spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Da Coregio	60ed3602f6	Make source code compatible with JDK 8 Closes gh-10695	4 years ago
heowc	1ab0705b47	Fix typo	4 years ago
Marcus Da Coregio	18427b6411	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Josh Cummings	cd8983d4e5	Polish enableSessionUrlRewriting Clarification Closes gh-7644	4 years ago
James Howe	5598688fa6	Clarify behaviour of enableSessionUrlRewriting See #3087	4 years ago
Marcus Da Coregio	65426a40ec	Add Cross Origin Policies headers Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers Closes gh-9385, gh-10118	4 years ago
Marcus Da Coregio	ed3b0fbaad	Prevent using both authorizeRequests and authorizeHttpRequests Closes gh-10573	4 years ago
Steve Riesenberg	df0f6f83af	Polish gh-9597	4 years ago
Karl Tinawi	925d531cbe	Set details on authentication token created by HttpServlet3RequestFactory Currently the login mechanism when triggered by executing HttpServlet3RequestFactory#login does not set any details on the underlying authentication token that is authenticated. This change adds an AuthenticationDetailsSource on the HttpServlet3RequestFactory, which defaults to a WebAuthenticationDetailsSource. Closes gh-9579	4 years ago
Steve Riesenberg	074e38d565	Add missing since Issue gh-7765	4 years ago
Steve Riesenberg	3af619d565	Add hasIpAddress to Reactive Kotlin DSL Closes gh-10571	4 years ago
Josh Cummings	a68411566e	Polish Memory Leak Mitigation Issue gh-9841	4 years ago
Hiroshi Shirosaki	2bc643d6c8	Address SecurityContextHolder memory leak To get current context without creating a new context. Creating a new context may cause ThreadLocal leak. Closes gh-9841	4 years ago
Igor Pelesic	a3a9de1b9b	PermitAllSupport supports AuthorizeHttpRequestsConfigurer PermitAllSupport supports either an ExpressionUrlAuthorizationConfigurer or an AuthorizeHttpRequestsConfigurer. If none or both are configured an error message is thrown. Closes gh-10482	4 years ago
Guirong Hu	43317c5a61	Support IP whitelist for Spring Security Webflux Closes gh-7765	4 years ago
« Christophe	4318a51971	Fix CsrfConfigurer default AccessDeniedHandler consistency Fix when AccessDeniedHandler is specified per RequestMatcher on ExceptionHandlingConfigurer. This introduces evolutions on : - CsrfConfigurer#getDefaultAccessDeniedHandler, to retrieve an AccessDeniedHandler similar to the one used by ExceptionHandlingConfigurer. - OAuth2ResourceServerConfigurer#accessDeniedHandler, to continue to handle CsrfException with the default AccessDeniedHandler implementation Fixes: gh-6511	4 years ago
Stephane Nicoll	61ee4e5a76	Avoid using SpEL to change the meaning of the injection point This commit removes the use of SpEL expression and replaces it with an explicit call to the underlying method.	4 years ago
Onur Kagan Ozcan	aa0f788f59	Add RedirectStrategy customization to ChannelSecurityConfigurer for RetryWith classes	4 years ago
Josh Cummings	7b15098570	Update Spring Security to 5.7 Closes gh-10509	4 years ago
Josh Cummings	76ebbb84f7	Separate Namespace Servlet Docs Issue gh-10367	4 years ago
Marcus Da Coregio	2f1638ec57	Fix javadoc Closes gh-10382	4 years ago
Emil Sierżęga	cb70b6a39b	Fixed invalid usage of & tag in Javadocs	4 years ago
Emil Sierżęga	04b47c5928	Fixed various broken links in Javadocs	4 years ago
Emil Sierżęga	a188138715	Javadocs author tag doesn't work in methods	4 years ago
Emil Sierżęga	6b26032ce7	Fixed invalid usege of > tag in Javadocs	4 years ago
Rob Winch	f836897190	Checkstyle Fixes - Javadoc tag ordering - Private constructors before inner classes Issue gh-10394	4 years ago
Philipp Neuschwander	6db58cbf8a	Conditionally resolve bearer token from request parameters Before this commit, the DefaultBearerTokenResolver unconditionally resolved the request parameters to check whether multiple tokens are present in the request and reject those requests as invalid. This commit changes this behaviour to resolve the request parameters only if parameter token is supported for the specific request according to spec (RFC 6750). Closes gh-10326	4 years ago
Gaurav Tiwari	33708e61fb	Add postProcess support to Saml2LogoutConfigurer Closes gh-10311	4 years ago
Josh Cummings	fbb7691be4	Polish SecurityNamespaceHandler Tests Issue gh-8974	4 years ago
Emil Sierżęga	8daa6ec1fd	SecurityNamespaceHandler: update schema version to 5.6 Closes gh-8974	4 years ago
Eleftheria Stein	ba8844a67e	Deprecate Kotlin methods that don't use reified types Closes gh-10365	4 years ago
Marcus Da Coregio	02b2fcc6f0	Restore ManagementConfigurationPlugin Issue gh-9615	4 years ago
Marcus Da Coregio	d2e5f2ae0d	Update Gradle to 7.2 Closes gh-9615	4 years ago
Marcus Da Coregio	7112ee3eaa	Allow SAML 2.0 loginProcessingURL without registrationId Closes gh-10176	4 years ago
Marcus Da Coregio	e36e2b2a97	Move Saml2AuthnRequestRepository to web package Moving to solve package tangles Issue gh-9185	4 years ago
Rob Winch	3b64cdfc03	Fix XsdDocumentedTests Issue gh-5835	4 years ago
Josh Cummings	c3ba2332da	Wire BeanResolver into DefaultMethodSecurityExpressionHandler Closes gh-10305	4 years ago
Josh Cummings	7b599d4770	Share JWKSource Instances Closes gh-10312	4 years ago
Marcus Da Coregio	0364518b69	Update Saml2LoginConfigurer to pick up Saml2AuthenticationTokenConverter bean Closes gh-10268	4 years ago
Eleftheria Stein	1e76b11b3c	Remove duplicate entry from test LDIF file Closes gh-10274	4 years ago
Josh Cummings	4f06fc6ed1	Add Saml2LogoutConfigurer Closes gh-9497	4 years ago
Josh Cummings	6488295cad	Add RelyingPartyRegistrationResolver Closes gh-9486	4 years ago
Derek Van Blerkom	58d50888df	Fix return type to allow further security config	4 years ago
Yanming Zhou	f2b2e6002f	Replace static "ROLE_" with customized role prefix Fix gh-4134	4 years ago
Eleftheria Stein	3ab6bee856	Make method static to prevent circular dependency error Workaround for circular dependency between ServerHttpSecurityConfiguration and WebFluxConfigurationSupport. Closes gh-10076	5 years ago
Marcus Da Coregio	662ab10416	Fix test getting stuck The tests are getting stuck when running a single test class and the mock is performed in a static variable inside an inner class Issue gh-6025	5 years ago
Marcus Da Coregio	16e17d242e	Add Saml2AuthenticationRequestRepository Closes gh-9185	5 years ago
Josh Cummings	6b68a6d62b	Apply rnc2Xsd Issue gh-8657	5 years ago
Josh Cummings	6370906ead	Add SpringOpaqueTokenIntrospector Closes gh-9354	5 years ago
Abdul Al-Faraj	d1dfb2b9ee	Improve OpenSAML Version Check Closes gh-10077	5 years ago

1 2 3 4 5 ...

1826 Commits (2ed93ec0cf01445e08ee5e691dc8a57bc790fa01)