spring-security

Commit Graph

Author	SHA1	Message	Date
Rivaldi	01a37dd678	Fix typo (cherry picked from commit 20e89e3eca0823bfa329b5de80448bac1f5e0f30)	3 years ago
Ger Roza	8315545144	Update RP-Initiated Logout target URLs. The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs. Fixes: gh-12081	3 years ago
Marcus Da Coregio	ace8caa182	Remove mvcMatchers usage from docs Issue gh-11347	3 years ago
Steve Riesenberg	181ee7410b	Change default authority for oauth2Login() Previously, the default authority was ROLE_USER when using oauth2Login() for both OAuth2 and OIDC providers. * Default authority for OAuth2UserAuthority is now OAUTH2_USER * Default authority for OidcUserAuthority is now OIDC_USER Documentation has been updated to include this implementation detail. Closes gh-7856	3 years ago
Steve Riesenberg	355ef21117	Polish gh-11665	3 years ago
ch4mpy	1efb63387f	Add authentication converter for introspected tokens Adds configurable authentication converter for resource-servers with token introspection (something very similar to what JwtAuthenticationConverter does for resource-servers with JWT decoder). The new (Reactive)OpaqueTokenAuthenticationConverter is given responsibility for converting successful token introspection result into an Authentication instance (which is currently done by a private methods of OpaqueTokenAuthenticationProvider and OpaqueTokenReactiveAuthenticationManager). The default (Reactive)OpaqueTokenAuthenticationConverter, behave the same as current private convert(OAuth2AuthenticatedPrincipal principal, String token) methods: map authorities from scope attribute and build a BearerTokenAuthentication. Closes gh-11661	3 years ago
Rob Winch	a5069d7e35	Fix Add @Configuration to @Enable*Security Usage Issue gh-6613	3 years ago
Joshua Sattler	040111ae9e	Remove Configuration meta-annotation from Enable* annotations Before, Spring Security's @Enable* annotations were meta-annotated with @Configuration. While convenient, this is not consistent with the rest of the Spring projects and most notably Spring Framework's @Enable annotations. Additionally, the introduction of support for @Configuration(proxyBeanMethods=false) in Spring Framework provides a compelling reason to remove @Configuration meta-annotation from Spring Security's @Enable annotations and allow users to opt into their preferred configuration mode. Closes gh-6613 Signed-off-by: Joshua Sattler <joshua.sattler@mailbox.org>	3 years ago
André Luis Gomes	aca3fc2412	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
André Luis Gomes	0c31cb21dc	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
André Luis Gomes	24701b547f	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
André Luis Gomes	b9acdd5058	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
Pascal Verdage	b71d9bfdc2	Fix typo	4 years ago
Pascal Verdage	ed8887e0fc	Fix typo	4 years ago
Steve Riesenberg	f0168c6c27	Add support for customizing claims in JWT Client Assertion Closes gh-9855	4 years ago
Steve Riesenberg	428216b322	Add support for customizing claims in JWT Client Assertion Closes gh-9855	4 years ago
Joe Grandja	54b033078b	Allow configuring PKCE for confidential clients Closes gh-6548	4 years ago
Joe Grandja	a2ffc88294	Allow configuring PKCE for confidential clients Closes gh-6548	4 years ago
Yuriy Savchenko	f64181ab41	Update docs to use multi-tenancy Closes gh-10572	4 years ago
Yuriy Savchenko	77ba94e1db	Update docs to use multi-tenancy Closes gh-10572	4 years ago
Eleftheria Stein	4142f06259	Replace WebSecurityConfigurerAdapter with SecurityFilterChain in docs Closes gh-10003	4 years ago
Eleftheria Stein	4492e5b667	Replace WebSecurityConfigurerAdapter with SecurityFilterChain in docs Closes gh-10003	4 years ago
Joe Grandja	525f40490c	Allow Jwt assertion to be resolved Closes gh-9812	4 years ago
Joe Grandja	214cfe807e	Allow Jwt assertion to be resolved Closes gh-9812	4 years ago
Jeff Maxwell	32d79f3f4e	Fix setJWTClaimSetJWSKeySelector Typo Closes gh-10504	4 years ago
Jeff Maxwell	b7cc667d21	Fix setJWTClaimSetJWSKeySelector Typo Closes gh-10504	4 years ago
Jeff Maxwell	879b2d089f	Fix setJWTClaimSetJWSKeySelector Typo Closes gh-10504	4 years ago
Jeff Maxwell	088a24cf59	Fix jwtDecoder Documentation Usage Closes gh-10505	4 years ago
Jeff Maxwell	3fb1565cc0	Fix jwtDecoder Documentation Usage Closes gh-10505	4 years ago
Jeff Maxwell	5913501e1a	#10505 Fix jwtDecoder Fixed jwtDecoder(JWTProcessor jwtProcessor, OAuth2TokenValidator<Jwt> jwtValidator)	4 years ago
Steve Riesenberg	73e1506e5e	Consistency update for servlet docs	4 years ago
Steve Riesenberg	ab794bf67a	Consistency update for servlet docs	4 years ago
Josh Cummings	b60020a40c	Use authorizeHttpRequests in Docs Issue gh-8900	4 years ago
Josh Cummings	812d6f7b18	Use authorizeHttpRequests in Docs Issue gh-8900	4 years ago
Josh Cummings	7708418fae	Separate OAuth 2.0 Login Servlet Docs Issue gh-10367	4 years ago
Josh Cummings	82696918ae	Separate OAuth 2.0 Client Servlet Docs Issue gh-10367	4 years ago
Steve Riesenberg	e350c8a852	Document parameters converter in oauth2 client servlet docs Closes gh-10467	4 years ago
Steve Riesenberg	efa2fab061	Document authentication helper method in WebClient integration Closes gh-10120	4 years ago
Josh Cummings	76ebbb84f7	Separate Namespace Servlet Docs Issue gh-10367	4 years ago
Josh Cummings	3db13de1e2	Separate OAuth 2.0 Login Servlet Docs Issue gh-10367	4 years ago
Josh Cummings	8c508d6afa	Separate OAuth 2.0 Client Servlet Docs Issue gh-10367	4 years ago
Steve Riesenberg	b27c7e17f4	Document parameters converter in oauth2 client servlet docs Closes gh-10467	4 years ago
Steve Riesenberg	49f3c0ce53	Document authentication helper method in WebClient integration Closes gh-10120	4 years ago
Josh Cummings	869e379099	Separate Namespace Servlet Docs Issue gh-10367	4 years ago
Josh Cummings	4b0e74aac4	Separate Resource Server Servlet Docs Issue gh-10367	4 years ago
Alexander Schwartz	f561499683	Fix Antora cross-references that lead to other pages. Also using AsciiDoc style listings instead of Markdown style listings, and using explicit section IDs on all cross-references.	4 years ago
Rob Winch	a7f3f54a33	architecture/index.adoc -> ../architecture.adoc BASE_DIR=docs/modules/ROOT/pages git --no-pager diff HEAD~1 --diff-filter=R -M \| sed -Ez "s%(\nrename to\|rename from \|similarity index [^\n]+\|diff[^\n]+\|$BASE_DIR/)%%g" \| grep "\S" \| while read rename_from_to; do from=$(echo $rename_from_to \| cut -f 1 -d " ") to=$(echo $rename_from_to \| cut -f 2 -d " ") echo "processing rename from $from to $to" find "$BASE_DIR/../" -name "*.adoc" \| while read adoc_file; do sed -i -E "s%xref:$from%xref:$to%g" "$adoc_file" done done	4 years ago
Rob Winch	583761f916	unpwd->passwords folder	4 years ago
Rob Winch	0b587dcef1	Reduce folders	4 years ago
Rob Winch	e681e44268	overview/ -> ../	4 years ago

1 2

64 Commits (063f06e7bf9a498c541a4ceaae9d94e20e329f3c)