3d96878d43
Cache RequestPath
...
In this way PathPatternRequestMatcher won't need to reparse for each
request matcher.
Issue gh-16771
1 year ago
86599afd43
Rename servletPath to basePath
...
Closes gh-16765
1 year ago
c53bf2befe
PathPatternRequestParser Retains Servlet Path
...
Issue gh-16765
1 year ago
1966ff3ce8
Parse RequestPath when cache is empty
...
Closes gh-16771
1 year ago
861a9a914e
OneTimeToken Missing Token Propagates Request
...
Closes gh-16780
1 year ago
8199015e79
Add Support for AuthenticationConverter
...
Closes gh-16793
1 year ago
24b7287d55
Replace dynamic error message with static "Access Denied"
...
Closes gh-16514
Signed-off-by: Daeho Kwon <trewq231@naver.com>
1 year ago
5ded04da6c
Fix javadocs on WebFlux CSRF classes
...
Signed-off-by: mmck328 <20348295+mmck328@users.noreply.github.com>
1 year ago
ab6e9d2d1f
Clarify WebInvocationPrivilegeEvaluator JavaDoc
...
Closes gh-16529
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
1 year ago
a50a8b2f17
Improve JdbcPublicKeyCredentialUserEntityRepository save
...
Closes gh-16726
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
1120733e27
Update Copyright
1 year ago
8e9634d25c
Deprecate ConfigAttribute
...
Closes gh-16774
1 year ago
989aee244b
Deprecate SecurityMetadataSource
...
Closes gh-16772
1 year ago
d9a937f0c1
Correct Closing Tag
...
Closes gh-16600
Signed-off-by: AB <a.bierler@xdev-software.de>
1 year ago
adb303e152
Add testRuntimeOnly junit-platform-launcher
...
Closes gh-16755
1 year ago
0938ca01a4
Add support for automatic context-propagation with Micrometer
...
Closes gh-16665
1 year ago
c7673e8f2f
Polish AbstractAuthenticationTargetUrlRequestHandler
...
PR gh-16557
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
47630ca354
Fix JdbcUserCredentialRepository Save
...
Closes gh-16620
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
58a665e5aa
Add Support SingleResultAuthorizationManager
...
Closes gh-16590
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
cfefccad1f
Update Http403ForbiddenEntryPoint to Use HttpStatus
...
Closes gh-16615
Signed-off-by: yelm-212 <21yrshin@naver.com>
1 year ago
ab52fd858a
Deprecate ChannelDecisionManager
...
Closes gh-16681
1 year ago
2d96fba5cf
Add HttpsRedirectFilter
...
Closes gh-16678
1 year ago
e569c7a39e
Fix Tests
...
Issue gh-16517
1 year ago
85f0f3f34a
Support Custom RequestMatchers for WebAuthn
...
Closes gh-16517
Signed-off-by: topiam <support@topiam.cn>
1 year ago
9417f02790
Deprecate PortResolver
...
Closes gh-15972
1 year ago
5f5427bd03
PortResolver.NO_OP
...
Closes gh-16666
1 year ago
588220a020
Add PathPatterRequestMatcher
...
Closes gh-16429
Clsoes gh-16430
1 year ago
7fc5d50adf
Polish gh-16551
1 year ago
0ccbd20f0a
Add Support ServerFormPostRedirectStrategy
...
Closes gh-16542
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
c4b223266c
Return Invalid Credentials message on login error
...
Closes gh-16484
Signed-off-by: tejas-teju <tejas8196@gmail.com>
1 year ago
946812691e
Make AuthenticatorAttestation Serializable
...
Issue gh-16481
1 year ago
b5a4218a0b
Make WebAuthnAuthenticationRequestToken Serializable
...
Closes gh-16481
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
879b44f9a1
Make PublicKeyCredentialRequestOptions Serializable
...
Closes gh-16432
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
6494ea9b18
fix for typo
1 year ago
238f47ce5e
One Time Token login registers the default login page
...
closes gh-16414
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
1 year ago
5ee6b83953
Introduce OneTimeTokenAuthenticationFilter
...
closes gh-16539
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
1 year ago
be81377235
Add Support ServerGenerateOneTimeTokenRequestResolver
...
Closes gh-16488
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
54a6a19e05
Polish gh-16214
...
This commit applies the following changes:
* Added local Content-Security-Policy with script-src nonce directive
* Removed form-redirect.js and associated changes
* Renamed to FormPostRedirectStrategy
* Removed HtmlUtils usage
* Moved to same package as DefaultRedirectStrategy
1 year ago
58534e7f60
Add FormRedirectStrategy to enable POST OIDC Logout
...
FormRedirectStrategy redirects using an autosubmitting HTML form using the POST method versus DefaultRedirectStrategy which redirects using the GET method.
Can be used to implement POST binding for relying party initiated OIDC logout by setting FormRedirectStrategy as the redirection strategy on OidcClientInitiatedLogoutSuccessHandler.
Closes gh-13002
Signed-off-by: Craig Andrews <candrews@integralblue.com>
1 year ago
61d92e9db9
Fix assertion message in DefaultGenerateOneTimeTokenRequestResolver
...
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
e31f04bebc
`withValue` used incorrectly
...
Closes gh-16525
Closes gh-16527
Signed-off-by: NeoTraveler <55753029+NeoTraveler@users.noreply.github.com>
1 year ago
b32f4f1afc
Polish gh-16502
1 year ago
1fa1848f9f
Add HttpStatusAccessDeniedHandler
...
Signed-off-by: earlgrey02 <san06036@naver.com>
1 year ago
c7bc4c98db
Make PublicKeyCredentialRequestOptions Serializable
...
Closes gh-16432
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
d043884e32
Support Serialization
...
Issue gh-16276
1 year ago
e557c7227b
Implement Serializable for WebAuthnAuthentication
...
Closes gh-16273
Closes gh-16285
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
1 year ago
474b5e151a
Add Support GenerateOneTimeTokenRequestResolver
...
Closes gh-16291
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
bb8e757c4b
Fix GenerateOneTimeTokenWebFilter double publish of chain.filter(...)
...
closes gh-16458
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
1 year ago
3209930cca
Add TestBytes
...
Closes gh-16461
1 year ago
80e8e14500
Add GenerateOneTimeTokenFilterTests
1 year ago
Josh Cummings
Daeho Kwon
mmck328
Tran Ngoc Nhan
Max Batischev
AB
Rob Winch
Steve Riesenberg
yelm-212
topiam
tejas-teju
ying.li
Daniel Garnier-Moiroux
Craig Andrews
NeoTraveler
earlgrey02