spring-security

Commit Graph

Author	SHA1	Message	Date
Martin Vietz	0486d5add9	scopes_supported metadata not used as default in ClientRegistrations Closes gh-8514	6 years ago
Josh Cummings	af5c55c380	Polish AuthnRequest Customization Support Having the application generate the AuthnRequest fresh allows Spring Security to back away more gracefully. Using a Consumer implies that the application will need to undo any values that Spring Security set that the application doesn't want. Also, if this does become a configuration burden, it can be simplified in a separate ticket by exposing the default Converter. Issue gh-8776	6 years ago
Josh Cummings	1069e91645	RSocket Deprecations Stop using deprecated RSocket APIs in integration tests Issue gh-8948	6 years ago
koishikawa11	be6d2f117e	Add hasAnyRole and hasAnyAuthority to authorizeRequests in Kotlin DSL Closes gh-8892	6 years ago
Joe Grandja	1d74d556c2	Revert "Lock Dependency Versions for 5.4.0-RC1" This reverts commit f3a1e5d40c11169d4ec6c50eba30cf4ed3ba2851.	6 years ago
Rob Winch	74b42ba956	Move RSocket integration tests to integration tests Closes gh-8944	6 years ago
Joe Grandja	f3a1e5d40c	Lock Dependency Versions for 5.4.0-RC1	6 years ago
Josh Cummings	b999faa5a0	Complete SAML 2.0 SP Metadata Endpoint Closes gh-8693	6 years ago
Jakub Kubrynski	8a355240bc	SAML 2.0 SP Metadata Endpoint Support Issue gh-8693	6 years ago
Eleftheria Stein	aeafe04260	Remove need for WebSecurityConfigurerAdapter Closes gh-8804	6 years ago
Josh Cummings	5061ae9e79	Add Saml2AuthenticationTokenConverter Closes gh-8768	6 years ago
Josh Cummings	a10c2c6cf8	Polish DefaultSaml2AuthenticationRequestContextResolver Issue gh-8360 Issue gh-8887	6 years ago
Joe Grandja	3bc0b8c144	Revert "Fix snapshot build failure related to reactor-netty" This reverts commit f37714a26fb2cc8a93cb1d5259a00c4c0934dd59.	6 years ago
Joe Grandja	f37714a26f	Fix snapshot build failure related to reactor-netty Closes gh-8909	6 years ago
Joe Grandja	8146b1fdda	Deprecate CustomUserTypesOAuth2UserService Closes gh-8908	6 years ago
Joe Grandja	0ed919f072	Deprecate ClientRegistration.redirectUriTemplate Closes gh-8906	6 years ago
Joe Grandja	11cc94afd8	Deprecate ImplicitGrantConfigurer Closes gh-8902	6 years ago
Evgeniy Cheban	0a2006ebec	Support custom filter in Server Kotlin DSL Closes gh-8783	6 years ago
Dávid Kováč	37aa5f9b7c	Introduce AuthenticationConverterServerWebExchangeMatcher AuthenticationConverterServerWebExchangeMatcher is ServerWebExchangeMatcher implementation based on AuthenticationConverter which matches if ServerWebExchange can be converted to Authentication. It can be used as a matcher where SecurityFilterChain should be matched based on used authentication method. BearerTokenServerWebExchangeMatcher was replaced by this matcher. Closes gh-8824	6 years ago
Josh Cummings	cc44a93333	Polish WebSecurityConfigurerAdapter JavaDoc Issue gh-8784	6 years ago
Romil Patel	956a6ee00c	WebSecurityConfigurerAdapter JavaDoc Closes gh-8784	6 years ago
Josh Cummings	2c960d2ad1	Add AuthnRequestConsumerResolver Closes gh-8141	6 years ago
Joe Grandja	7cc6509200	Polish gh-8669	6 years ago
Eleftheria Stein	78ed6c4de6	Add custom HeaderWriter in Kotlin DSL Closes gh-8823	6 years ago
Eleftheria Stein	815ceae45c	Allow disabling headers in Kotlin DSL Closes gh-8816	6 years ago
Josh Cummings	146d0b6358	Revert "Lock Dependency Versions for 5.4.0-M2" This reverts commit 68538897c83a7ce8db0ec7275dbd10b1a548498f.	6 years ago
Josh Cummings	68538897c8	Lock Dependency Versions for 5.4.0-M2	6 years ago
Joe Grandja	0b5a14a900	Register OAuth2AuthorizedClientArgumentResolver as custom resolver for XML config Issue gh-8669	6 years ago
Peer Schönhusen	3e25714dc6	Add reified function variants to security DSL Closes gh-8697	6 years ago
Joe Grandja	edf06a3461	OAuth2AuthorizedClientArgumentResolver uses OAuth2AuthorizedClientManager @Bean Closes gh-8700	6 years ago
Joe Grandja	951e64185b	Register OAuth2AuthorizedClientArgumentResolver for XML Config Closes gh-8669	6 years ago
Eleftheria Stein	224361cb4a	Fix typo in Javadoc	6 years ago
Evgeniy Cheban	4e7be2078f	DefaultWebSecurityExpressionHandler uses RoleHierarchy bean Fixes gh-7059	6 years ago
Rob Winch	a907026eae	Deprecate X-FRAME-OPTIONS ALLOW-FROM Directive Closes gh-8677	6 years ago
Joe Grandja	da4b626bf1	OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException Issue gh-8609	6 years ago
Parikshit Dutta	28d2cfa14a	Add ServerRequestCache setter in OAuth2AuthorizationCodeGrantWebFilter Fixes gh-8536	6 years ago
Rob Winch	748538d19f	Delay AuthenticationPrincipalArgumentResolver Creation Use ObjectProvider<AuthenticationPrincipalArgumentResolver> to delay its lookup. Closes gh-8613	6 years ago
Eleftheria Stein	61060b3a4f	Add multipart configuration to CSRF Kotlin DSL Fixes gh-8602	6 years ago
Eleftheria Stein	6f5947cab7	Fix test warnings	6 years ago
Eleftheria Stein	fa11ae3c33	Remove unused import	6 years ago
Eleftheria Stein	67d2efde1c	Resolve package tangles with security marker annotation	6 years ago
Eleftheria Stein	bc272ddf73	Resolve package tangles in Kotlin server package	6 years ago
Craig Andrews	f1db7167cb	Polish Use `getBeanOrNull` in `registerDelegateApplicationListener` to simplify implementation. This change does not alter behavior.	6 years ago
Craig Andrews	dbdeec4216	Check for an existing SessionRegistry bean If a SessionRegistry is necessary, check for one in the ApplicationContext before creating one.	6 years ago
Evgeniy Cheban	0fa339f75b	Allow port=0 for ApacheDSContainer Fixes gh-8144	6 years ago
Josh Cummings	51a0cffd36	Post-process AuthenticationRequestFilter Fixes gh-8552	6 years ago
Josh Cummings	9241cd2892	Move TestRelyingPartyRegistrations Fixes gh-8551	6 years ago
Parikshit Dutta	1e211b6558	Add RequestCache setter in OAuth2AuthorizationCodeGrantFilter Fixes gh-8120	6 years ago
Joe Grandja	c1abc9b134	Polish gh-8501	6 years ago
Thomas Vitale	78fa859798	Add issuerUri to ClientRegistration.providerDetails - Add "issuerUri" attribute to ClientRegistration.providerDetails for OpenID Connect Discovery 1.0 or OAuth 2.0 Authorization Server Metadata. - Validate OidcIdToken "iss" claim against the OpenID Provider "issuerUri" value. - Update documentation for client registration: it includes issuer-uri property now. Fixes gh-8326	6 years ago

1 2 3 4 5 ...

1605 Commits (0486d5add983dd09295fffeee13015cdd74bf322)