spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	392129b616	Use 2004-present Copyright Header The Spring portfolio is changing to use <inception-year>-present in the copyright headers to simplify keeping headers up to date. This commit updates the headers and the checkstyle accordingly. The commit updated etc/checkstyle/header.txt It also updated the copyright headers using the following find/replace: Find: (Copyright \d{4})\s*(\-\d{4})? the original author or authors. Replace: Copyright 2004-present the original author or authors. Closes gh-17633	9 months ago
Joe Grandja	5f7155bfc7	Implement internal cache in JtiClaimValidator Closes gh-17107	11 months ago
Joe Grandja	a265ac6ae7	Polish gh-17080	11 months ago
David Kowis	2090f44f74	Fix DPoP jkt claim to be JWK SHA-256 thumbprint Just used the nimbus JOSE library to do it, because it already has a compliant implementation. Closes gh-17080 Signed-off-by: David Kowis <david@kow.is>	11 months ago
Joe Grandja	e3c39f02bc	Add documentation for DPoP support Closes gh-17072	11 months ago
hammadirshad	1a4602c8c3	Add mapping for DPoP in DefaultMapOAuth2AccessTokenResponseConverter Closes gh-16806 Signed-off-by: muha <muha@kreftregisteret.no>	12 months ago
Josh Cummings	f631a0fcd5	Polish ClientRegistrationsTests Simplified the assertion so that it is focused on the core behavior being verified. This will likely also make the test more stable when updating Spring Framework versions. Issue gh-16860	12 months ago
Evgeniy Cheban	0e84f31a00	Add ClientRegistration's RestClient failed attempts information to exception message Closes gh-16860 Signed-off-by: Evgeniy Cheban <mister.cheban@gmail.com>	12 months ago
Josh Cummings	eecd7d9559	Update Deprecated Reactor Usage	12 months ago
Josh Cummings	834370d8eb	Update Deprecated Spring Web Usage	12 months ago
Joe Grandja	19090e7873	Add request_uri in OAuth2ParameterNames Closes gh-16947	1 year ago
Joe Grandja	791feee355	Prevent downgraded usage of DPoP-bound access tokens Issue gh-16574 Closes gh-16937	1 year ago
Joe Grandja	1ca33cae70	Make DPoP IatClaimValidator public to allow configuring clock and clockSkew Issue gh-16574 Closes gh-16921	1 year ago
Risto Virtanen	47e1fc045f	Formatted Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>	1 year ago
Risto Virtanen	1db557e395	Replace ClientRegistrationMixinTests with StdConvertersTest Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>	1 year ago
Risto Virtanen	368fe2e7a0	Add missing ClientAuthenticationMethods to jackson2 converter Closes gh-16825 Signed-off-by: Risto Virtanen <818702+mapsu@users.noreply.github.com>	1 year ago
Steve Riesenberg	9d442c13de	Mark password grant for removal This commit also updates link to the document "Best Current Practice for OAuth 2.0 Security" to point to RFC 9700. Closes gh-16913	1 year ago
Steve Riesenberg	197ee38aa0	Mark deprecated response clients for removal Issue gh-16913	1 year ago
Tran Ngoc Nhan	d864e51ff6	Format OpaqueTokenIntrospector Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	1 year ago
Tran Ngoc Nhan	d899bc5240	Polish javadoc Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	1 year ago
Steve Riesenberg	1fb3fc80f9	Polish gh-15819 Closes gh-15818	1 year ago
Jonah Klöckner	9674532f4d	Add support for access token in body parameter as per rfc 6750 Sec. 2.2 Issue gh-15818	1 year ago
Steve Riesenberg	3c0fef59b5	Polish gh-16039 Closes gh-16038	1 year ago
Jonah Klöckner	da94fbe431	Evaluate URI query parameter only if enabled Issue gh-16038	1 year ago
Josh Cummings	2885b0f75f	Add valueOf This commit adds a static factory for returning a constant ClientAuthenticationMethod or creating a new one when there is no match. Issue gh-16825	1 year ago
Tran Ngoc Nhan	7bca17cb5a	Polish Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	1 year ago
Josh Cummings	99345537d6	Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter Issue gh-16417	1 year ago
Steve Riesenberg	860f130bc4	Add additional validation when refreshing ID tokens Issue gh-16589	1 year ago
Steve Riesenberg	5f98ce5ecc	Polish gh-16589	1 year ago
Josh Cummings	de07b1108f	Use PathPatternRequestMatcher in Web Components This commit changes filters and resolvers that were using AntPathRequestMatcher as their default to using PathPatternRequestMatcher. Issue gh-16632	1 year ago
Josh Cummings	56e757a2a1	Provide Authentication to AuthenticationExceptions Issue gh-16444	1 year ago
Tran Ngoc Nhan	a53ca7c3d0	Update ServerOAuth2AuthorizedClientExchangeFilterFunction javadoc Closes gh-16555 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	1 year ago
Josh Cummings	cfe70a5fc7	Restore authorizedClientParametersMapper Assertion Issue gh-16726	1 year ago
Max Batischev	6c24a1e717	Improve JdbcOAuth2AuthorizedClientService saveAuthorizedClient Closes gh-16726 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Steve Riesenberg	5bb5d0f6be	Polish gh-16589	1 year ago
Hao	fc1469ad5e	Ensure ID Token is updated after refresh token Signed-off-by: Hao <kyrieeeee2@gmail.com>	1 year ago
Rob Winch	adb303e152	Add testRuntimeOnly junit-platform-launcher Closes gh-16755	1 year ago
Steve Riesenberg	0938ca01a4	Add support for automatic context-propagation with Micrometer Closes gh-16665	1 year ago
Vedran Pavic	401e237082	Introduce JwtAudienceValidator Signed-off-by: Vedran Pavic <vedran@vedranpavic.com>	1 year ago
Josh Cummings	7df85a2ed9	Polish NimbusJwtDecoder	1 year ago
Josh Cummings	ab43a660b9	Add RFC 9068 Support Closes gh-13185	1 year ago
Josh Cummings	81e2fd2fe8	Add Type Validation Closes gh-16672	1 year ago
Pat McCusker	2bd3cadde8	Use possessive pronoun rather contraction Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	1 year ago
Pat McCusker	bfce6e438d	Add fourth oauth grant type to javadoc Signed-off-by: Pat McCusker <patmccusker14@gmail.com>	1 year ago
Josh Cummings	b6c813c5a2	ClientRegistrations supports hostnames with underscores Issue gh-15852	1 year ago
Josh Cummings	3d15be1b06	JwtDecoders Supports Hostnames with Underscores In the process of verifying gh-15852, another issue with URI was discovered. This commit adds tests to the uri-computing methods and changes them to use UriComponents instead of URI. Issue gh-15852	1 year ago
Bodo Graumann	0cd6a19b87	Avoid UriComponentsBuilder.fromUri Closes gh-15852	1 year ago
Steve Riesenberg	7fc5d50adf	Polish gh-16551	1 year ago
Max Batischev	00cd95be76	Add setRedirectStrategy to OidcClientInitiatedServerLogoutSuccessHandler Closes gh-16556 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Josh Cummings	6793334575	Polish setJwkSelector Make so that it runs only when selection is needed. Require the provided selector be non-null. Add Tests. Issue gh-16170	1 year ago

1 2 3 4 5 ...

1362 Commits (48680496860686ec6248cba6747eec3f1069a29e)