spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	006b9b9607	master->main Closes gh-9683	5 years ago
kevin	32ac31c101	Release ByteBuf Closes gh-9661	5 years ago
Josh Cummings	cb6e4f4a11	Add NPE Guards - Like values, names are only validated if they are not null Closes gh-9598	5 years ago
Josh Cummings	b0011893d2	Update Copyright Issue gh-9651	5 years ago
Tibor Koch	5da472f3be	Fix ClassCastException Closes gh-9651	5 years ago
Joe Grandja	53e94bca45	Add oauth2Login() tests Issue gh-9548 gh-9660 gh-9266	5 years ago
Joe Grandja	5afeaa3ce7	WebFlux httpBasic() matches on XHR requests Closes gh-9660	5 years ago
Craig Andrews	7dc4de05b1	Add guard around logger.debug statement The log message involves string concatenation, the cost of which should only be incurred if debug logging is enabled	5 years ago
Rob Winch	a31a855146	Fix HttpSecurity.addFilter* Ordering Closes gh-9633	5 years ago
Denis Washington	2b4b856b32	Limit oauth2Login() links to redirect-based flows This prevents the generated login page from showing links for authorization grant types like "client_credentials" which are not redirect-based, and thus not meant for interactive use in the browser. Closes gh-9457	5 years ago
Rob Winch	a325216f19	Add RELEASE.adoc Closes gh-9627	5 years ago
Rob Winch	82e47e8ae0	Next Development Version	5 years ago
Rob Winch	c562b7d439	Release 5.5.0-RC1	5 years ago
Josh Cummings	501d5ff497	Removed Method Security AuthorizationManager from What's New Issue gh-9596	5 years ago
Josh Cummings	163b5943ca	Revert AuthorizationManager Method Security	5 years ago
Josh Cummings	b352c8f1da	Removed SAML SLO from What's New Issue gh-9596	5 years ago
Josh Cummings	8c92eddbe5	Revert "Add Registration to Saml2Authentication" This reverts commit `efe42b93ce`.	5 years ago
Josh Cummings	55047fd996	Revert "Add RelyingPartyRegistrationResolver" This reverts commit `2f734a0975`.	5 years ago
Josh Cummings	37b40476e7	Revert "Add Single Logout Support" This reverts commit `e807fae869`.	5 years ago
Josh Cummings	404a6c5674	Revert "Publish CsrfTokenRepository as shared object" This reverts commit `d19ff12813`.	5 years ago
Josh Cummings	4e81bbe386	Revert "Add Saml2LogoutConfigurer" This reverts commit `6f52baba29`.	5 years ago
Rob Winch	44763345d3	Update htmlunit-driver to 2.49.1 Closes gh-9624	5 years ago
Rob Winch	57d77c0cfb	Update htmlunit to 2.49.1 Closes gh-9623	5 years ago
Rob Winch	8a13278c6d	Update io.spring.nohttp to 0.0.6.RELEASE Closes gh-9622	5 years ago
Rob Winch	f30ee19ccc	Update io.projectreactor to 2020.0.6 Closes gh-9620	5 years ago
Rob Winch	ac288b8dc9	Update com.nimbusds to 9.3.3 Closes gh-9619	5 years ago
Rob Winch	7c4abdb4db	Update jackson-bom to 2.12.3 Closes gh-9616	5 years ago
Josh Cummings	7da6077727	Update to commons-codec:1.15 Closes gh-9575	5 years ago
Josh Cummings	9b07b6a991	Added Sections to What's New Closes gh-9596	5 years ago
Josh Cummings	6f52baba29	Add Saml2LogoutConfigurer Closes gh-9497	5 years ago
Josh Cummings	d19ff12813	Publish CsrfTokenRepository as shared object Closes gh-9595	5 years ago
Josh Cummings	e807fae869	Add Single Logout Support Closes gh-8731	5 years ago
Josh Cummings	2f734a0975	Add RelyingPartyRegistrationResolver Closes gh-9486	5 years ago
Josh Cummings	efe42b93ce	Add Registration to Saml2Authentication Closes gh-9487	5 years ago
Josh Cummings	88c1475a3b	Polish OpenSAML 4 support Issue gh-9095	5 years ago
Josh Cummings	4f7d529c5d	Polish Csrf Tests Issue gh-9561	5 years ago
佚名	87ed527023	Add null check in CsrfFilter and CsrfWebFilter Solve the problem that CsrfFilter and CsrfWebFilter throws NPE exception when comparing two byte array is equal in low JDK version. When JDK version is lower than 1.8.0_45, method java.security.MessageDigest#isEqual does not verify whether the two arrays are null. And the above two class call this method without null judgment. ZiQiang Zhao<1694392889@qq.com>	5 years ago
Josh Cummings	df8abcfae7	Use Interceptors instead of Advice - Interceptor is a more descriptive term for what method security is doing - This also allows the code to follow a delegate pattern that unifies both before-method and after- method authorization Issue gh-9289	5 years ago
Josh Cummings	122346bd27	Document AuthorizationManager for Method Security Issue gh-9289	5 years ago
Josh Cummings	6bcf479659	Polish Javadoc Issue gh-9289	5 years ago
Josh Cummings	6828987b4b	Add AfterMethodAuthorizationManager - Removes the need to keep MethodAuthorizationContext#returnObject in sync with other method parameters - Restores MethodAuthorizationContext's immutability Closes gh-9591	5 years ago
Josh Cummings	2b494ebc5f	Polish AOP Structure - Changed from MethodMatcher to Pointcut since authorization annotations also can be attached to classes - Adjusted advice to extend Before or AfterAdvice - Adjusted advice to extend PointcutAdvisor so that it can share its Pointcut - Adjusted advice to extend AopInfrastructureBean to align with old advice classes Issue gh-9289	5 years ago
Josh Cummings	62d77ec97e	Add GrantedAuthorityDefaults to Expression Handler Issue gh-9289	5 years ago
Josh Cummings	68cf74468c	Add check for custom advice - Because publishing an advice bean replaces Spring Security defaults, the code should error if both a custom bean and either secureEnabled or prePostEnabled are specified Issue gh-9289	5 years ago
Josh Cummings	45376b359b	Adjust Packaging Issue gh-9289	5 years ago
Evgeniy Cheban	20778f727b	Consider AuthorizationManager for Method Security Closes gh-9289	5 years ago
Josh Cummings	a8a7ab4ffa	Restore spring-security-web Dependency Issue gh-9095	5 years ago
Josh Cummings	7ded671858	Refactor AuthenticationDetailsSource support - BearerTokenAuthenticationFilter exposes this directly, simplifying configuration and removing a package tangle Closes gh-9576	5 years ago
Eleftheria Stein	21f9876d87	Add WebFlux section to What's New Closes gh-9590	5 years ago
Eleftheria Stein	e03fe7f089	Add coroutine support to pre/post authorize Closes gh-8143	5 years ago

1 2 3 4 5 ...

9340 Commits (006b9b960797d279b31cf8c8d16f1549c5632b2c) All Branches Search

9340 Commits (006b9b960797d279b31cf8c8d16f1549c5632b2c)

All Branches