Tao Sun
156fc294bf
Deserialize details field in UsernamePasswordAuthenticationToken
...
Before this commit, the details field was set to a JsonNode, but now it is deserialized correctly.
Fixes gh-7482
6 years ago
Filip Hanik
af415948b1
Allow configuration of AuthenticationManagerResolver in saml2Login()
...
Fixes gh-7654
https://github.com/spring-projects/spring-security/issues/7654
6 years ago
Filip Hanik
b7eebabce6
Ensure that both matchers carry the same pattern.
...
AbstractAuthenticationProcessingFilter.setRequiresAuthenticationRequestMatcher is public and final,
so there is a risk that the underlying matcher can become different if one is not careful.
6 years ago
Filip Hanik
9aa333ca4d
Use the custom ServerRequestCache that the user configures
...
on for the default authentication entry point and authentication
success handler
Fixes gh-7721
https://github.com/spring-projects/spring-security/issues/7721
Set RequestCache on the Oauth2LoginSpec default authentication success handler
import static ReflectionTestUtils.getField
Feedback incorporated per
https://github.com/spring-projects/spring-security/pull/7734#pullrequestreview-332150359
6 years ago
Rafael Garcia
65f5c29316
Check hashes of byte array passwords
...
Fixes gh-7661
6 years ago
Rob Winch
83d796cf1a
Docs ServerRSocketFactoryCustomizer->ServerRSocketFactoryProcessor
...
The documentation incorrectly used ServerRSocketFactoryCustomizer which
was renamed to ServerRSocketFactoryProcessor. The docs now use the correct
class name
Fixes gh-7737
6 years ago
Eleftheria Stein
da3f18017d
Polish SAML2 principal classes
...
Update @since
Issue: gh-7681
6 years ago
Rob Winch
a8331ba7ed
CompositeServerHttpHeadersWriter Executes Sequentially
...
Fixes gh-7731
6 years ago
Clement Stoquart
31b999e9b4
fix: make Saml2Authentication serializable
6 years ago
Josh Cummings
02f161aba7
Use OidcIdToken.Builder
...
Issue gh-7592
6 years ago
David Herberth
64e063d948
switches web authentication principal resolver to use reactive context
...
gh #6598
Signed-off-by: David Herberth <github@dav1d.de>
6 years ago
Rob Winch
8e53c3f269
DelegatingServerAuthenticationSuccessHandler Executes Sequentially
...
Fixes gh-7728
6 years ago
Rafael Garcia
c71e84bdac
Replace test vectors with list of objects
6 years ago
Rob Winch
73babc3314
DelegatingServerLogoutHandler Executes Sequentially
...
Fixes gh-7723
6 years ago
Phil Clay
cffad1be02
Polish #7589
...
Rename OAuth2AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager to AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager.
Handle empty mono returned from contextAttributesMapper.
Handle empty map returned from contextAttributesMapper.
Fix DefaultContextAttributesMapper so that it doesn't access ServerWebExchange.
Fix unit tests so that they pass.
Use StepVerifier in unit tests, rather than .subscribe().
Fixes gh-7569
6 years ago
Ankur Pathak
c29309d744
Reactive Implementation of AuthorizedClientServiceOAuth2AuthorizedClientManager
...
ReactiveOAuth2AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager is reactive
version of AuthorizedClientServiceOAuth2AuthorizedClientManager
Fixes: gh-7569
6 years ago
Clement Stoquart
0c47bfb1e3
Remove empty relay state from redirect url
6 years ago
Joe Grandja
24500fa3ca
Remove redundant validation for redirect-uri
...
Fixes gh-7706
6 years ago
Rob Winch
9c991a5430
Start Servlet Authentication Cleanup
...
Issue gh-7628
6 years ago
Joe Grandja
4d9cee116c
Display general error message when WebFlux oauth2Login() fails
...
Issue gh-5562 gh-6484
6 years ago
Joe Grandja
c40a17b4d1
WebFlux oauth2Login() redirects on failed authentication
...
Fixes gh-5562 gh-6484
6 years ago
Josh Cummings
d102cae243
oidcLogin MockMvc Documentation
...
Remove documentation requiring a valid ClientRegistrationRepository
Issue: gh-7618
6 years ago
Josh Cummings
8c32d5fe48
Add oidcLogin WebFlux Test Support
...
Fixes: gh-7680
6 years ago
Josh Cummings
bb8706977d
Polish DefaultOAuth2AuthorizedClientManager
6 years ago
Eleftheria Stein
55f1c695e1
Include security configuration context in test sample
...
Fixes: gh-7688
6 years ago
Alexey Nesterov
d8d59e97ac
Correctly configure authorization requests repository for OAuth2 login
...
To use custom ServerAuthorizationRequestRepository both OAuth2AuthorizationRequestRedirectWebFilter and
OAuth2LoginAuthenticationWebFilter should use the same repo provided in the configuration. Currently the former filter is
correctly configured, but the latter always uses default, WebSession based repository. So authorization code created
before redirect to authorization endpoint will never be found to complete OAuth2 login when custom
ServerAuthorizationRequestRepository is used.
This change also makes OAuth2Client and OAuth2Login authentication converters consistent.
Fixes gh-7675
6 years ago
Joe Grandja
65513f2e3b
Polish OAuth2AuthorizedClientArgumentResolver
6 years ago
Joe Grandja
80f256e425
ServerOAuth2AuthorizedClientExchangeFilterFunction works with UnAuthenticatedServerOAuth2AuthorizedClientRepository
...
Fixes gh-7544
6 years ago
Joe Grandja
07b8aa0b1f
DefaultReactiveOAuth2AuthorizedClientManager requires non-null serverWebExchange
...
Issue gh-7544
6 years ago
Eleftheria Stein
b7cb93f671
Fix WebFlux logout disabling
...
Fixes: gh-7682
6 years ago
Ruslan Stelmachenko
c38e57fa42
Fix class and variable names
6 years ago
Ruslan Stelmachenko
8ebc7ca0ea
Fix InitializeAuthenticationProviderBeanManagerConfigurer Javadoc
6 years ago
Rob Winch
af01fdce7e
Fix security.tld
6 years ago
Rob Winch
17449cbf60
Fix next development version
6 years ago
Rob Winch
a7871cfce4
Next Development Version
6 years ago
Rob Winch
e5932131a9
Next Development Version
6 years ago
Filip Hrisafov
796859333f
Log full failed authentication exception in BasicAuthenticationFilter
6 years ago
David Eisner
56f5242595
Fix minor typo.
6 years ago
Josh Cummings
b35e18ff31
Add oidcLogin MockMvc Test Support
...
Fixes gh-7618
6 years ago
Josh Cummings
6ff71d8113
Add OidcUserInfo.Builder
...
Fixes gh-7593
6 years ago
Josh Cummings
c76775159c
Add OidcIdToken.Builder
...
Fixes gh-7592
6 years ago
Josh Cummings
4954a229d6
Polish oauth2Login Sample Test
...
Issue: gh-7618
6 years ago
ryenus
42ab6736e1
typo fix: consecutive-word duplications ( #7673 )
...
* fix typo: require require
* more typo fix: consecutive-word duplications
Following previously finding, I then used `rg` to find other similar
typos, with false positives manually excluded, using the following
command:
rg -t asciidoc -Pp '\b(\w+)\s+\1\b'
6 years ago
Rob Winch
af47e730a0
Only Hello Spring Security Boot
...
For those getting started, we really need to send the message of using
Spring Boot.
Fixes gh-7627
6 years ago
Eleftheria Stein
c5b36664ce
Polish PrincipalSid
...
Remove reduntant UserDetails check and add tests
6 years ago
杨博 (Yang Bo)
ea148d5fee
Avoid toString in favor of getName for extract sid
...
There are some more sophisticated implementations of `getName` in `AbstractAuthenticationToken` and other `Authentication` classes.
6 years ago
Rob Winch
b3d177fc7e
Extract HTTPS Documentation
...
Fixes gh-7626
6 years ago
Josh Cummings
7cbd1665a6
Isolate Jwt Test Support
...
Isolating Jwt test support inside JwtRequestPostProcessor and
JwtMutator.
Fixes gh-7641
6 years ago
Eleftheria Stein
8a95e5798d
Update @MessageMapping to match input/output cardinality
6 years ago
Pim Moerenhout
cd0bec48de
Fix typo in log message.
6 years ago