Rob Winch
2fb625db84
Remove mockito deprecations
...
Issue gh-11748
3 years ago
Evgeniy Cheban
400cd60368
Add remaining methods from ExpressionUrlAuthorizationConfigurer to AuthorizeHttpRequestsConfigurer
...
- Added fullyAuthenticated
- Added rememberMe
- Added anonymous
Closes gh-11360
3 years ago
Josh Cummings
db25a37320
Consolidate ExpressionAuthorizationDecision
...
Issue gh-11493
3 years ago
Josh Cummings
281814a955
Add MethodExpressionAuthorizationManager
...
Closes gh-11493
3 years ago
Josh Cummings
51475e2583
Polish InterceptMethodsBeanDefinitionDecorator
...
Issue gh-11328
3 years ago
Josh Cummings
38cb6c3172
Use SecurityContextHolderStrategy for Context Propagation
...
Issue gh-11060
4 years ago
Josh Cummings
ee66850aed
Add SecurityContextHolderStrategy for Jaas
...
Issue gh-11060
Issue gh-11061
4 years ago
Josh Cummings
52d8e10ace
Use SecurityContextHolderStrategy for Database Support
...
Issue gh-11060
4 years ago
Josh Cummings
25c74896d1
Add SecurityContextHolderStrategy to Method Security
...
Issue gh-11060
4 years ago
Rob Winch
d32f74d19d
SecurityContextHolder Deferred SecurityContext
...
Closes gh-10913
4 years ago
Josh Cummings
31e25b115e
Add SecurityContextHolderStrategy to Default Components
...
Issue gh-11060
4 years ago
Marcus Da Coregio
4c2401a576
Revert "Make source code compatible with JDK 8"
...
This reverts commit 60ed3602f6 .
4 years ago
Evgeniy Cheban
d557d2d0eb
Add RoleHierarchy to AuthorityAuthorizationManager
...
Added roleHierarchy field to AuthorityAuthorizationManager
that defaults to NullRoleHierarchy along with setter method to override.
Closes gh-11304
4 years ago
Evgeniy Cheban
362f15534e
createEvaluationContext should defer lookup of Authentication
...
- Added createEvaluationContext method that accepts Supplier<Authentication>
- Refactored classes that use EvaluationContext to use lazy initialization of Authentication
Closes gh-9667
4 years ago
Evgeniy Cheban
3f861f7f20
Polish gh-11188
4 years ago
Evgeniy Cheban
e01b1e7f38
Polish gh-11188
4 years ago
Evgeniy Cheban
9f669c5e3c
Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager
...
Closes gh-11188
4 years ago
Evgeniy Cheban
89019fb340
Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager
...
Closes gh-11188
4 years ago
Evgeniy Cheban
286e95893a
@EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy
...
Removed proxy unwrapping in case of resolving Method Security annotations,
this cause an issue when interfaces which are implemented by the proxy was skipped,
resulting in a missing security checks on those methods.
Closes gh-11175
4 years ago
Evgeniy Cheban
66bbfc7a50
@EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy
...
Removed proxy unwrapping in case of resolving Method Security annotations,
this cause an issue when interfaces which are implemented by the proxy was skipped,
resulting in a missing security checks on those methods.
Closes gh-11175
4 years ago
Josh Cummings
0e9228d10a
Prepare for Spring Security 5.8
4 years ago
Josh Cummings
057f4a86d5
Add default strategy constructor
...
Closes gh-11059
4 years ago
Josh Cummings
061f69eb70
Polish Authorization Event Support
...
- Added spring-security-config support
- Renamed classes
- Changed contracts to include the authenticated user and secured
object
- Added method security support
Issue gh-9288
4 years ago
Parikshit Dutta
bd9434882f
Add authorization events
...
Closes gh-9288
4 years ago
Norbert Nowak
ac9c29b2a0
Add UsernamePasswordAuthenticationToken factory methods
...
- unauthenticated factory method
- authenticated factory method
- test for unauthenticated factory method
- test for authenticated factory method
- make existing constructor protected
- use newly factory methods in rest of the project
- update copyright dates
Closes gh-10790
4 years ago
Josh Cummings
6c3d183a94
Polish Saml2 Jackson Support
...
Issue gh-10905
4 years ago
Ulrich Grave
df84826c95
Add Jackson Support for Saml2 Module
...
Closes gh-10905
4 years ago
Eleftheria Stein
c6b185465d
Add DEFAULT_USER_SCHEMA_DDL_LOCATION constant
...
Closes gh-10837
4 years ago
Rob Winch
70fa8b1fdb
Add Support for @Transient SecurityContext
...
Closes gh-9995
4 years ago
Rob Winch
58090c37ea
jsr250-api -> jakarta.annotation-api
...
Issue gh-10501
4 years ago
Rob Winch
5902b46e9b
Remove jcl-over-slf4j
...
Issue gh-10499
# Conflicts:
# dependencies/spring-security-dependencies.gradle
4 years ago
Rob Winch
678c386834
jsr250-api -> jakarta.annotation-api
...
Issue gh-10501
4 years ago
Rob Winch
f8e14683f6
Remove jcl-over-slf4j
...
Issue gh-10499
4 years ago
Marcus Da Coregio
e1cb375fbf
Make source code compatible with JDK 8
...
Closes gh-10695
4 years ago
Marcus Da Coregio
60ed3602f6
Make source code compatible with JDK 8
...
Closes gh-10695
4 years ago
Guirong Hu
86ed937a47
Fix the bug that the custom GrantedAuthority comparison fails
...
Closes gh-10566
4 years ago
Guirong Hu
22379e79e7
Fix the bug that the custom GrantedAuthority comparison fails
...
Closes gh-10566
4 years ago
Josh Cummings
a68411566e
Polish Memory Leak Mitigation
...
Issue gh-9841
4 years ago
Hiroshi Shirosaki
2bc643d6c8
Address SecurityContextHolder memory leak
...
To get current context without creating a new context.
Creating a new context may cause ThreadLocal leak.
Closes gh-9841
4 years ago
Eleftheria Stein
bbeca7cd65
Polish LDAP serialization
...
Closes gh-9263
4 years ago
Markus Heiden
3c18278123
Start with LDAP Jackson2 mixins
...
Issue gh-9263
4 years ago
Josh Cummings
7b15098570
Update Spring Security to 5.7
...
Closes gh-10509
4 years ago
Emil Sierżęga
e0821f2a99
DaoAuthenticationProviderTests#avg returns fraction
4 years ago
Steve Riesenberg
5e091b94a9
Deprecate RemoteAuthentication* for 5.6
...
Closes gh-10430
4 years ago
Emil Sierżęga
a188138715
Javadocs author tag doesn't work in methods
4 years ago
Rob Winch
f836897190
Checkstyle Fixes
...
- Javadoc tag ordering
- Private constructors before inner classes
Issue gh-10394
4 years ago
Marcus Da Coregio
7fa39c8807
Deprecate EhCache2 support
...
Since EhCache 3 is fully JSR-107 compliant, we should remove EhCache2 support and provide JCache implementations
Closes gh-10362
4 years ago
Marcus Da Coregio
86c24da38b
Improve Method Security logging
...
Closes gh-10247
4 years ago
Marcus Da Coregio
ef01124eb9
Add reasons to AuthorizationDecisions
...
Closes gh-9287
4 years ago
Marcus Da Coregio
570092c467
Remove trace logs for PrePostAnnotationSecurityMetadataSource
...
Those logs were producing too much noise on the console without adding much value.
Issue gh-10247
4 years ago