Joe Grandja
cf7e258ea0
Fix checkstyle
...
Issue gh-17880
7 months ago
Steve Riesenberg
eeb4574bb3
Add AuthorizationManagerFactory
...
Signed-off-by: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com>
7 months ago
Tran Ngoc Nhan
1a56023f7f
Use Spring Framework Nullability Annotations
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
8 months ago
Rob Winch
f6cb0bd610
Merge Use 2004-present Copyright Header
...
The original merge into main did not apply the changes. This fixes it.
Closes gh-17635
8 months ago
Rob Winch
392129b616
Use 2004-present Copyright Header
...
The Spring portfolio is changing to use <inception-year>-present in
the copyright headers to simplify keeping headers up to date. This
commit updates the headers and the checkstyle accordingly.
The commit updated etc/checkstyle/header.txt
It also updated the copyright headers using the following find/replace:
Find: (Copyright \d{4})\s*(\-\d{4})? the original author or authors.
Replace: Copyright 2004-present the original author or authors.
Closes gh-17633
8 months ago
Josh Cummings
f1725b25a0
Remove authorizeRequests
...
Closes gh-15174
9 months ago
Josh Cummings
d3e9e3138d
Remove AntPath and MvcRequestMatcher
...
Closes gh-16886
Closes gh-16887
9 months ago
Josh Cummings
f709a9efef
Add pathPattern Factory Methods
...
Closes gh-17476
9 months ago
Josh Cummings
98686a5139
Standardize Mock Request Paths
...
Closes gh-17449
9 months ago
Joe Grandja
e869bcdfa3
Remove deprecated implementations of OAuth2AccessTokenResponseClient
...
Closes gh-16909
9 months ago
Tran Ngoc Nhan
e686ac6b11
Remove AbstractSecurityWebSocketMessageBrokerConfigurer
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
Josh Cummings
60bed7f68a
Polish AuthenticationRequest Property
...
- Add getter for reading the request
- Update BadCredentialsMixing to ignore authentication
- Allow exception to be mutable
Issue gh-16444
1 year ago
Joe Grandja
a8c4d6cead
Require Locale argument for toLower/toUpperCase usage
1 year ago
Joe Grandja
a7bf8f7cc6
Require Locale argument for toLower/toUpperCase usage
1 year ago
Joe Grandja
0eaffb37e7
Require Locale argument for toLower/toUpperCase usage
1 year ago
Marcus Hert Da Coregio
00e4a8fb54
Add support for One-Time Token Login
...
Closes gh-15114
2 years ago
Josh Cummings
a3b88a8d4b
Enable Runtime Method Parameter Reflection
...
Several method security tests rely on method parameters
being preserved, in order to demonstrate the difference
between relying on runtime reflection and using the @P
annotation.
Closes gh-15680
2 years ago
Daniel Garnier-Moiroux
bc8ba7f3b7
Inline CSS for default login and logout page
...
- Remove the dependency on Bootstrap CSS. Results in faster load times, no failures
in air-gapped or offline scenarios, and no dependency on an external CDN that may
go away some day.
2 years ago
Josh Cummings
5cdcdc9bcb
Suppress Node Files From Nohttp Analysis
...
Given that we have no control over the contents of
third-party code, it isn't helpful to have nohttp
generate errors for the usage of http:// in that code.
2 years ago
Josh Cummings
6aabd768a8
Pick MvcRequestMatcher for MockMvc requests
...
Closes gh-13849
2 years ago
Steve Riesenberg
8bd6991976
Update nohttp allow list
...
Issue gh-14609
2 years ago
Steve Riesenberg
f8fde0d79d
Update nohttp allow list
...
Issue gh-14609
2 years ago
Josh Cummings
008296cce2
Exclude Deprecated Classes
...
Closes gh-14630
2 years ago
Josh Cummings
238bc9733a
Remove stray projects
2 years ago
Steve Riesenberg
9db33f33c7
Revert unnecessary merges on 6.0.x
...
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:
- 5dce82c48b
2 years ago
Steve Riesenberg
c4b0d468a8
Add nohttp exclusions
...
(cherry picked from commit ac7fbea248 )
Issue gh-13910
3 years ago
Josh Cummings
cb33fd7850
Add OIDC Back-Channel Logout Support
...
Closes gh-12570
3 years ago
Steve Riesenberg
ac7fbea248
Add nohttp exclusions
3 years ago
Steve Riesenberg
7b88ab289d
Add nohttp exclusion
...
Issue gh-12804
3 years ago
Marcus Da Coregio
7094ee3710
Add runtime hints for annotations using @WithSecurityContext
...
Closes gh-12215
3 years ago
Marcus Da Coregio
8cde8fb363
Update Gradle to 7.5.1
...
Closes gh-11779
3 years ago
Daniel Garnier-Moiroux
200b7fecd3
Add (Server)AuthenticationEntryPointFailureHandlerAdapter
...
Issue gh-11932, gh-9429
(Server)AuthenticationEntryPointFailureHandler should produce HTTP 500 instead
when an AuthenticationServiceException is thrown, instead of HTTP 401.
This commit deprecates the current behavior and introduces an opt-in
(Server)AuthenticationEntryPointFailureHandlerAdapter with the expected
behavior.
BearerTokenAuthenticationFilter uses the new adapter, but with a closure
to keep the current behavior re: entrypoint.
4 years ago
Marcus Da Coregio
4b6fed0667
Add static factory method to AntPathRequestMather and RegexRequestMatcher
...
Closes gh-11938
4 years ago
Rob Winch
d94677f87e
CsrfTokenRequestAttributeHandler -> CsrfTokenRequestHandler
...
This renames CsrfTokenRequestAttributeHandler to CsrfTokenRequestHandler and
moves usage from CsrfFilter into CsrfTokenRequestHandler.
Closes gh-11892
4 years ago
Steve Riesenberg
1be9be97a1
Exclude JavadocPackageCheck from Spring Checks
...
Issue gh-11422
4 years ago
Marcus Da Coregio
ee11c3ade7
Exclude JavadocPackageCheck from Spring Checks
...
Issue gh-11422
4 years ago
Joe Grandja
f87df42500
Remove deprecated OAuth2IntrospectionClaimAccessor
...
Closes gh-11499
4 years ago
Joe Grandja
7b18336c6a
Change interface with constants to final class
...
Closes gh-10960
4 years ago
Josh Cummings
a31a99b591
Add SecurityContextHolderStrategy to Default Components
...
Issue gh-11060
4 years ago
Josh Cummings
31e25b115e
Add SecurityContextHolderStrategy to Default Components
...
Issue gh-11060
4 years ago
Marcus Da Coregio
1cbe7a75d3
Add SAML 2.0 Login XML Support
...
Closes gh-9012
4 years ago
Marcus Da Coregio
73f839312d
Add SAML 2.0 Login XML Support
...
Closes gh-9012
4 years ago
Rob Winch
f94090a59b
Remove spring-security-openid
...
Closes gh-10773
4 years ago
Josh Cummings
4374905801
Establish new Package Tangle Baseline
...
Ran ./gradlew check && ./gradlew s101 -Ps101.label=baseline
Issue gh-10333
4 years ago
Marcus Da Coregio
17e0a47ef4
Revert "Fix CAS Client Java lib not working with Jakarta EE 9"
...
This reverts commit aa5564e240 .
4 years ago
Marcus Da Coregio
5c4dd51994
Fix CAS Client Java lib not working with Jakarta EE 9
...
Copy the code from the library and change it to support the Jakarta classes
Issue gh-10360
4 years ago
Marcus Da Coregio
e36e2b2a97
Move Saml2AuthnRequestRepository to web package
...
Moving to solve package tangles
Issue gh-9185
5 years ago
Josh Cummings
64f0102425
Establish Structure101 Baseline
...
Issue gh-6236
5 years ago
Josh Cummings
4272889dc8
Install Structure101 Plugin
...
Issue gh-6236
5 years ago
Joe Grandja
5830fda2fa
Introduce JwtEncoder
...
Closes gh-9208
5 years ago