750cb30ce4
Add AuthenticationTrustResolver.isAuthenticated
2 years ago
75fdcd10f7
Use synchronized
...
Closes gh-14445
2 years ago
915d68e216
Remove includeExpiredSessions parameter
...
The reactive implementation of max sessions does not keep track of expired sessions, therefore we do not need such parameter
Issue gh-6192
2 years ago
c1adeef0da
Add validation IpAddressMatcher
...
Closes gh-13621
2 years ago
6e1bcfed11
Add argument resolver for SecurityContext
...
Closes gh-13425
2 years ago
a808c139ad
Enhance IpAddressMatcher performance
...
Closes gh-14493
Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>
2 years ago
6df9ef5ba6
Fix wrong class name in JavaDoc
...
In the `ServerWebExchangeDelegatingReactiveAuthenticationManagerResolver.Builder` class the JavaDoc comments mention the wrong class name. This commit fixes this.
2 years ago
ce5f5e6e33
Add native hint for CsrfTokenRequestAttributeHandler$SupplierCsrfToken
...
Closes gh-14397
2 years ago
eaaa813ede
Fix header value typo
...
Closes gh-11948
2 years ago
8a34e32a24
Polish IpAddressAuthorizationManager
...
Closes gh-10577
2 years ago
ea7c720ce7
Add hasIpAddress to Kotlin DSL
...
Closes gh-10577
2 years ago
70dfb3d391
Add HandlerMappingIntrospector Caching
...
Closes gh-14128
2 years ago
57ab15127a
Add Max Sessions on WebFlux
...
Closes gh-6192
2 years ago
18530c8dcd
Add PhasedObservation
...
Observation itself does not protect against start and stop being called
multiple times. This commit aligns all observation instances to instead
use an implementation that does have these guards in place.
Closes gh-14082
2 years ago
921afba134
Use addCookie instead of addHeader in CookieCsrfTokenRepository
...
By using addCookie we make sure that configured Tomcat's CookieProcessors are invoked
Closes gh-14131
2 years ago
52675c80b3
Check For Null Exception Message
...
Closes gh-13768
2 years ago
d0a5ada2da
Fix formatting
2 years ago
9db33f33c7
Revert unnecessary merges on 6.0.x
...
This commit removes unnecessary main-branch merges starting from
8750608b5b5dce82c48b
2 years ago
318dec845a
Update obsolete comment reference (former name of the class)
2 years ago
ed6ff670d1
Add Test
...
Issue gh-13660
2 years ago
4d6ff49b9d
Removed dash from micrometer metric label
...
Closes gh-13660
2 years ago
5dce82c48b
Close Both Observations
...
Depending on when a request is cancelled, the before and after observation
starts and stops may be called out of order due to the order in
which their doOnCancel handlers are invoked.
To address this, the before filter-wrapper now always closes both the
before observation and the after observation. Since the before filter-
wrapper wraps the entire request, this ensures that either that was
started is stopped, and either that has not been started yet cannot
inadvertently be started by any unexpected ordering of events that
follows.
Closes gh-14031
2 years ago
d9399dfda0
Allow redirect status code to be customized
...
Closes gh-12797
2 years ago
2638555e53
Allow redirect strategy to be customized
...
Closes gh-12795
2 years ago
7e9d707c7d
Allow customize the AuthenticationConverter in BasicAuthenticationFilter
...
Closes gh-13988
2 years ago
d8eadd2207
Replace deprecated method
...
Replace HttpMethod.resolve() to HttpMethod.valueOf()
2 years ago
64e2a2ff8b
Apply updated Code Style
...
Closes gh-13881
2 years ago
ff374935fb
Verify ReactorContext when using Virtual Threads
...
Closes gh-12791
2 years ago
ecf8467cac
Fix tests on JDK 21
...
Issue gh-12790
Issue gh-13811
2 years ago
d48b8697bd
Fix mockito usage
...
Issue gh-13810
2 years ago
d6ff58bb7f
Update Mockito to 5.5.0
...
Closes gh-13810
2 years ago
18e88366d2
Resolve The matchingRequestParameterName From The Query String
...
Prior to this commit, the ServletRequest#getParameter method was used in order to verify if the matchingRequestParameterName was present in the request. That method has some side effects like interfering in the execution of the ServletRequest#getInputStream and ServletRequest#getReader method when the request is an HTTP POST (if those methods are invoked after getParameter, or vice-versa, the content won't be available). This commit makes that we only use the query string to check for the parameter, avoiding draining the request's input stream.
Closes gh-13731
2 years ago
2a1cf98b80
Update Copyright and Formatting
...
Issue gh-13615
2 years ago
5e715c5297
Improve StrictHttpFirewall Error Messaging
...
Better error strings for invalid header and parameter values.
Closes gh-13615
2 years ago
9df9cb5aed
refactor: AssertJ best practices
...
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D
Co-authored-by: Moderne <team@moderne.io>
2 years ago
ce012a4661
CookieRequestCache Should Preserve Request Locale
...
Closes gh-13792
2 years ago
96d1763fc4
WWW-Authenticate header should not be added twice
...
Closes gh-13737
2 years ago
a4d8c62ad7
withHttpOnlyCookie defaults to false
...
Closes gh-13659
2 years ago
985e569685
Polish gh-13608
3 years ago
6353d90047
Add integrity attribute for signin.css
...
Closes gh-13486
3 years ago
82c0ddc56d
Polish
...
- Add Reactive equivalent
- Update copyright
Issue gh-13310
3 years ago
e21da061d3
Suppress ArrayIndexOutOfBoundsException in XorCsrfTokenRequestAttributeHandler
...
Closes gh-13310
3 years ago
bcd4dcc15c
Refactor equals method
...
Using the accessor method for fields instead of directly access
3 years ago
ea19f82b8a
Using pattern matching for instanceof
3 years ago
beab899c3d
Fix Import Order
3 years ago
94c80bc2c6
Remove redundant code.
3 years ago
0d4e3f939a
Clean up SavedRequestAwareWrapper and related test
3 years ago
07f737b989
Return content-type from saved request
3 years ago
7813a9ba26
Use default PathPatternParser instance
3 years ago
b0022a0ae8
Update Mockito Usage
...
Issue gh-13542
3 years ago
Rob Winch
Josh Cummings
Marcus Hert Da Coregio
Federico Herrera
Nermin Karapandzic
ahmd-nabil
sonallux
brunodmartins
Steve Riesenberg
Martin Lukas
Duje
Mark Chesney
Seongguk Jeong
Bjorn Harvold
Tim te Beek
Olivier Vanekem
Kevin2Jordan
1993heqiang
Jonas Bamberger