Adam Millerchip
16a7cbee4b
Use named arguments in Kotlin authorization rule
6 years ago
Adam Millerchip
401393d756
Extract pattern type in request matcher DSL
6 years ago
Antonin Arquey
5cd1ec7bb3
Add AuthoritiesMapper setter for reactive OAuth2Login
...
Allow the configuration of a custom GrantedAuthorityMapper for reactive OAuth2Login
- Add setter in OidcAuthorizationCodeReactiveAuthenticationManager
and OAuth2LoginReactiveAuthenticationManager
- Use an available GrantedAuthorityMapper bean to configure the default ReactiveAuthenticationManager
Fixes gh-8324
6 years ago
Roberto Paolillo
2cccf223df
Add Flag to enable searching of LDAP groups on subtrees
...
Closes gh-8939
6 years ago
Loïc Labagnara
146d9ba0bf
Add marker to make Kotlin DSL type safe.
...
Fixes gh-8366
6 years ago
Evgeniy Cheban
a70d55552b
Resource Server Finds JwtAuthenticationConverter Beans
...
Fixes gh-8185
6 years ago
Rob Winch
9a42a028e7
Logout defaults to use Global SecurityContextServerLogoutHandler
...
Closes gh-8375
6 years ago
Josh Cummings
711954e016
Deprecate Saml2AuthenticationRequestFilter Constructor
...
Removing the default usage of OpenSamlAuthenticationRequestFactory.
Otherwise, the Open SAML dependency is required, even when
Saml2AuthenticationRequestFactory is implemented without it.
Fixes gh-8359
6 years ago
Eleftheria Stein
39e09e4ca5
Idiomatic Kotlin DSL for server HTTP security
...
Issue: gh-5558
6 years ago
hotire
6d45ec5d6b
Fix typo in Javadoc of ServerHttpSecurity#hasAuthority
6 years ago
Markus Engelbrecht
dc6b8ce470
Add addFilterAfter and addFilterBefore to Kotlin DSL
...
Fixes gh-8316
6 years ago
Eleftheria Stein
1de0cf5057
Fix HttpSecurity Javadoc
...
Fixes gh-4404
6 years ago
Rob Winch
91728ef53b
Fix HttpServlet3RequestFactory Logout Handlers
...
Previously there was a problem with Servlet API logout integration
when Servlet API was configured before log out.
This ensures that logout handlers is a reference to the logout handlers
vs copying the logout handlers. This ensures that the ordering does not
matter.
Closes gh-4760
6 years ago
Rob Winch
b055f8bb25
SpringTestContext returns ConfigurableWebApplicationContext
...
Closes gh-8233
6 years ago
Joe Grandja
e27e548215
oauth2Login WebFlux does not auto-redirect for XHR request
...
Fixes gh-8118
6 years ago
Eleftheria Stein
97085ef310
Fix rsocket test
...
Request route that exists; add additional error message verification
Fixes gh-8154
6 years ago
Josh Cummings
2d8c65db56
Support port=0 for LDAP Servers
...
Fixes gh-8138
6 years ago
Josh Cummings
4d99ee2896
Allow port=0 in XSD
...
Issue gh-8138
6 years ago
Josh Cummings
f438bdfbcf
Add spring-security-5.4.xsd
...
Issue gh-8138
6 years ago
Erik van Paassen
ad9bb7f230
Fix typo in Javadoc of HttpSecurity#csrf()
...
`HttpSecurity#csrf()` obviously returns a `CsrfConfigurer`, while the Javadoc states that it returns the `ServletApiConfigurer`.
6 years ago
Eleftheria Stein
40b15f5a46
Rename to SessionFixationDslTests
6 years ago
Josh Cummings
bfd36d9a54
Remove Redundant ConcurrentSessionFilter Refs
...
Fixes gh-8105
6 years ago
Markus Engelbrecht
d81321bc29
Fix typo 'properites' in documentation
...
Fixes gh-8095
6 years ago
Josh Cummings
c729fee7bc
Malformed Bearer Token Returns 401 for WebFlux
...
Fixes gh-7668
6 years ago
Joe Grandja
c111099640
Polish client-registration xsd attributes
...
Issue gh-4557
6 years ago
Josh Cummings
e97396b9c7
Add Resource Server XML Support
...
Fixes gh-5185
6 years ago
Josh Cummings
f1a2d69968
Add AuthenticationProvider List Configurability
...
Issue gh-5185
6 years ago
Josh Cummings
34b40deb38
Add By-RequestMatcher Exception Handling
...
Issue gh-5185
6 years ago
Josh Cummings
98a2ca3bbc
Add Csrf Ignore Configurability
...
Issue gh-5185
6 years ago
Josh Cummings
19584884b3
Register Authentication Provider in Init Phase
...
Fixes gh-8031
6 years ago
Filip Hanik
3257349045
Support POST binding for AuthNRequest
...
Has been tested with
- Keycloak
- SSOCircle
- Okta
- SimpleSAMLPhp
This PR extends (builds on previous commits and adds user configuration
options)
https://github.com/spring-projects/spring-security/pull/7758
6 years ago
Rob Winch
727fee1e12
Polish HeaderWriterSpec
...
Assert.notNull(Object,Supplier) is for when then message passed in
requires concatenation and avoids doing extra work. Since this does
not require concatenation, we can use Assert.notNull(Object,String)
Issue gh-7636
6 years ago
Ankur Pathak
480c5bc87e
Custom ServerHttpHeadersWriter to HeaderSpec
...
Add the ability to have a custom ServerHttpHeadersWriter to HeaderSpec
Fixes gh-7636
6 years ago
Eleftheria Stein
2fb3d3d5a2
Add hasRole to authorizeRequests in Kotlin DSL
...
Fixes: gh-8023
6 years ago
Joe Grandja
4cd89b584f
Polish gh-5184
6 years ago
Joe Grandja
8a4ff4452b
Add XML namespace support for oauth2-client
...
Fixes gh-5184
6 years ago
Eleftheria Stein
171e0d048f
Fix typo in WebSecurityConfigurer Javadoc
...
Fixes: gh-7876
6 years ago
Joe Grandja
ff8002eb2e
Polish gh-4557
6 years ago
Ruby Hartono
71a5c9521c
Add XML namespace support for oauth2-login
...
Fixes gh-4557
6 years ago
Joe Grandja
40c0a452d7
Define oauth2-login xsd elements
...
Issue gh-4557
6 years ago
Eleftheria Stein
fde3ccb8b3
Add marker to make Kotlin DSL type safe
...
Fixes: gh-7971
6 years ago
Eleftheria Stein
1d6fdd249b
Add missing Javadoc to Kotlin class
6 years ago
Eleftheria Stein
f37a4557e6
Fix typo in Kotlin Javadoc
6 years ago
Josh Cummings
5bdf57d1e5
Remove Groovy and Spock Dependencies
...
Fixes gh-4939
6 years ago
Eleftheria Stein
a5210aaf9b
Support custom filter in Kotlin DSL
...
Fixes: gh-7951
6 years ago
Stephane Maldini
851be025e9
Don't force downcasting of RequestAttributes to ServletRequestAttributes
...
Fixes gh-7952
6 years ago
Eleftheria Stein
8c0b754a49
Fix credentials precedence over introspector in Kotlin
...
Fixes: gh-7878
6 years ago
Eleftheria Stein
1fed688f05
Fix JWK Set URI precedence over decoder in Kotlin
...
Fixes: gh-7877
6 years ago
Rob Winch
1d7208f8ef
Add RSocket Authentication Extension Support
...
Fixes gh-7935
6 years ago
Josh Cummings
209c81d65d
Add BadOpaqueTokenException
...
Updated NimbusOpaqueTokenIntrospector and
NimbusReactiveOpaqueTokenIntrospector to throw.
Updated OpaqueTokenAuthenticationProvider and
OpaqueTokenReactiveAuthenticationManager to catch.
Fixes gh-7902
6 years ago