserSecurityBeansAutoConfiguration

refactor: inject UserSecurityConfigProperties into remaining service consumers

refactor: inject UserSecurityConfigProperties into controller/web consumers

chore: generate user.security config metadata; drop hand-maintained entries

feat: expose secret-free UserSecurityUriView to templates as ${userSecurity}

test: guard uri placeholder/bean parity; docs: typed user.security config

test: rename uri placeholder parity test to follow should...When convention

test: cover user.security URI-list default parity against shipped file

fix: make user.security misconfiguration loud instead of silent

docs: document user.security startup guards and constructor changes

docs: move API-surface changes into an explicit Breaking Changes section

fix: restore public LoginAttemptService.getMaxFailedLoginAttempts/getAccountLockoutDuration