2405a5b680
Remove CssUtils
1 year ago
c1b9035544
Use static CSS in OneTimeToken default UI
1 year ago
e958ff2d4a
Use static CSS in reactive default UI
1 year ago
45d53973ab
Serve static content (css, js) for reactive default UIs from DefaultResourcesWebFilter
1 year ago
11616a1d78
Use static CSS in servlet default UI
1 year ago
c5c5cd5ed0
Serve static content (css, js) for default UIs from DefaultResourcesFilter
1 year ago
2ff29dc229
Throw AuthorizationDeniedException when AuthorizationResult is available
...
Closes gh-15706
1 year ago
4660e042d9
Remove unused <script> and <noscript> tags in One-Time-Token submit page
1 year ago
528d739a60
Use contextPath in One-Time-Token default submit UI
1 year ago
ef31ae1a98
Render One Time Token UIs using lightweight templates
1 year ago
a642a1bb66
Render reactive default UIs using lightweight templates
1 year ago
8d47906191
Render default UIs using lightweight templates
1 year ago
33495441b5
Hardcode ott-username input name in DefaultLoginPageGeneratingFilter
...
- GenerateOneTimeTokenFilter uses `"username"`, the default UI should use the same parameter name
1 year ago
00e4a8fb54
Add support for One-Time Token Login
...
Closes gh-15114
1 year ago
5c56bddbdd
Polish log message
1 year ago
008cbc2cae
Add cookie customizer to CookieRequestCache and CookieServerRequestCache
...
Issue gh-15204
1 year ago
626610a975
Polish Annotation API
...
Rename to a class that isn't focused on the synthesis implementation detail.
Also add Security to the front of the name to clarify that it is only intended
for security annotations, reminiscent of SecurityMetadataSource.
Refine method signatures to better articulate supported use cases.
Issue gh-15286
1 year ago
095929f6e8
Include FilterChain in SessionInformationExpiredEvent
...
Closes gh-14077
1 year ago
ed16c86115
Improve @CurrentSecurityContext meta-annotations
...
Closes gh-15551
1 year ago
08b8b09066
Update Copyright
...
Issue gh-15286
2 years ago
2c02d8aec7
Update Copyright
2 years ago
9aaf959400
Improve @AuthenticationPrincipal meta-annotations
...
Closes gh-15286
2 years ago
bc8ba7f3b7
Inline CSS for default login and logout page
...
- Remove the dependency on Bootstrap CSS. Results in faster load times, no failures
in air-gapped or offline scenarios, and no dependency on an external CDN that may
go away some day.
2 years ago
4169c0cf36
Publish Constants for Firewall Header and Parameter Predicates
...
Introduced public static final Predicates for allowed header names,
header values, parameter names, and parameter values for building
expressions.
Closes gh-13639
2 years ago
773e86701e
Add ParameterRequestMatcher
...
Closes gh-15342
2 years ago
8917cdb404
Improve Performance of IPv4 Check
...
Closes gh-15324
2 years ago
44f9396bad
Add support remember-me cookie customization
...
Closes gh-14990
2 years ago
dcb8c563e8
Fix ArrayIndexOutOfBoundsException
...
Issue gh-13310
Closes gh-15184
2 years ago
7288fecc24
Verify ipAddress Not A Hostname
...
Closes gh-15172
2 years ago
6956ed693c
Polish DefaultSecurityFilterChain Logs
...
Reuse String manipulation logic in Spring Framework
Compress whitespace
Closes gh-15096
2 years ago
ac9bdf5cbf
Change DefaultSecurityFilterChain logging to DEBUG level and simplify filter log
...
- Change DefaultSecurityFilterChain logging level from INFO to DEBUG to align with FilterChainProxy.
- Log filter class names instead of the toString() of filter.
2 years ago
c7b739eb3f
Fix broken link to jaspan article
...
Closes gh-14358
2 years ago
927840fe88
Do Not Invalidate Current Session When It Is Registered
...
Closes gh-15066
2 years ago
08f11f06ab
Revert unnecessary commits from main
...
Issue gh-15016
2 years ago
b3c7f3ff19
Rename CompromisedPasswordCheckResult to CompromisedPasswordDecision
...
Issue gh-7395
2 years ago
470e2c5c97
Address Build Issues
...
Issue gh-14837
2 years ago
657760af5b
Improve Logging
...
Closes gh-14837
2 years ago
61eba00654
Move HaveIBeenPwnedRestApiPasswordChecker to spring-security-web
...
Prior to this commit, the implementation was placed in spring-security-core, however we do not want to introduce a dependency on spring-web and spring-webflux for that module.
Issue gh-7395
2 years ago
f689f3c3fc
Fix continueOnError default value in java doc
...
Closes gh-14870
2 years ago
7faae83ebb
docs: fix typo
2 years ago
ce9f1821b1
Improve logging in AuthenticationWebFilter
...
Closes #14091
2 years ago
091976fffb
Improve logging in AuthenticationWebFilter
...
Closes #14091
2 years ago
c0928bf198
Add DelegatingAuthenticationConverter
...
Closes gh-14644
2 years ago
8885707674
Add DelegatingServerAuthenticationConverter
...
Closes gh-14644
2 years ago
bd345fb2a8
Polish gh-11758
2 years ago
5c5503924b
Add SwitchUserGrantedAuthorityMixIn
...
Closes gh-11775
2 years ago
f8ff056eb6
Update Max Sessions on WebFlux
...
Delete WebSessionStoreReactiveSessionRegistry.java and gives the responsibility to remove the sessions from the WebSessionStore to the handler
Issue gh-6192
2 years ago
a5ce8ae87f
Polish Max Sessions on WebFlux
...
This commit changes the PreventLoginServerMaximumSessionsExceededHandler to invalidate the WebSession in addition to throwing the error, this is needed otherwise the session would still be saved with the security context. It also changes the SessionRegistryWebSession to first perform the operation on the delegate and then invoke the needed method on the ReactiveSessionRegistry
Issue gh-6192
2 years ago
5f80468de3
Updated copyright date
2 years ago
2f762fefe1
Allow tab in HTTP header values.
...
Closes gh-14573
2 years ago
Daniel Garnier-Moiroux
Marcus Hert Da Coregio
Florian Bernard
Josh Cummings
Ilpyo-Yang
DingHao
baezzys
Max Batischev
Steve Riesenberg
Joaquin Santana
erie0210
Thomas Hagelberg
Markus Heiden
Christian Becker