spring-security

Commit Graph

Author	SHA1	Message	Date
Joe Grandja	baad23caab	Enable null-safety in spring-security-oauth2-client Closes gh-17819	5 days ago
Robert Winch	ea2f2302da	Add MultiFactorCondition.WEBAUTHN_REGISTERED Closes gh-18923	6 days ago
Robert Winch	bd7171140e	Support Customizer<AdditionalRequiredFactorsBuilder<Object>>> Closes gh-18922	6 days ago
Robert Winch	c71b178f63	Remove Unnecessary ObjectProvider<RoleHierarchy> roleHierarchy parameter Closes gh-18921	6 days ago
Joe Grandja	22a98583f1	Enable null-safety in spring-security-oauth2-jose Closes gh-17821	1 week ago
Josh Cummings	5687867a09	Fix Checkstyle Issue gh-18874 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 weeks ago
Joe Grandja	36450d6c26	Fix checkstyle error Issue gh-18874	2 weeks ago
Josh Cummings	a980368f26	Move Integration Test from Spring LDAP Closes gh-18874 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 weeks ago
Joe Grandja	1906075b0c	OAuth2DeviceVerificationEndpointFilter is applied after AuthorizationFilter Closes gh-18873	2 weeks ago
Andrey Litvitski	d1ce69ca99	Specify charset in WWW-Authenticate for Basic Auth In this commit, we add support for the charset from RFC-7617, which definitely solves the problem when the client does not know what charset we are parsing with. Closes: gh-18755 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	2 weeks ago
Joe Grandja	c7235ec0a3	Allow custom token settings for OAuth 2.0 dynamic client registration Closes gh-18870	2 weeks ago
Ronny Perinke	e8e0da1ec6	Add Null Guard for Setting ReactiveUserDetailsPasswordService This use case specifically arises when using `ReactiveUserDetailsService` without `ReactiveUserDetailsPasswordService`. Closes gh-17986 Signed-off-by: Ronny Perinke <23166289+sephiroth-j@users.noreply.github.com>	2 weeks ago
wonderfulrosemari	07297e7a80	Add MessageExpressionAuthorizationManager Closes gh-12650 Signed-off-by: wonderfulrosemari <whwlsgur1419@naver.com>	3 weeks ago
023-dev	b9f974b18f	Remove compiler warnings for spring-security-config Signed-off-by: 023-dev <0_2_3@naver.com>	3 weeks ago
Menashe Eliezer	ee97c83042	Update request-matcher schema and XML tests to use path Closes gh-18641 Signed-off-by: Menashe Eliezer <menashe.eliezer@gmail.com>	4 weeks ago
Robert Winch	701736da5d	Fix checkstyle Issue gh-18354 Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com>	4 weeks ago
Mohammad Amin Pahlevani	9e5a425859	Make PublicKeyCredentialCreationOptions Serializable Closes gh-16431 Signed-off-by: Mohammad Amin Pahlevani <pahlevani@live.com>	4 weeks ago
Robert Winch	53300be8d7	Fix checkstyle Issue gh-18530	4 weeks ago
CHANHAN	d5ba9dcada	Add tests for intercept-url access attribute validation Fixes gh-18503 Signed-off-by: CHANHAN <130114269+chanani@users.noreply.github.com>	4 weeks ago
CHANHAN	fa87c78edb	fix missing access attribute validation in FilterInvocationSecurityMetadataSourceParser Fixes gh-18503 Signed-off-by: CHANHAN <130114269+chanani@users.noreply.github.com>	4 weeks ago
CHANHAN	f1e367f93d	fix missing access attribute validation in AuthorizationFilterParser Fixes gh-18503 Signed-off-by: CHANHAN <130114269+chanani@users.noreply.github.com>	4 weeks ago
Robert Winch	f8ac095d48	Add nullability contract to `PasswordEncoder#encode` implementations Signed-off-by: Stefano Cordio <stefano.cordio@gmail.com>AbstractValidatingPasswordEncoder.java	1 month ago
Minu Kim	18068c9099	fix compile warning in spring-security-test Signed-off-by: Minu Kim <kmw106933@naver.com>	1 month ago
DingHao	199473fcb3	Ability to configure authenticationDetailsSource in AnonymousConfigurer Closes gh-17831 Signed-off-by: DingHao <dh.hiekn@gmail.com>	2 months ago
Joe Grandja	d3c42a7a4f	Polish OAuth2ConfigurerUtils	2 months ago
Joe Grandja	e61c03f7c3	Fix to allow multiple PasswordEncoder beans Closes gh-18645	2 months ago
Josh Cummings	70fc8fef3a	Add Sample SAML Response in Test Issue gh-17823 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 months ago
Josh Cummings	c5632ccd83	Add security-nullability to ldap Closes gh-17818 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	2 months ago
Michael Lück	7513c859bd	Fix javadoc warnings and apply plugin javadoc-warnings-error Closes to gh-18448 Signed-off-by: Michael Lück <michael@lueckonline.net>	2 months ago
Robert Winch	d7fbf3673a	Fix consistency with Nullability Usage Issue gh-18564	2 months ago
dev.paramjot	af73f85f66	Fix formatting in HttpSecurity.java documentation Signed-off-by: dev.paramjot <50148441+ParamjotSingh5@users.noreply.github.com>	2 months ago
Robert Winch	048b6bdd88	Update to JDK 25 (release = 17) This commit updates the build to use JDK 25 while remaining compatable with JDK 17. Note that we must update our JAAS related tests to use release=25 due to the disabling of the Security Manager. See https://docs.oracle.com/en/java/javase/25/security/security-manager-is-permanently-disabled.html Closes gh-18512	2 months ago
Robert Winch	63c99b9438	Revert "Update to 7.1.0-SNAPSHOT" This reverts commit `b77ea8d3a3`.	2 months ago
Pavel Vassiliev	641d8a362b	Fix Gradle 9.0 deprecations This commit addresses several build warnings and errors to prepare for Gradle 9.0 and resolve static analysis issues. Closes: gh-18472 Signed-off-by: Pavel Vassiliev <paulvas@gmail.com> Signed-off-by: Pavel Vassiliev <paulvas@gmail.com>	2 months ago
Robert Winch	b77ea8d3a3	Update to 7.1.0-SNAPSHOT	2 months ago
Robert Winch	3833650d33	Update to 7.1.0-SNAPSHOT	2 months ago
Tran Ngoc Nhan	d20c88ecef	Format code Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Tran Ngoc Nhan	79815e044e	Fix typos Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	2 months ago
Josh Cummings	0155d4a345	Restore Check for DispatcherServlet on Classpath Closes gh-18315	3 months ago
dependabot[bot]	e033086ab0	Bump org.springframework:spring-framework-bom from 7.0.1 to 7.0.2 Includes fixes for Breaking Changes in Spring Framework 7.0.2: - spring-projects/spring-framework#35916 - spring-projects/spring-framework#35947 Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.1...v7.0.2) --- updated-dependencies: - dependency-name: org.springframework:spring-framework-bom dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
Josh Cummings	dbf93acb05	Check for spring-security-web on Classpath This commit refines the check for adding AuthorizationWebProxyConfiguration to the application context. The web-based authorization proxy support is intended for applying Spring Security Method Security primitives to Spring Web components; as such, this implies a dependency on Spring Security Web. Closes gh-18307	3 months ago
Joe Grandja	c53e66a217	OAuth2AuthorizationEndpointFilter is applied after AuthorizationFilter Closes gh-18251	4 months ago
Daniel Garnier-Moiroux	7cb57ab940	Improve webauthn webdriver tests Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	4 months ago
Daniel Garnier-Moiroux	fed6df5167	Default WebAuthnConfigurer#rpName to rpId In WebAuthn L3 spec, PublicKeyCredentialEntity.name is deprecated: > This member is deprecated because many clients do not display it, > but it remains a required dictionary member for backwards compatibility. > Relying Parties MAY, as a safe default, set this equal to the RP ID. Source: https://www.w3.org/TR/webauthn-3/#dictdef-publickeycredentialentity Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	5 months ago
Rob Winch	0928a60cd2	Post Process WebAuthnAuthenticationFilter This commit ensures that WebAuthnAuthenticationFilter is post processed by BeanPostProcessors and ObjectPostProcessor. Closes gh-18128	5 months ago
Rob Winch	884cf0d62e	EnableGlobalMultiFactorAuthentication->EnableMultiFactorAuthentication Closes gh-18127	5 months ago
Rob Winch	aaf738f7ac	MFA is now Opt In This commit ensures that MFA is only performed when users opt in. By doing so, we allow users to decide if they will opt into the semantics of merging two Authentication instances. Closes gh-18126	5 months ago
Simon Von	0927bed66a	📔 Documentation 1. Correct the org.springframework.security.config.annotation.web.LogoutDsl's property description Signed-off-by: Simon Von <g1672943850@gmail.com>	5 months ago
Josh Cummings	9c7b34a48b	Favor Relative Redirects by Default Closes gh-16300	5 months ago
Joe Grandja	fc8b6b5863	Return PAR endpoint metadata only when enabled Issue https://github.com/spring-projects/spring-authorization-server/issues/2219	5 months ago

1 2 3 4 5 ...

3272 Commits (main)