spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Da Coregio	8eb7e589eb	Update hibernate-entitymanager to 5.6.10.Final Closes gh-11683	3 years ago
Marcus Da Coregio	0d7dce9d71	Update org.eclipse.jetty to 9.4.48.v20220622 Closes gh-11682	3 years ago
Marcus Da Coregio	da09788be9	Update io.projectreactor to 2020.0.22 Closes gh-11680	3 years ago
Marcus Da Coregio	ead587c597	Consistently handle RequestRejectedException if it is wrapped Closes gh-11645	3 years ago
Marcus Da Coregio	6a2ca52aae	Consistently handle RequestRejectedException if it is wrapped Closes gh-11645	3 years ago
Marcus Da Coregio	1c4d6ed098	Consistently handle RequestRejectedException if it is wrapped Closes gh-11645	3 years ago
Igor Bolic	efaee4e56b	Allow customization of redirect strategy The default redirect strategy will provide authorization redirect URI within HTTP 302 response Location header. Allowing the configuration of custom redirect strategy will provide an option for the clients to obtain the authorization URI from e.g. HTTP response body as JSON payload, without a need to handle automatic redirection initiated by the HTTP Location header. Closes gh-11373	3 years ago
Rob Winch	269c711a64	RequestAttributeSecurityContextRepository never null SecurityContext Previously loadContext(HttpServletRequest) could return a Supplier that returned a null SecurityContext This commit ensures that null is never returned by the Supplier by returning SecurityContextHolder.createEmptyContext() instead. Closes gh-11606	3 years ago
Rob Winch	c9f8d2b111	RequestAttributeSecurityContextRepository never null SecurityContext Previously loadContext(HttpServletRequest) could return a Supplier that returned a null SecurityContext This commit ensures that null is never returned by the Supplier by returning SecurityContextHolder.createEmptyContext() instead. Closes gh-11606	3 years ago
Josh Cummings	c2d79fcbd6	Add Conditions to Generating AuthnRequest Closes gh-11657	3 years ago
Josh Cummings	aa225943d2	Polish Tests Issue gh-11657	3 years ago
Steve Riesenberg	99f768bab9	Polish HttpSecurity	3 years ago
Steve Riesenberg	984355e637	Remove references to WebSecurityConfigurerAdapter * AbstractAuthenticationFilterConfigurer * DefaultLoginPageConfigurer * EnableGlobalAuthentication * FormLoginConfigurer * HeadersConfigurer * HttpSecurity * OpenIDLoginConfigurer * RememberMeConfigurer * WebSecurity * WebSecurityConfiguration * WebSecurityConfigurer * X509Configurer Closes gh-11288	3 years ago
Steve Riesenberg	09173c95d6	Remove references to WebSecurityConfigurerAdapter in EnableWebSecurity Closes gh-11277	3 years ago
Steve Riesenberg	07ea139ebf	Polish HttpSecurity	3 years ago
Steve Riesenberg	67544f36f9	Remove references to WebSecurityConfigurerAdapter * AbstractAuthenticationFilterConfigurer * DefaultLoginPageConfigurer * EnableGlobalAuthentication * FormLoginConfigurer * HeadersConfigurer * HttpSecurity * OpenIDLoginConfigurer * RememberMeConfigurer * WebSecurity * WebSecurityConfiguration * WebSecurityConfigurer * X509Configurer Closes gh-11288	3 years ago
Steve Riesenberg	05725af4d8	Remove references to WebSecurityConfigurerAdapter in EnableWebSecurity Closes gh-11277	3 years ago
Steve Riesenberg	02459919cc	Skip workflows on forks of spring-security	3 years ago
Steve Riesenberg	57d212ddca	Use cache and user.name system property on Windows	3 years ago
Steve Riesenberg	539b17f6da	Only run prerequisites job if on upstream repo	3 years ago
Steve Riesenberg	37e1ad27fe	Simplify dependency graph	3 years ago
Steve Riesenberg	043fdd6f03	Use Spring Gradle Build Action Closes gh-11630	3 years ago
Steve Riesenberg	3234e05085	Polish gh-11367	3 years ago
naveen	f957e3c051	Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Closes gh-11367	3 years ago
Steve Riesenberg	24033be046	Skip workflows on forks of spring-security	3 years ago
Steve Riesenberg	47a5665767	Use cache and user.name system property on Windows	3 years ago
Steve Riesenberg	aad60cc6af	Only run prerequisites job if on upstream repo	3 years ago
Steve Riesenberg	13e94935ae	Simplify dependency graph	3 years ago
Steve Riesenberg	6c29007fac	Use Spring Gradle Build Action Closes gh-11630	3 years ago
Steve Riesenberg	6ad567f0fa	Polish gh-11367	3 years ago
naveen	8c634f8a9d	Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Closes gh-11367	3 years ago
Steve Riesenberg	4fbbfd2c8b	Skip workflows on forks of spring-security	3 years ago
Steve Riesenberg	66da4301fc	Use cache and user.name system property on Windows	3 years ago
Steve Riesenberg	8929bd5abc	Only run prerequisites job if on upstream repo	3 years ago
Steve Riesenberg	e3d1405f67	Simplify dependency graph	3 years ago
Steve Riesenberg	e756a1df19	Use Spring Gradle Build Action Closes gh-11630	3 years ago
Steve Riesenberg	81fae2db2c	Polish gh-11367	3 years ago
naveen	054a3f0bc0	Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> Closes gh-11367	3 years ago
Ulrich Grave	409998a3fe	Add hash-based Content-Security-Policy for SAML pages Closes gh-11631	3 years ago
Marcus Da Coregio	e5ae35ab71	Add Deprecated annotation to WebSecurity#securityInterceptor Closes gh-11634	3 years ago
Marcus Da Coregio	a996dfc55b	Add Deprecated annotation to WebSecurity#securityInterceptor Closes gh-11634	3 years ago
Marcus Da Coregio	d66ad22652	Add Deprecated annotation to WebSecurity#securityInterceptor Closes gh-11634	3 years ago
Rob Winch	7a860e1568	Fix Snapshot Sources/Javadoc This commit merges a workaround to an issue in JFrog's Gradle plugin which causes SNAPSHOT javadoc and sources to become out of sync and thus prevents users from being able to download either. Closes gh-10602	3 years ago
Rob Winch	ad9e737bf2	Fix Snapshot Sources/Javadoc This commit merges a workaround to an issue in JFrog's Gradle plugin which causes SNAPSHOT javadoc and sources to become out of sync and thus prevents users from being able to download either. Closes gh-10602	3 years ago
Rob Winch	0d74da4f97	Fix Snapshot Sources/Javadoc This commit merges a workaround to an issue in JFrog's Gradle plugin which causes SNAPSHOT javadoc and sources to become out of sync and thus prevents users from being able to download either. Closes gh-10602	3 years ago
Desmond Silveira	0d3c3c676d	"Well-Know" should be "Well-Known"	3 years ago
Desmond Silveira	06aa3362dd	"Well-Know" should be "Well-Known"	3 years ago
Desmond Silveira	2a336d4f49	"Well-Know" should be "Well-Known"	3 years ago
Yuriy Savchenko	0f64d4c091	Add Kotlin example for WebTestClient setup docs Closes gh-9998	4 years ago
Yuriy Savchenko	7c7751635d	Add Kotlin example for WebTestClient setup docs Closes gh-9998	4 years ago

... 3 4 5 6 7 ...

10761 Commits (200b7fecd347c29b4508351d4ee07cfc170888af) All Branches Search

10761 Commits (200b7fecd347c29b4508351d4ee07cfc170888af)

All Branches