spring-security

Commit Graph

Author	SHA1	Message	Date
Craig Andrews	efb6953017	Reject the NULL character in paths in StrictHttpFirewall Adds `setAllowNull` By default, denies null in paths	6 years ago
Rob Winch	ccbad61ae8	Change blacklist to blocklist Closes gh-8676	6 years ago
Rob Winch	ca1252be94	Replace whitelist with allowlist Issue gh-8676	6 years ago
Rob Winch	a907026eae	Deprecate X-FRAME-OPTIONS ALLOW-FROM Directive Closes gh-8677	6 years ago
Joe Grandja	da4b626bf1	OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException Issue gh-8609	6 years ago
Eleftheria Stein	0a42aa26c8	Mock request with non-standard HTTP method in test Fixes gh-8594	6 years ago
Astushi Yoshikawa	f08ca4e688	Throw exception if URL does not include context path when context relative Issue: gh-8399	6 years ago
Rob Winch	dc514b369e	FilterInvocation Support Default Methods on HttpServletRequest Closes gh-8566	6 years ago
cbornet	bfb401eeed	Create the CSRF token on the bounded elactic scheduler The CSRF token is created with a call to UUID.randomUUID which is blocking. This change ensures this blocking call is done on the bounded elastic scheduler which supports blocking calls. Fixes gh-8128	6 years ago
Mathieu Ouellet	cd08102b93	Add debug logging Goal is to provide insight to devs on: - Authentication & Authorization success/failures - WebSession & SecurityContext - Request matchers, cache & authn/authz flow Fixes gh-5758	6 years ago
Rob Winch	4473dca022	Polish matchesRequireCsrfProtectionWhenNonStandardHTTPMethodIsUsed Issue gh-8149	6 years ago
Parikshit Dutta	0f92415395	Fix non-standard HTTP method for CsrfWebFilter Closes gh-8149	6 years ago
Artyom Tarynin	6db514a4e2	Update AntPathRequestMatcher.java Fixed typo in JavaDoc. Actually, In these two cases, we are calling the constructor with a `boolean caseSensitive` which is equal to true. This means case sensitive	6 years ago
Joe Grandja	86ca6b013c	Unlock dependencies This reverts commit `206960cf44`.	6 years ago
Joe Grandja	206960cf44	Lock dependencies for 5.4.0-M1	6 years ago
Rob Winch	0483b3e042	Polish RequestRejectedHandler Issue gh-5007	6 years ago
Leonard Brünings	b826c798f7	Add RequestRejectedHandler Closes gh-5007	6 years ago
Oh Myung Woon	b7d3acc02c	Add constructors to AbstractAuthenticationProcessingFilter Closes gh-8309	6 years ago
Mustafa Ulu	6bdd5f710f	Fix example in javadoc of FilterChainProxy	6 years ago
Rob Winch	91728ef53b	Fix HttpServlet3RequestFactory Logout Handlers Previously there was a problem with Servlet API logout integration when Servlet API was configured before log out. This ensures that logout handlers is a reference to the logout handlers vs copying the logout handlers. This ensures that the ordering does not matter. Closes gh-4760	6 years ago
Josh Cummings	eed71243cb	SwitchUserFilter Defaults to POST Fixes gh-4183	6 years ago
Zeeshan Adnan	935c547dde	Fix exception for empty basic auth header token fixes spring-projectsgh-7976	6 years ago
Eleftheria Stein	47011eb9e2	Polish transfer session's max inactive interval Issue: gh-2693	6 years ago
Venkata Jaswanth U	02b7d04027	Transfer session's max inactive interval Fixes: gh-2693	6 years ago
Eleftheria Stein	b2ea0ba775	Polish SessionIdChangedEvent Add AbstractSessionEvent; clean up license headers and Javadocs Fixes: gh-5438	6 years ago
Venkata Jaswanth	5fc6414377	SessionRegistryImpl is now aware of SessionIdChangedEvent	6 years ago
Eleftheria Stein	ae532c080c	Add server request cache that uses cookie Fixes: gh-8033	6 years ago
Eleftheria Stein	38979b1b09	Add test for ServerRequestCacheWebFilter	6 years ago
Josh Cummings	6eadf7b140	Unlock dependencies for 5.3.0.RELEASE This reverts commit `147d7dadd7`.	6 years ago
Josh Cummings	147d7dadd7	Lock dependencies for 5.3.0.RELEASE	6 years ago
AmitB	2ce9eef95e	Fix typo in AntPathRequestMatcher contructor comment	6 years ago
Joe Grandja	82cd203791	Remove unnecessary mocking Fixes gh-8012	6 years ago
Josh Cummings	5bdf57d1e5	Remove Groovy and Spock Dependencies Fixes gh-4939	6 years ago
Josh Cummings	bae50ecc05	AbstractSecurityWebApplicationInitializerTests groovy->java Issue gh-4939	6 years ago
Eleftheria Stein	84b8a5abd7	Unlock dependencies for next development version This reverts commit `064616f1ef`.	6 years ago
Eleftheria Stein	064616f1ef	Lock dependencies for 5.3.0.RC1	6 years ago
Josh Cummings	cb9fd09150	Change AuthenticationWebFilter's constructor Fixes gh-7872	6 years ago
Peter Keller	e62fb755e8	Set charset of BasicAuthenticationFilter converter Allow BasicAuthenticationFilter to pick up the given credentials charset. Fixes: gh-7835	6 years ago
Onur Kağan Özcan	1f6381d970	Set secure on cookie when logging out Mark cookie secure flag to ensure cookie identity is the same	6 years ago
Rob Winch	ffccec953f	Fix HttpHeaderWriterWebFilterTests Ensure setComplete() is subscribed to	6 years ago
Eleftheria Stein	fcc6457bef	Unlock dependencies for next development version This reverts commit `93acf8f0f1`.	6 years ago
Eleftheria Stein	93acf8f0f1	Lock dependencies for 5.3.0.M1	6 years ago
Onur Kağan Özcan	2015f392ef	Set secure when cancelling remember-me cookie AbstractRememberMeServices is setting remember-me cookie with checking request is secure or secure usage is independently set to a fixed flag. But when cancelling a cookie, cookie is not being marked secure or not. It produces an inconsistency when using secure flag as a part to identity of cookie.	6 years ago
Rob Winch	a8331ba7ed	CompositeServerHttpHeadersWriter Executes Sequentially Fixes gh-7731	6 years ago
David Herberth	64e063d948	switches web authentication principal resolver to use reactive context gh #6598 Signed-off-by: David Herberth <github@dav1d.de>	6 years ago
Rob Winch	8e53c3f269	DelegatingServerAuthenticationSuccessHandler Executes Sequentially Fixes gh-7728	6 years ago
Rob Winch	73babc3314	DelegatingServerLogoutHandler Executes Sequentially Fixes gh-7723	6 years ago
Joe Grandja	4d9cee116c	Display general error message when WebFlux oauth2Login() fails Issue gh-5562 gh-6484	6 years ago
Filip Hrisafov	796859333f	Log full failed authentication exception in BasicAuthenticationFilter	6 years ago
Josh Cummings	5f17032ffd	Restore Removed Throws Clauses In a recent clean-up, certain exceptions were removed from various throws clauses. This PR re-introduces throws clauses that are important for one of the following reasons: 1. It's a method on a public interface 2. It's a method clearly designed for inheritance, for example, a method stub, an abstract method, or indicated as such in the docs. Fixes gh-7541	6 years ago

1 2 3 4 5 ...

1011 Commits (360db53dd24d2d12316dcbdaaa7bc4cba59ea0a5)