Josh Cummings
52ad49074d
Migrate SAML 2.0 Tests and Docs to PCFOne
...
Issue gh-9362
5 years ago
Josh Cummings
69b1bc62ff
Polish OpenSamlAuthenticationProvider
...
- Use type-safe CriteriaSet
- Keep Assertion immutable
Closes gh-8471
6 years ago
Josh Cummings
067cb4579e
Polish OpenSamlAuthenticationProviderTests
...
- Add missing assertion
Issue gh-6019
6 years ago
Clement Stoquart
32c02fbedb
Remove empty relay state from redirect url
6 years ago
Eleftheria Stein
59ca2ddf65
Polish SAML2 principal classes
...
Update @since
Issue: gh-7681
6 years ago
Clement Stoquart
0782228914
fix: make Saml2Authentication serializable
6 years ago
Filip Hanik
0cafcf37e2
Make the loginProcessingUrl configurable for saml2Login()
...
Fixes gh-7565
https://github.com/spring-projects/spring-security/issues/7565
6 years ago
Mike Truso
a4430aa21b
Fix variable reference in sample code
6 years ago
Filip Hanik
0f14844acf
We will not validate IP addresses as part of assertion validation
...
Fixes gh-7514
https://github.com/spring-projects/spring-security/issues/7514
6 years ago
Brendt Lucas
8ebfba3019
Support configuration of protocol binding for authentication requests
6 years ago
Filip Hanik
83b5f5c7ae
Improve the Saml2AuthenticationRequest object
...
- introduce the AssertionConsumerServiceURL attribute
- add javadoc
- align property name with SAML XML for AuthNRequest
6 years ago
Filip Hanik
9731386de5
Correctly set "Destination" in AuthNRequest message
...
Fixes gh-7494
https://github.com/spring-projects/spring-security/issues/7494
6 years ago
Filip Hanik
69eacac514
Fix javadoc for RelyingPartyRegistrationRepository
6 years ago
Filip Hanik
7adb4da3ef
Always require signature on either response or assertion
...
Fixes gh-7490
https://github.com/spring-projects/spring-security/issues/7490
6 years ago
Filip Hanik
22da2b45c9
SAML Assertion validation should propagate errors: #7375 and #7375
...
Fixes gh-7377
Fixes gh-7375
https://github.com/spring-projects/spring-security/issues/7377
https://github.com/spring-projects/spring-security/issues/7375
Clean up code
- Authentication request factory should only throw Saml2Exception
- OpenSamlImplementation should only throw Saml2Exception
- Move the OpenSamlImplementation package private methods to the right
section
6 years ago
Filip Hanik
b6a057a925
OpenSAML expects type `long` representing millis for response time validation skew
...
Fixes gh-7448
https://github.com/spring-projects/spring-security/issues/7448
6 years ago
Filip Hanik
adde18b873
Revert "Merge pull request #7432 from fhanik/feature/propagate_saml_authentication_exception"
...
This reverts commit e9619fb0e7 , reversing
changes made to 45a1490d5d .
6 years ago
Filip Hanik
d472e99528
SAML Assertion validation should propagate errors: #7375 and #7375
...
Fixes gh-7377
Fixes gh-7375
https://github.com/spring-projects/spring-security/issues/7377
https://github.com/spring-projects/spring-security/issues/7375
6 years ago
Filip Hanik
20033ffd4a
OpenSAML expects type `long` representing millis for response time validation skew
...
Fixes gh-7448
https://github.com/spring-projects/spring-security/issues/7448
6 years ago
Filip Hanik
438ae215f8
Upgrade to OpenSAML 3.4.3
...
Fixes gh-7392
6 years ago
Josh Cummings
c716b400a1
Update to OpenSaml 3.3.1
...
Fixes gh-7388
6 years ago
Filip Hanik
e9a44bc0ce
HttpSecurity.saml2login() - MVP Core Code
...
Implements minimal SAML 2.0 login/authentication functionality with the
following feature set:
- Supports IDP initiated login at the default url of /login/saml2/sso/{registrationId}
- Supports SP initiated login at the default url of /saml2/authenticate/{registrationId}
- Supports basic java-configuration via DSL
- Provides an integration sample using Spring Boot
Not implemented with this MVP
- Single Logout
- Dynamic Service Provider Metadata
Fixes gh-6019
6 years ago