In WebAuthn L3 spec, PublicKeyCredentialEntity.name is deprecated:
> This member is deprecated because many clients do not display it,
> but it remains a required dictionary member for backwards compatibility.
> Relying Parties MAY, as a safe default, set this equal to the RP ID.
Source: https://www.w3.org/TR/webauthn-3/#dictdef-publickeycredentialentity
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
The Spring portfolio is changing to use <inception-year>-present in
the copyright headers to simplify keeping headers up to date. This
commit updates the headers and the checkstyle accordingly.
The commit updated etc/checkstyle/header.txt
It also updated the copyright headers using the following find/replace:
Find: (Copyright \d{4})\s*(\-\d{4})? the original author or authors.
Replace: Copyright 2004-present the original author or authors.
Closes gh-17633
This just renames the Configurer names used in
AbstractConfiguredSecurityBuilderTests to be more meaningful.
Issue gh-17020 gh-17011
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
A getter should not mutate state. This removes getConfigurersInInitializing
in favor of inline code since this is just used once.
Issue gh-17020 gh-17011
Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
To make SpringSecurityCoreVersionSerializableTests more manageable,
this commit moves the sample class constructions to a separate file.
In this way, the tests file only changes when serialization tests are
added. When classes are introduced, they can be added to SerializationSamples,
separating the two concerns
Since we don't need to ensure the serializability of test components
across versions, we can ignore missing version UIDs when those
test components aren't about testing Java serialization.
Issue gh-17038
We should test that serialized files from the current minor version
can be deserialized. This ensures that serializations remain
deserializable in patch releases.
Issue gh-3737
Previously there were race conditions on the static member lastToken of
TestOneTimeTokenGenerationSuccessHandler. This is because the tests run in
parallel and one test may override the other tests lastToken and thus
make the assertion on it incorrect.
This commit changes lastToken to be a non-static variable to ensure that
each test has it's own lastToken for asserting the expected value.
Closes gh-16471
Prior to this commit, providing oauth2Login() and oauth2Client() with
clientRegistrationRepository() and authorizedClientRepository() caused
objects to be shared across both configurers.
These configurers will now prefer explicitly provided instances of
those objects when they are available.
Closes gh-16105
Daniel Garnier-Moiroux
Josh Cummings
Rob Winch
Marcus Hert da Coregio
damable-nuvolex
Andrey Litvitski
Steve Riesenberg
Jonah Klöckner
Max Batischev
Tran Ngoc Nhan
Steven Williams