Rob Winch
fcf967687b
Add FilterSecurityInterceptor once per request test
...
Issue: gh-4997
8 years ago
json20080301
40a1281c66
FilterSecurityInterceptor once per request set attr
...
Only set the attribute if once per request is true
8 years ago
Rob Winch
ce5fb51b20
Remove Mono.defer in ReactorContextWebFilter
...
Fixes: gh-5010
8 years ago
Rob Winch
66298dcf5d
Clean ReactorContextWebFilterTests imports
...
Issue: gh-4962
8 years ago
Rob Winch
141e3f581f
ReactorContextWebFilter preserves main Context
...
Previously ReactorContextWebFilter overrode
the main Context.
Fixes: gh-4962
8 years ago
Rob Winch
c399987450
Polish StrictHttpFirewall Javadoc
...
Fixes: gh-5008
8 years ago
Rob Winch
ea3dd336aa
Cache headers only if no cache headers set
...
Fixes: gh-5004
8 years ago
Rob Winch
8b7f772761
Update to Jackson 2.9.4
...
Fixes: gh-4985
8 years ago
Rob Winch
0eef5b4b42
Add StrictHttpFirewall
8 years ago
Rob Winch
6a0833165a
AuthorizationWebFilter handles null Authentication
...
If the AuthorizationManager used the Authentication and the Authentication
was null the AuthorizationWebFilter would produce a NullPointerException
This commit fixes the test to ensure that Authentication is subscribed to
and ensures that the Authentication is not null
Fixes: gh-4966
8 years ago
Johnny Lim
921157cdcd
Remove explicit super() calls
8 years ago
Johnny Lim
57353d18e5
Use diamond type
8 years ago
Eddú Meléndez
c16456623f
Remove unused imports
8 years ago
Rob Winch
70be0f3619
Mono<CsrfToken> saveToken->Mono<Void>
...
Issue: gh-4856
8 years ago
Rob Winch
d55db837e1
CsrfWebFilter places Mono<CsrfToken>
...
Fixes: gh-4855
8 years ago
Johnny Lim
701933c7f7
Fix copyright start years
...
See gh-4655
See gh-4725
8 years ago
Johnny Lim
5f518d00e5
Apply Checkstyle EmptyStatementCheck module
...
This commit adds Checkstyle `EmptyStatementCheck` module and aligns code with it.
8 years ago
Rob Winch
be397b8b33
WebSessionServerSecurityContextRepository Polish
...
- map(WebSession::getAttributes)
- use Mono.justOrEmpty
Issue: gh-4843
8 years ago
Rob Winch
8d30d6110b
WebSessionSecurityContextRepository custom session attribute name
...
Fixes: gh-4843
8 years ago
Rob Winch
b7529be3d0
WebSessionSecurityContextRepository changes session id
...
Fixes: gh-4842
8 years ago
Rob Winch
b19e14330f
WebSessionServerCsrfTokenRepository session fixation protection
...
Issue: gh-4842
8 years ago
Rob Winch
75a7c5268a
ServerRequestCache.removeMatchingRequest
...
Issue: gh-4789
8 years ago
Benedikt Ritter
fffd781b03
Add localization to error messages from ExceptionTranslationFilter
...
Fixes gh-4504
8 years ago
Johnny Lim
b6895e6359
Apply Checkstyle WhitespaceAfterCheck module
8 years ago
Rob Winch
64ad08e96d
ServerRedirectCache.getRequest->getRedirectUri
...
Issue: gh-4789
8 years ago
Rob Winch
1d9b0760d5
ServerRequestCache uses URI
...
Issue: gh-4789
8 years ago
Rob Winch
942b51dba7
Reactive Basic does not create session by default
...
Fixes: gh-4825
8 years ago
Rob Winch
5f79fdd3eb
requiresLogoutMatcher naming polish
...
Issue: gh-4822
8 years ago
Rob Winch
c1f94156f9
serverWebExchange->exchange
...
Issue: gh-4822
8 years ago
Rob Winch
11f6e0477c
serverLogoutSuccessHandler->logoutSuccessHandler
...
Issue: gh-4822
8 years ago
Rob Winch
bf570854b8
serverLogoutHandler->logoutHandler
...
Issue: gh-4822
8 years ago
Rob Winch
1c977ca15f
serverRedirectStrategy->redirectStrategy
...
Issue: gh-4822
8 years ago
Rob Winch
2cbdb4ba02
serverCsrfTokenRepository->csrfTokenRepository
...
Issue: gh-4822
8 years ago
Rob Winch
3bfda6cff7
serverAccessDeniedHandler->accessDeniedHandler
...
Issue: gh-4822
8 years ago
Rob Winch
9e82fc0b83
serverAuthenticationEntryPoint->authenticationEntryPoint
...
Issue: gh-4822
8 years ago
Rob Winch
9cf0dc6b38
serverWebExchange->webExchange
...
Issue: gh-4822
8 years ago
Rob Winch
520e0a5a68
serverAuthenticationSuccessHandler->authenticationSuccessHandler
...
Issue: gh-4822
8 years ago
Rob Winch
5c83f92ddc
serverAuthenticationFailureHandler->authenticationFailureHandler
...
Issue: gh-4822
8 years ago
Rob Winch
692233e431
ServerSecurityContextRepository members to securityContextRepository
...
Issue: gh-4822
8 years ago
Johnny Lim
d900f2a623
Remove unused imports
...
This commit also adds UnusedImportsCheck Checkstyle module.
8 years ago
Rob Winch
1b70efce2b
Add ServerRequestCache
...
Fixes: gh-4789
8 years ago
Rob Winch
8f6491b281
Add RedirectServerAuthenticationFailureHandler
...
Fixes gh-4816
8 years ago
Rob Winch
060d8689fe
Make RedirectServer*Tests less specific
...
Issue: gh-4816
8 years ago
Johnny Lim
99df632f24
Add missing @Override annotations
...
This commit also adds MissingOverrideCheck module to Checkstyle configuration.
8 years ago
Rob Winch
676020321e
Add reactive CsrfRequestDataValueProcessor
...
Fixes gh-4762
8 years ago
Rob Winch
7622826b69
WebSessionServerCsrfTokenRepository saves on getToken
...
Fixes gh-4801
8 years ago
Rob Winch
776364d403
ServerCsrfTokenRepository.saveToken return Mono<CsrfToken>
...
Fixes gh-4800
8 years ago
Rob Winch
3f18881493
Remove additional attribute name from CsrfWebFilter
...
Fixes gh-4799
8 years ago
Frank Pavageau
35706ad60a
Deserialize the principal in a neutral way
...
When the principal of the Authentication is an object, it is not necessarily
an User: it could be another implementation of UserDetails, or even a
completely unrelated type. Since the type of the object is serialized as a
property and used by the deserialization anyway, there's no point in
enforcing a stricter type.
8 years ago
Frank Pavageau
6fd9ff254b
Map values directly from the JSON nodes
...
Not only is it more efficient without converting to an intermediate String,
using JsonNode.toString() may not even produce valid JSON according to its
Javadoc (ObjectMapper.writeValueAsString() should be used).
8 years ago