spring-security

Commit Graph

Author	SHA1	Message	Date
Tran Ngoc Nhan	22da30df2f	Fallback defaultTargetUrl if refererHeader is empty Closes gh-18805 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	4 weeks ago
Rob Winch	d3474e704f	Merge Add Missing OnCommitedResponseWrapper Header Overrides Add Missing OnCommitedResponseWrapper Header Overrides	4 weeks ago
Robert Winch	9cc3161055	Merge Add Missing OnCommitedResponseWrapper Header Overrides	4 weeks ago
Robert Winch	6898de8003	Merge Add Missing OnCommitedResponseWrapper Header Overrides	4 weeks ago
Robert Winch	1dae9aa459	Add Missing OnCommitedResponseWrapper Header Overrides Spring Security's `OnCommitedResponseWrapper` does not override the `setHeader`, `setIntHeader`, `addIntHeader` methods. This means that if the `Content-Length` response header is specified using any of those methods then the response body length is not tracked and can be committed before the response headers are written. Spring Security should override the missing methods and track `Content-Length` as is already done for `addHeader`. This issue is the underlying problem for spring-projects/spring-framework#36381 Closes gh-18797	4 weeks ago
Josh Cummings	4b0be84a0e	Merge branch '7.0.x'	4 weeks ago
Josh Cummings	73ee893d98	Merge remote-tracking branch 'origin/6.5.x' into 7.0.x	4 weeks ago
Josh Cummings	bec25edeb0	Merge pull request #18566 from Hann244/docs/gh-16530-jsp-method-attribute Clarify need for method attribute in JSP authorize tag	4 weeks ago
Josh Cummings	4d43edfb20	Polish Documentation - Combined explanation of method attribute with usage recommendations - Used one sentence per line format Issue gh-16530 Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>	4 weeks ago
onhann	9f9699f8a5	Clarify need for method attribute in JSP authorize tag Closes gh-16530 This aligns the JSP documentation with the changes made in gh-16529. Added a NOTE to clarify that the method attribute is required when the underlying RequestMatcher is method-specific. Signed-off-by: onhann <gusgus1467@naver.com>	4 weeks ago
Andrey Litvitski	6d4726bfb7	Mark targetDomainObject as `@Nullable` in PermissionEvaluator Closes: gh-18259 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	4 weeks ago
Robert Winch	d31ca7a758	Fix SecurityContextLogoutHandler.logout @param response Javadoc (cannot be null) Closes gh-18357	4 weeks ago
Robert Winch	ac06067d02	Revert "Mark targetDomainObject as `@Nullable` in PermissionEvaluator" This reverts commit `9f1381c382`.	4 weeks ago
Andrey Litvitski	9f1381c382	Mark targetDomainObject as `@Nullable` in PermissionEvaluator Closes: gh-18259 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	4 weeks ago
dependabot[bot]	f700aeac0f	Bump tools.jackson:jackson-bom from 3.0.4 to 3.1.0 Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 3.0.4 to 3.1.0. - [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-3.0.4...jackson-bom-3.1.0) --- updated-dependencies: - dependency-name: tools.jackson:jackson-bom dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	4 weeks ago
dependabot[bot]	41a8d6aca5	Bump org-apache-maven-resolver from 1.9.26 to 1.9.27 Bumps `org-apache-maven-resolver` from 1.9.26 to 1.9.27. Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.26 to 1.9.27 - [Release notes](https://github.com/apache/maven-resolver/releases) - [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.26...maven-resolver-1.9.27) Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.26 to 1.9.27 - [Release notes](https://github.com/apache/maven-resolver/releases) - [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.26...maven-resolver-1.9.27) Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.26 to 1.9.27 --- updated-dependencies: - dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic dependency-version: 1.9.27 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.apache.maven.resolver:maven-resolver-impl dependency-version: 1.9.27 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.apache.maven.resolver:maven-resolver-transport-http dependency-version: 1.9.27 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 weeks ago
Rob Winch	e81c64b94d	Merge Update servlet/architecture.adoc to use include-code Update servlet/architecture.adoc to use include-code	4 weeks ago
Robert Winch	0c394696ce	Fix servlet/architecture.adoc disable Sample - Switch `include-java` (does not exist) to `include-code` - Update kotlin to have the `disable` tag - Update to suppress deprecation use for User builder (allowed for samples) Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com>	4 weeks ago
Joe Kuhel	62d1bc86e3	Update servlet architecture docs to use include-code Also update antora.xml to include-xml in docs/src/test/resources Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	4 weeks ago
Rob Winch	a4cadb5cc5	Merge Make PublicKeyCredentialCreationOptions Serializable Make PublicKeyCredentialCreationOptions Serializable	4 weeks ago
Robert Winch	701736da5d	Fix checkstyle Issue gh-18354 Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com>	4 weeks ago
Mohammad Amin Pahlevani	9e5a425859	Make PublicKeyCredentialCreationOptions Serializable Closes gh-16431 Signed-off-by: Mohammad Amin Pahlevani <pahlevani@live.com>	4 weeks ago
Rob Winch	1ab17d941a	Merge Improve error message for missing access attribute in intercept-url Improve error message for missing access attribute in intercept-url	4 weeks ago
Robert Winch	53300be8d7	Fix checkstyle Issue gh-18530	4 weeks ago
CHANHAN	d5ba9dcada	Add tests for intercept-url access attribute validation Fixes gh-18503 Signed-off-by: CHANHAN <130114269+chanani@users.noreply.github.com>	4 weeks ago
CHANHAN	fa87c78edb	fix missing access attribute validation in FilterInvocationSecurityMetadataSourceParser Fixes gh-18503 Signed-off-by: CHANHAN <130114269+chanani@users.noreply.github.com>	4 weeks ago
CHANHAN	f1e367f93d	fix missing access attribute validation in AuthorizationFilterParser Fixes gh-18503 Signed-off-by: CHANHAN <130114269+chanani@users.noreply.github.com>	4 weeks ago
Rob Winch	4d0627e6c0	Merge pull request #18721 from coehgns/main Add tests for PathPatternRequestMatcher request path caching	1 month ago
Rob Winch	3106f2be7b	Merge pull request #18757 from wonderfulrosemari/gh-4265-csrf-multipart-header Document multipart CSRF header option	1 month ago
Rob Winch	b3e5f09eb3	Merge Document Keberose Dependency Coordinates Document Keberose Dependency Coordinates	1 month ago
Robert Winch	e1436c39f0	Merge Document Keberose Dependency Coordinates	1 month ago
Robert Winch	311235f39e	Document Keberose Dependency Coordinates Closes gh-18773	1 month ago
Robert Winch	fec988c82d	Add Kerberos Migration Section This links to the updated dependency coordinates Issue gh-18773 Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com>	1 month ago
busoco-sjb	17b434c1c1	Document the change in dependency coordinates with Spring Security 7 Signed-off-by: busoco-sjb <169069865+busoco-sjb@users.noreply.github.com>	1 month ago
Rob Winch	b451739b5c	Merge pull request Fix GrantedAuthority.authority null in AuthoritiesAuthorizationManager Fix GrantedAuthority.authority null in AuthoritiesAuthorizationManager	1 month ago
Rob Winch	0bb65411be	Merge pull request Fix GrantedAuthority.authority null in AuthoritiesAuthorizationManager Fix GrantedAuthority.authority null in AuthoritiesAuthorizationManager	1 month ago
Rob Winch	d29c984881	Merge pull request #18544 from Khyojae/gh-18543 Fix GrantedAuthority.authority null in AuthoritiesAuthorizationManager	1 month ago
Robert Winch	cfb3bf38d8	Merge Fix: Handle null authority string in AuthoritiesAuthorizationManager into main	1 month ago
Robert Winch	151bcf3b0b	Merge Fix: Handle null authority string in AuthoritiesAuthorizationManager into 7.0.x	1 month ago
Robert Winch	1116241ee3	Fix Checks for NullPointerException in AuthoritiesAuthorizationManager - Fix checkstyle - Fix the test to use Collection that throws NullPointerException on .contains(null) to replicate the reported issue Closes gh-18544 Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com>	1 month ago
Khyojae	d87dc9ae57	Fix: Handle null authority string in AuthoritiesAuthorizationManager This prevents NPE when GrantedAuthority.getAuthority() returns null. Closes gh-18543 Signed-off-by: Khyojae <khjae201@gmail.com>	1 month ago
Robert Winch	ea1b3d819b	Merge branch '7.0.x'	1 month ago
Robert Winch	2eb948d9b5	Ensure tests clear AuthorizationServerContextHolder Closes gh-18768	1 month ago
Robert Winch	881ddf796a	Merge branch '7.0.x'	1 month ago
Robert Winch	f2aef5168c	Merge branch '6.5.x' into 7.0.x	1 month ago
dependabot[bot]	ac556a45f9	Bump org.hibernate.orm:hibernate-core from 6.6.42.Final to 6.6.43.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.42.Final to 6.6.43.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.43/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.42...6.6.43) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.43.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	c8731a8dc0	Bump com.fasterxml.jackson:jackson-bom from 2.18.5 to 2.18.6 Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.18.5 to 2.18.6. - [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.5...jackson-bom-2.18.6) --- updated-dependencies: - dependency-name: com.fasterxml.jackson:jackson-bom dependency-version: 2.18.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	d62cce5bfb	Bump com.fasterxml.jackson:jackson-bom from 2.21.0 to 2.21.1 Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.0 to 2.21.1. - [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.0...jackson-bom-2.21.1) --- updated-dependencies: - dependency-name: com.fasterxml.jackson:jackson-bom dependency-version: 2.21.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	eca68b6cb3	Bump org.seleniumhq.selenium:selenium-java from 4.40.0 to 4.41.0 Bumps [org.seleniumhq.selenium:selenium-java](https://github.com/SeleniumHQ/selenium) from 4.40.0 to 4.41.0. - [Release notes](https://github.com/SeleniumHQ/selenium/releases) - [Commits](https://github.com/SeleniumHQ/selenium/compare/selenium-4.40.0...selenium-4.41.0) --- updated-dependencies: - dependency-name: org.seleniumhq.selenium:selenium-java dependency-version: 4.41.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	3e60eeb74c	Bump org.hibernate.orm:hibernate-core from 7.2.4.Final to 7.2.5.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.2.4.Final to 7.2.5.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.2.5/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/7.2.4...7.2.5) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 7.2.5.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago

1 2 3 4 5 ...

20416 Commits (22da30df2f2ef14df895d675d4e678739055ce14) All Branches Search

20416 Commits (22da30df2f2ef14df895d675d4e678739055ce14)

All Branches