Joe Grandja
e3c39f02bc
Add documentation for DPoP support
...
Closes gh-17072
11 months ago
Tran Ngoc Nhan
48eb243012
Update javadoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
11 months ago
Tran Ngoc Nhan
1e4dd713c5
Remove APPLICATION_JSON_UTF8 usage
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
11 months ago
Rob Winch
b453840c0a
HttpHeaders no longer a MultiValueMap
...
Closes gh-17060
11 months ago
Rob Winch
2dbf3a2d18
WebClient.exchange->exchangeToMono
...
Closes gh-17057
11 months ago
Rob Winch
5704582c52
ResponseErrorHandler.handleError(URI, HttpMethod,ClientHttpResponse)
...
Closes gh-17056
11 months ago
Rob Winch
11105a5c51
UriComponentsBuilder.fromHttpUrl->fromUriString
...
The fromHttpUrl method is deprecated and replaced with fromUriString
Closes gh-
11 months ago
Rob Winch
cb0fdef236
Remove MediaType.APPLICATION_JSON_UTF
...
Closes gh-17050
11 months ago
hammadirshad
1a4602c8c3
Add mapping for DPoP in DefaultMapOAuth2AccessTokenResponseConverter
...
Closes gh-16806
Signed-off-by: muha <muha@kreftregisteret.no>
11 months ago
Josh Cummings
f631a0fcd5
Polish ClientRegistrationsTests
...
Simplified the assertion so that it is focused on the core
behavior being verified. This will likely also make the test
more stable when updating Spring Framework versions.
Issue gh-16860
11 months ago
Evgeniy Cheban
0e84f31a00
Add ClientRegistration's RestClient failed attempts information to exception message
...
Closes gh-16860
Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>
11 months ago
Josh Cummings
eecd7d9559
Update Deprecated Reactor Usage
11 months ago
Josh Cummings
834370d8eb
Update Deprecated Spring Web Usage
11 months ago
Joe Grandja
19090e7873
Add request_uri in OAuth2ParameterNames
...
Closes gh-16947
11 months ago
Joe Grandja
791feee355
Prevent downgraded usage of DPoP-bound access tokens
...
Issue gh-16574
Closes gh-16937
11 months ago
Joe Grandja
1ca33cae70
Make DPoP IatClaimValidator public to allow configuring clock and clockSkew
...
Issue gh-16574
Closes gh-16921
12 months ago
Risto Virtanen
47e1fc045f
Formatted
...
Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>
12 months ago
Risto Virtanen
1db557e395
Replace ClientRegistrationMixinTests with StdConvertersTest
...
Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>
12 months ago
Risto Virtanen
368fe2e7a0
Add missing ClientAuthenticationMethods to jackson2 converter
...
Closes gh-16825
Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>
12 months ago
Steve Riesenberg
9d442c13de
Mark password grant for removal
...
This commit also updates link to the document "Best Current Practice for
OAuth 2.0 Security" to point to RFC 9700.
Closes gh-16913
12 months ago
Steve Riesenberg
197ee38aa0
Mark deprecated response clients for removal
...
Issue gh-16913
12 months ago
Tran Ngoc Nhan
d864e51ff6
Format OpaqueTokenIntrospector
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
12 months ago
Tran Ngoc Nhan
d899bc5240
Polish javadoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
12 months ago
Steve Riesenberg
1fb3fc80f9
Polish gh-15819
...
Closes gh-15818
12 months ago
Jonah Klöckner
9674532f4d
Add support for access token in body parameter as per rfc 6750 Sec. 2.2
...
Issue gh-15818
12 months ago
Steve Riesenberg
3c0fef59b5
Polish gh-16039
...
Closes gh-16038
12 months ago
Jonah Klöckner
da94fbe431
Evaluate URI query parameter only if enabled
...
Issue gh-16038
12 months ago
Josh Cummings
2885b0f75f
Add valueOf
...
This commit adds a static factory for returning a constant
ClientAuthenticationMethod or creating a new one when there
is no match.
Issue gh-16825
12 months ago
Tran Ngoc Nhan
7bca17cb5a
Polish
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
1 year ago
Josh Cummings
99345537d6
Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter
...
Issue gh-16417
1 year ago
Steve Riesenberg
860f130bc4
Add additional validation when refreshing ID tokens
...
Issue gh-16589
1 year ago
Steve Riesenberg
5f98ce5ecc
Polish gh-16589
1 year ago
Josh Cummings
de07b1108f
Use PathPatternRequestMatcher in Web Components
...
This commit changes filters and resolvers that were using AntPathRequestMatcher as their
default to using PathPatternRequestMatcher.
Issue gh-16632
1 year ago
Josh Cummings
56e757a2a1
Provide Authentication to AuthenticationExceptions
...
Issue gh-16444
1 year ago
Tran Ngoc Nhan
a53ca7c3d0
Update ServerOAuth2AuthorizedClientExchangeFilterFunction javadoc
...
Closes gh-16555
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
1 year ago
Josh Cummings
cfe70a5fc7
Restore authorizedClientParametersMapper Assertion
...
Issue gh-16726
1 year ago
Max Batischev
6c24a1e717
Improve JdbcOAuth2AuthorizedClientService saveAuthorizedClient
...
Closes gh-16726
Signed-off-by: Max Batischev <mblancer@mail.ru>
1 year ago
Steve Riesenberg
5bb5d0f6be
Polish gh-16589
1 year ago
Hao
fc1469ad5e
Ensure ID Token is updated after refresh token
...
Signed-off-by: Hao <kyrieeeee2@gmail.com>
1 year ago
Rob Winch
adb303e152
Add testRuntimeOnly junit-platform-launcher
...
Closes gh-16755
1 year ago
Steve Riesenberg
0938ca01a4
Add support for automatic context-propagation with Micrometer
...
Closes gh-16665
1 year ago
Vedran Pavic
401e237082
Introduce JwtAudienceValidator
...
Signed-off-by: Vedran Pavic <vedran@vedranpavic.com>
1 year ago
Josh Cummings
7df85a2ed9
Polish NimbusJwtDecoder
1 year ago
Josh Cummings
ab43a660b9
Add RFC 9068 Support
...
Closes gh-13185
1 year ago
Josh Cummings
81e2fd2fe8
Add Type Validation
...
Closes gh-16672
1 year ago
Pat McCusker
2bd3cadde8
Use possessive pronoun rather contraction
...
Signed-off-by: Pat McCusker <patmccusker14@gmail.com>
1 year ago
Pat McCusker
bfce6e438d
Add fourth oauth grant type to javadoc
...
Signed-off-by: Pat McCusker <patmccusker14@gmail.com>
1 year ago
Josh Cummings
b6c813c5a2
ClientRegistrations supports hostnames with underscores
...
Issue gh-15852
1 year ago
Josh Cummings
3d15be1b06
JwtDecoders Supports Hostnames with Underscores
...
In the process of verifying gh-15852, another issue with URI was discovered.
This commit adds tests to the uri-computing methods and changes them to use
UriComponents instead of URI.
Issue gh-15852
1 year ago
Bodo Graumann
0cd6a19b87
Avoid UriComponentsBuilder.fromUri
...
Closes gh-15852
1 year ago