spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	750cb30ce4	Add AuthenticationTrustResolver.isAuthenticated	2 years ago
Steve Riesenberg	9db33f33c7	Revert unnecessary merges on 6.0.x This commit removes unnecessary main-branch merges starting from `8750608b5b` and adds the following needed commit(s) that were made afterward: - `5dce82c48b`	2 years ago
Marcus Da Coregio	64e2a2ff8b	Apply updated Code Style Closes gh-13881	2 years ago
Josh Cummings	cb33fd7850	Add OIDC Back-Channel Logout Support Closes gh-12570	2 years ago
Tim te Beek	9df9cb5aed	refactor: AssertJ best practices Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D Co-authored-by: Moderne <team@moderne.io>	2 years ago
Steve Riesenberg	9b7a110704	Fix OAuth2AuthenticationExceptionMixinTests on JDK 17 Closes gh-11893	2 years ago
Josh Cummings	6c3636d780	Update Removed Usages Issue gh-13544	2 years ago
Justin Tay	4c33d53385	Add SupplierClientRegistrationRepository Closes gh-12967	2 years ago
Josh Cummings	a77ef9ecf4	Add ClientAuthenticationMethod#toString Closes gh-13497	2 years ago
Josh Cummings	dbf0c66301	Fix Client Authentication Method Error Message Closes gh-13496	2 years ago
Claudio Nave	52e12ad64b	Replace deprecated methods	3 years ago
Krzysztof Krason	9b603b99ab	Using modern Java features	3 years ago
Kevin Yue	b09a228eaf	Make class `OidcClientInitiatedLogoutSuccessHandler` extensible	3 years ago
Josh Cummings	5f26daedcb	Error On Unsupported Client Authentication Methods Closes gh-13144	3 years ago
Josh Cummings	c1002ff745	Improve Error Handling Closes gh-13143	3 years ago
Josh Cummings	7bd6deccc3	Revert "Disable Some R2dbc Tests" This reverts commit `813179931a`. Closes gh-12339	3 years ago
Josh Cummings	813179931a	Disable Some R2dbc Tests Issue gh-12339	3 years ago
이경욱	52c7141aac	Save Request Before Response Is Committed Specifically important for cookie-based authorization request repositories. Closes gh-11602	3 years ago
Steve Riesenberg	bb3d92e33a	Update r2dbc-h2 to 1.0.0.RELEASE Closes gh-12251	3 years ago
Steve Riesenberg	4e88623873	Polish gh-12087 in 6.0	3 years ago
Michael Sosa	52888d6206	Warn when AuthorizationGrantType does not match Log a warning when AuthorizationGrantType does not exactly match a pre-defined constant. Closes gh-11905	3 years ago
Steve Riesenberg	fde26e003a	Request user info when AS returns no scopes Closes gh-12144	3 years ago
Ger Roza	8315545144	Update RP-Initiated Logout target URLs. The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs. Fixes: gh-12081	3 years ago
Steve Riesenberg	75004587a4	Fix scope mapping Issue gh-12101	3 years ago
Josh Cummings	14584b0562	Add SecurityContextHolderStrategy to OAuth2 Issue gh-11060	3 years ago
Marcus Da Coregio	7f0140278e	Add native hint for OAuth2 Client's schemas Closes gh-11920	3 years ago
Steve Riesenberg	181ee7410b	Change default authority for oauth2Login() Previously, the default authority was ROLE_USER when using oauth2Login() for both OAuth2 and OIDC providers. * Default authority for OAuth2UserAuthority is now OAUTH2_USER * Default authority for OidcUserAuthority is now OIDC_USER Documentation has been updated to include this implementation detail. Closes gh-7856	3 years ago
Steve Riesenberg	bbac85e20b	Reduce severity of invalid registrationId to warn This prevents filling the log file with error messages when routine scans are being performed. Closes gh-11344	3 years ago
Daniel Garnier-Moiroux	bea7761a1c	ClientRegistrations#rest defines 30s connect and read timeouts	3 years ago
Rob Winch	f84f08c4b9	Default HttpSessionRequestCache.matchingRequestParameterName=continue Closes gh-11757	3 years ago
Rob Winch	32dbaceec5	Fix mockito 4.7.0 merge Issue gh-11748	3 years ago
Rob Winch	2fb625db84	Remove mockito deprecations Issue gh-11748	3 years ago
Igor Bolic	2e66b9f6cc	Allow customization of redirect strategy The default redirect strategy will provide authorization redirect URI within HTTP 302 response Location header. Allowing the configuration of custom redirect strategy will provide an option for the clients to obtain the authorization URI from e.g. HTTP response body as JSON payload, without a need to handle automatic redirection initiated by the HTTP Location header. Closes gh-11373	3 years ago
Igor Bolic	efaee4e56b	Allow customization of redirect strategy The default redirect strategy will provide authorization redirect URI within HTTP 302 response Location header. Allowing the configuration of custom redirect strategy will provide an option for the clients to obtain the authorization URI from e.g. HTTP response body as JSON payload, without a need to handle automatic redirection initiated by the HTTP Location header. Closes gh-11373	3 years ago
Joe Grandja	b5b3ddd6b4	Deprecate Resource Owner Password Credentials grant Closes gh-11590	3 years ago
Joe Grandja	95155ddb0c	Deprecate Resource Owner Password Credentials grant Closes gh-11590	3 years ago
Joe Grandja	6ee1643bae	Remove deprecations in ServerOAuth2AuthorizedClientExchangeFilterFunction Closes gh-11589	3 years ago
Joe Grandja	054791c26c	Remove deprecations in ServletOAuth2AuthorizedClientExchangeFilterFunction Closes gh-11588	3 years ago
Joe Grandja	0859da5590	Remove deprecations in OAuth2AuthorizedClientArgumentResolver Closes gh-11584	3 years ago
Joe Grandja	743b6a5bfe	Remove deprecations in OidcClientInitiatedLogoutSuccessHandler Closes gh-11565	3 years ago
Joe Grandja	cae22867b2	Remove deprecated allowMultipleAuthorizationRequests Closes gh-11564	3 years ago
Joe Grandja	0e291a3295	Remove deprecations in AuthorizationRequestRepository Closes gh-11519	3 years ago
Joe Grandja	e12823095f	Remove deprecations in ClientRegistration Closes gh-11518	3 years ago
Joe Grandja	61b034bf69	Remove deprecations in AbstractOAuth2AuthorizationGrantRequest Closes gh-11517	3 years ago
Joe Grandja	be58e2ac49	Remove deprecations in ClientAuthenticationMethod Closes gh-11516	3 years ago
Joe Grandja	746d27eab1	Remove deprecated NimbusAuthorizationCodeTokenResponseClient Closes gh-11512	3 years ago
Joe Grandja	42683693c0	Remove deprecated CustomUserTypesOAuth2UserService Closes gh-11511	3 years ago
Joe Grandja	67b27a41c3	Remove deprecated UnAuthenticatedServerOAuth2AuthorizedClientRepository Closes gh-11508	3 years ago
Joe Grandja	a3326fc0ee	Remove deprecated implicit authorization grant type Closes gh-11506	3 years ago
Marcus Da Coregio	ecbfa84b39	Revert "Disable failing tests until r2dbc-h2 is upgraded" This reverts commit `614065bb3b`.	3 years ago

1 2 3 4 5 ...

776 Commits (6.1.x)