spring-security

Commit Graph

Author	SHA1	Message	Date
Tran Ngoc Nhan	a53ca7c3d0	Update ServerOAuth2AuthorizedClientExchangeFilterFunction javadoc Closes gh-16555 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
Josh Cummings	cfe70a5fc7	Restore authorizedClientParametersMapper Assertion Issue gh-16726	9 months ago
Max Batischev	6c24a1e717	Improve JdbcOAuth2AuthorizedClientService saveAuthorizedClient Closes gh-16726 Signed-off-by: Max Batischev <mblancer@mail.ru>	9 months ago
Steve Riesenberg	5bb5d0f6be	Polish gh-16589	9 months ago
Hao	fc1469ad5e	Ensure ID Token is updated after refresh token Signed-off-by: Hao <kyrieeeee2@gmail.com>	9 months ago
Rob Winch	adb303e152	Add testRuntimeOnly junit-platform-launcher Closes gh-16755	9 months ago
Steve Riesenberg	0938ca01a4	Add support for automatic context-propagation with Micrometer Closes gh-16665	9 months ago
Vedran Pavic	401e237082	Introduce JwtAudienceValidator Signed-off-by: Vedran Pavic <vedran@vedranpavic.com>	10 months ago
Josh Cummings	7df85a2ed9	Polish NimbusJwtDecoder	10 months ago
Josh Cummings	ab43a660b9	Add RFC 9068 Support Closes gh-13185	10 months ago
Josh Cummings	81e2fd2fe8	Add Type Validation Closes gh-16672	10 months ago
Pat McCusker	2bd3cadde8	Use possessive pronoun rather contraction Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	10 months ago
Pat McCusker	bfce6e438d	Add fourth oauth grant type to javadoc Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	10 months ago
Josh Cummings	b6c813c5a2	ClientRegistrations supports hostnames with underscores Issue gh-15852	10 months ago
Josh Cummings	3d15be1b06	JwtDecoders Supports Hostnames with Underscores In the process of verifying gh-15852, another issue with URI was discovered. This commit adds tests to the uri-computing methods and changes them to use UriComponents instead of URI. Issue gh-15852	10 months ago
Bodo Graumann	0cd6a19b87	Avoid UriComponentsBuilder.fromUri Closes gh-15852	10 months ago
Steve Riesenberg	7fc5d50adf	Polish gh-16551	10 months ago
Max Batischev	00cd95be76	Add setRedirectStrategy to OidcClientInitiatedServerLogoutSuccessHandler Closes gh-16556 Signed-off-by: Max Batischev <mblancer@mail.ru>	10 months ago
Josh Cummings	6793334575	Polish setJwkSelector Make so that it runs only when selection is needed. Require the provided selector be non-null. Add Tests. Issue gh-16170	10 months ago
douxiaofeng99	e22bc11cc9	Support JWK Selection Strategy Closes gh-16170 Signed-off-by: douxiaofeng99 <18600127780@163.com>	10 months ago
Joe Grandja	2480d41981	Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>	10 months ago
Josh Cummings	11113adf62	Polish Nimbus JWK Source Implementation Issue gh-16251	11 months ago
Daeho Kwon	7b7abb28bb	Remove Deprecated Usages of RemoteJWKSet Closes gh-16251 Signed-off-by: Daeho Kwon <trewq231@naver.com>	11 months ago
Josh Cummings	f9824fd688	Polish Tests Issue gh-16251	11 months ago
Tran Ngoc Nhan	e5ea75f7f4	Implement Serial Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	11 months ago
Rob Winch	004f38639d	Move ClientSettings to ClientRegistration Initially it was proposed to put ClientSettings as a top level class, but to be consistent with ProviderDetails, this commit moves ClientSettings to be an inner class of ClientRegistration Issue gh-16382 # Conflicts: # oauth2/oauth2-client/src/main/java/org/springframework/security/oauth2/client/registration/ClientSettings.java	11 months ago
Rob Winch	4c533569bb	Ensure missing ClientRegistration.clientSettings JSON node works Issue gh-16382	11 months ago
Rob Winch	f9498d3885	PKCE cannot be true and AuthorizationGrantType != AUTHORIZATION_CODE PKCE is only valid for AuthorizationGrantType.AUTHORIZATION_CODE so the code should validate this. Issue gh-16382	11 months ago
Rob Winch	ab629cc1ca	Add AuthorizationGrantType.toString() This adds AuthorizationGrantType.toString() which makes debuging easier. In particular, it will help when performing unit tests which validate the AuthorizationGrantType. Issue gh-16382	11 months ago
Rob Winch	b0a4dcb89e	ClientSettings equals, hashCode, toString Issue gh-16382	11 months ago
Rob Winch	2665a92107	Ensure that ClientSettings cannot be null This ensures that ClientRegistration.Builder.ClientSettings cannot be null. This has a slight advantage in terms of null safety to making this check happen in the build method since the Builder does not have a null field either. Issue gh-16382	11 months ago
Rob Winch	0ed7b18f42	DefaultServerOAuth2AuthorizationRequestResolver requireProofKey support When requireProofKey=true, DefaultServerOAuth2AuthorizationRequestResolver enables PKCE support. Issue gh-16382	11 months ago
DingHao	8d3e0844c5	Add ClientRegistration.clientSettings.requireProofKey to Enable PKCE Closes gh-16382 Signed-off-by: DingHao <dh.hiekn@gmail.com>	11 months ago
Tran Ngoc Nhan	aced3bcf16	Encode Introspection clientId and clientSecret Closes gh-15988 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	11 months ago
Max Batischev	ed3f3d17b2	Add support customizing redirect URI Closes gh-14778	11 months ago
Josh Cummings	244fd2eb51	Support Serialization in Exceptions Issue gh-16276	11 months ago
Josh Cummings	8735368d9e	Don't Support Serialization of Jackson Modules Issu gh-16276	11 months ago
Steve Riesenberg	6bc6946ad9	Make TokenType constructor public Closes gh-16086	1 year ago
Steve Riesenberg	a7b6c63442	Polish gh-16087	1 year ago
ThomasKasene	9404aaf010	Added a constant for DPOP in OAuth2AccessToken.TokenType Issue gh-14915	1 year ago
Josh Cummings	018e1ae1a4	Added Serialization Values Issue gh-16276	1 year ago
Josh Cummings	b9911fd522	Add serialVersionUID to Authentication classes Issue gh-16276	1 year ago
Tran Ngoc Nhan	39cd8d9faf	Update copyright headers	1 year ago
Steve Riesenberg	0eb6acde96	Polish gh-16133	1 year ago
Kai Zander	73f3f75712	Always return current ClientRegistration in `loadAuthorizedClient` This changes `InMemoryOAuth2AuthorizedClientService.loadAuthorizedClient` (and its reactive counterpart) to always return `OAuth2AuthorizedClient` instances containing the current `ClientRegistration` as obtained from the `ClientRegistrationRepository`. Before this change, the first `ClientRegistration` instance was cached, with the effect that any changes made in the `ClientRegistrationRepository` (such as a new client secret) would not have taken effect. Closes gh-15511	1 year ago
Joe Grandja	a8c4d6cead	Require Locale argument for toLower/toUpperCase usage	1 year ago
Joe Grandja	a7bf8f7cc6	Require Locale argument for toLower/toUpperCase usage	1 year ago
Joe Grandja	0eaffb37e7	Require Locale argument for toLower/toUpperCase usage	1 year ago
Steve Riesenberg	ca1f891f25	Polish gh-15937	1 year ago
Davide Colazingari	aec5afb6eb	Fix assertions in NimbusReactiveJwtDecoderTests	1 year ago

... 2 3 4 5 6 ...

1486 Commits (main)