Andrey Litvitski
b0f8aa5ea0
Fix to allow multiple AuthenticationFilter instances to process each request
...
Closes gh-17173
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
8 months ago
Josh Cummings
e48f26e51e
Propagate StrictFirewallRequest Wrapper
...
Closes gh-16978
9 months ago
Max Batischev
c855453e40
Fix Typo In SubjectDnX509PrincipalExtractorTests
...
Signed-off-by: Max Batischev <mblancer@mail.ru>
9 months ago
Josh Cummings
f93a7a2f85
Deprecate HandlerMappingIntrospectorRequestTransformer
...
Closes gh-16536
10 months ago
chu3la
8cbe02e3aa
Update WebAuthn Test Objects Class Names
...
Closes gh-16604
Signed-off-by: chu3la <elmansouri.houssam@gmail.com>
10 months ago
Josh Cummings
4cdc6dab21
Fix Formatting
...
Issue gh-16604
10 months ago
Vasanth
04d7130975
Update WebAuthn Test Objects Class Names
...
Renamed the WebAuthn test object class names
Closes gh-16604
Signed-off-by: Vasanth <76898064+vasanth-79@users.noreply.github.com>
10 months ago
DingHao
857ef6fe08
WithHttpOnlyCookie defaults to false
...
Closes gh-16820
Signed-off-by: DingHao <dh.hiekn@gmail.com>
10 months ago
Max Batischev
9a897d0b62
Add Support Postgres To JdbcUserCredentialRepository
...
Closes gh-16832
Signed-off-by: Max Batischev <mblancer@mail.ru>
10 months ago
wtigerhyunsu
bdbf6a2be3
Add toString() to IpAddressMatcher.java
...
Closes gh-16795
Signed-off-by: wtigerhyunsu <jack951@naver.com>
10 months ago
Josh Cummings
99345537d6
Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter
...
Issue gh-16417
10 months ago
Josh Cummings
1eec51ab6c
Polish SwitchUserFilterTests
...
Ensure that the appropriate HTTP Method is specified in tests
Issue gh-16417
10 months ago
Josh Cummings
de07b1108f
Use PathPatternRequestMatcher in Web Components
...
This commit changes filters and resolvers that were using AntPathRequestMatcher as their
default to using PathPatternRequestMatcher.
Issue gh-16632
10 months ago
Josh Cummings
50ad378a29
Polish MockHttpServletRequest Usage
...
This commit makes so that the requestURI is set to a value that makes
sense with the other properties being mocked.
Issue gh-16632
10 months ago
Rob Winch
a6b5c05da9
Additional WebAuthn4jRelyingPartyOperationTests
...
- verify that anonymous users not saved
- verify that when user found the CredentialRecord is allowed
Issue gh-16385
10 months ago
Rob Winch
9c054474a8
Use Test Name Conventions
...
Issue gh-16385
10 months ago
Borghi
e3a715b8f5
Fix issues identified in PR review
...
Signed-off-by: Borghi <137845283+Borghii@users.noreply.github.com>
10 months ago
Josh Cummings
56e757a2a1
Provide Authentication to AuthenticationExceptions
...
Issue gh-16444
10 months ago
Josh Cummings
464e506429
Polish ExceptionTranslateWebFilter
...
- Isolated exception construction
- Isolated entry point subscription
Issue gh-16444
10 months ago
Josh Cummings
bfc12d55eb
Polish Tests
...
Issue gh-16771
10 months ago
Josh Cummings
3d96878d43
Cache RequestPath
...
In this way PathPatternRequestMatcher won't need to reparse for each
request matcher.
Issue gh-16771
10 months ago
Josh Cummings
86599afd43
Rename servletPath to basePath
...
Closes gh-16765
10 months ago
Josh Cummings
c53bf2befe
PathPatternRequestParser Retains Servlet Path
...
Issue gh-16765
10 months ago
Josh Cummings
861a9a914e
OneTimeToken Missing Token Propagates Request
...
Closes gh-16780
10 months ago
Daeho Kwon
24b7287d55
Replace dynamic error message with static "Access Denied"
...
Closes gh-16514
Signed-off-by: Daeho Kwon <trewq231@naver.com>
10 months ago
Steve Riesenberg
0938ca01a4
Add support for automatic context-propagation with Micrometer
...
Closes gh-16665
11 months ago
Max Batischev
c7673e8f2f
Polish AbstractAuthenticationTargetUrlRequestHandler
...
PR gh-16557
Signed-off-by: Max Batischev <mblancer@mail.ru>
11 months ago
Max Batischev
47630ca354
Fix JdbcUserCredentialRepository Save
...
Closes gh-16620
Signed-off-by: Max Batischev <mblancer@mail.ru>
11 months ago
Max Batischev
58a665e5aa
Add Support SingleResultAuthorizationManager
...
Closes gh-16590
Signed-off-by: Max Batischev <mblancer@mail.ru>
11 months ago
Josh Cummings
2d96fba5cf
Add HttpsRedirectFilter
...
Closes gh-16678
11 months ago
Josh Cummings
e569c7a39e
Fix Tests
...
Issue gh-16517
11 months ago
topiam
85f0f3f34a
Support Custom RequestMatchers for WebAuthn
...
Closes gh-16517
Signed-off-by: topiam <support@topiam.cn>
11 months ago
Rob Winch
9417f02790
Deprecate PortResolver
...
Closes gh-15972
11 months ago
Josh Cummings
588220a020
Add PathPatterRequestMatcher
...
Closes gh-16429
Clsoes gh-16430
11 months ago
Steve Riesenberg
7fc5d50adf
Polish gh-16551
11 months ago
Max Batischev
0ccbd20f0a
Add Support ServerFormPostRedirectStrategy
...
Closes gh-16542
Signed-off-by: Max Batischev <mblancer@mail.ru>
11 months ago
Borghi
0bc9313fdd
Fix bug PublicKeyCredentialUserEntityRepository saves anonymousUser
...
Issue gh-16385
Signed-off-by: Borghi <137845283+Borghii@users.noreply.github.com>
12 months ago
tejas-teju
c4b223266c
Return Invalid Credentials message on login error
...
Closes gh-16484
Signed-off-by: tejas-teju <tejas8196@gmail.com>
12 months ago
Max Batischev
b5a4218a0b
Make WebAuthnAuthenticationRequestToken Serializable
...
Closes gh-16481
Signed-off-by: Max Batischev <mblancer@mail.ru>
12 months ago
Daniel Garnier-Moiroux
5ee6b83953
Introduce OneTimeTokenAuthenticationFilter
...
closes gh-16539
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
12 months ago
Max Batischev
be81377235
Add Support ServerGenerateOneTimeTokenRequestResolver
...
Closes gh-16488
Signed-off-by: Max Batischev <mblancer@mail.ru>
12 months ago
Steve Riesenberg
54a6a19e05
Polish gh-16214
...
This commit applies the following changes:
* Added local Content-Security-Policy with script-src nonce directive
* Removed form-redirect.js and associated changes
* Renamed to FormPostRedirectStrategy
* Removed HtmlUtils usage
* Moved to same package as DefaultRedirectStrategy
12 months ago
Craig Andrews
58534e7f60
Add FormRedirectStrategy to enable POST OIDC Logout
...
FormRedirectStrategy redirects using an autosubmitting HTML form using the POST method versus DefaultRedirectStrategy which redirects using the GET method.
Can be used to implement POST binding for relying party initiated OIDC logout by setting FormRedirectStrategy as the redirection strategy on OidcClientInitiatedLogoutSuccessHandler.
Closes gh-13002
Signed-off-by: Craig Andrews <candrews@integralblue.com>
12 months ago
Steve Riesenberg
b32f4f1afc
Polish gh-16502
12 months ago
earlgrey02
1fa1848f9f
Add HttpStatusAccessDeniedHandler
...
Signed-off-by: earlgrey02 <san06036@naver.com>
12 months ago
Max Batischev
474b5e151a
Add Support GenerateOneTimeTokenRequestResolver
...
Closes gh-16291
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
Rob Winch
3209930cca
Add TestBytes
...
Closes gh-16461
1 year ago
Max Batischev
80e8e14500
Add GenerateOneTimeTokenFilterTests
1 year ago
Josh Cummings
443af32314
Move Servlet Mocks to Web
...
Issue gh-13551
1 year ago
Max Batischev
fd267dfb71
Add Support JdbcPublicKeyCredentialUserEntityRepository
...
Closes gh-16224
1 year ago