spring-security

Commit Graph

Author	SHA1	Message	Date
Ankur Pathak	4ff51491d7	fixes setting paramName only when it is not null Fixes: gh-6223	7 years ago
Onur Kagan Ozcan	fe40e6d65a	Fix UsernamePasswordAuthenticationTokenDeserializer to handle customized object mapper inclusion settings Resolves #4698	7 years ago
Panayiotis Vlissidis	4123d96cd5	JdbcUserDetailsManager handles extra UserDetails attributes Check ResutSetMetaData to see if extra columns are present in order to also handle the UserDetails attributes: accountNonExpired, accountNonLocked and credentialsNonExpired. Fixes gh-4399	7 years ago
Joe Grandja	be23ab8114	AuthenticationFailureEvent should publish once Fixes gh-6281	7 years ago
Robbie Martinus	e60ae4984a	Add hasAnyAuthority() and hasAnyRole() in AuthorizeExchangeSpec Fixes gh-6306	7 years ago
Richard Valdivieso	cb0ea0241b	Spring Security provides a DelegatingSecurityContextRunnable abstraction for Runnable that can be used for async and scheduled tasks. The primary contract for task scheduling is TaskScheduler and there's no such wrapper available at the moment. The new DelegatingSecurityContextTaskScheduler class implements TaskScheduler interface. Fixes gh-6043	7 years ago
mibo	60e3bf4093	Add Anonymous Support to AuthenticatedReactiveAuthorizationManager Fixes: gh-6235	7 years ago
Eric Deandrea	4178c92741	Add Reactive Support for UserDetailsChecker Integrate UserDetailsChecker into ReactiveAuthenticationManager and OAuth2 resource server authentication converters. Fixes gh-6219	7 years ago
dperezcabrera	898d005a53	InMemoryUserDetailsManager.updatePassword case-insenstive Previously updatePassword was case sensitive which was inconsistent with the rest of the class. This commit updates updatePassword to be case insensitive. Fixes: gh-6039	7 years ago
Josh Cummings	7d3302f52b	Polish Test Name So that it adheres to methodNameWhenConditionThenVerification naming convention. Issue: gh-3743	7 years ago
Karl Goffin	50d26c9d28	Polish Logging and Tests Removing debug statements which would have prematurely terminated the stream, changing to AssertJ, and adding another test. Issue: gh-3743	7 years ago
Karl Goffin	92e68a589a	PostFilter Support for Streams Users can return a Stream from a @PostFilter-annotated method. Fixes: gh-3743	7 years ago
Johnny Lim	68878a1675	Replace isEqualTo(null) with isNull()	8 years ago
Rob Winch	a66b945ab7	Configuration for ReactiveUserDetailsPasswordService Issue: gh-2778	8 years ago
Rob Winch	72a267a311	UserDetailsRepositoryReactiveAuthenticationManager uses ReactiveUserDetailsPasswordService Issue: gh-2778	8 years ago
Rob Winch	ed8218a2b0	ReactiveUserDetailsPasswordService Issue: gh-2778	8 years ago
Rob Winch	7aaf70d582	DaoAuthenticationProvider supports password upgrades Issue: gh-2778	8 years ago
Rob Winch	cabd0a5579	UserDetailsPasswordService Issue: gh-2778	8 years ago
Rob Winch	4d1c8f26c5	Add DelegatingReactiveAuthenticationManager Fixes: gh-5448	8 years ago
Rob Winch	bb11a81857	Add UserDetailsRepositoryReactiveAuthenticationManager.setScheduler Fixes: gh-5417	8 years ago
Rob Winch	8fa6dd0f5b	Revert "Fix SecuredAnnotationSecurityMetadataSourceTests -> Related SPR-16677" This reverts commit `d4e459874a`.	8 years ago
이경욱	26bc6be850	Support whitespace characters using RoleHierarchyImpl	8 years ago
이경욱	6adbe8dae0	Support whitespace characters using RoleHierarchyImpl	8 years ago
Joe Grandja	d4e459874a	Fix SecuredAnnotationSecurityMetadataSourceTests -> Related SPR-16677	8 years ago
Rob Winch	b1d013e8f0	Fix JDK 9 Issue: gh-5160	8 years ago
Josh Cummings	776b378a1d	Authorities authenticate TestingAuthenticationToken In other extensions of `AbstractAuthenticationToken`, the constructors that include `authorities` call `setAuthenticated(true)`. This includes `PreAuthenticated`-, `UsernamePassword`-, and `RememberMeAuthenticationToken`. This change brings `TestingAuthenticationToken` in line with that convention. Note that this was done once already to one of the constructors (`ee13be4`) in `TestingAuthenticationToken` that takes an arity of `authorities`. It was not propagated to the constructor that takes a collection, which is what this commit remedies. Fixes: gh-5073	8 years ago
ylombardi	1d0e97880d	Add the BadCredentialsExceptionMixin to help Jackson serialization of BadCredentialsException	8 years ago
Johnny Lim	d316803596	Polish DaoAuthenticationProviderTests	8 years ago
Rob Winch	8b7f772761	Update to Jackson 2.9.4 Fixes: gh-4985	8 years ago
Rob Winch	f7e49ace9f	Add TestAuthentication	8 years ago
Rob Winch	6ba225b62d	Polish userNotFoundEncodedPassword Ensure that if passwordEncoder is set that userNotFoundEncodedPassword is encoded again if already set. Issue: gh-4915	8 years ago
Johnny Lim	f3830eec7d	Rename userDetailsRepository to userDetailsService	8 years ago
Rob Winch	803cdcf01e	Test Jackson HashMap in Whitelist Issue: gh-4889	8 years ago
Johnny Lim	921157cdcd	Remove explicit super() calls	8 years ago
Johnny Lim	57353d18e5	Use diamond type	8 years ago
Rob Winch	c856c376df	Fix UTF-8 in JdbcDaoImplTests	8 years ago
Joe Grandja	e19fdb6cc1	Remove AuthenticatedPrincipal from UserDetails Issue gh-4877	8 years ago
Rob Winch	691bf2e11d	PasswordEncoder Bean for AuthenticationManagerBuilder Issue: gh-4873	8 years ago
Johnny Lim	701933c7f7	Fix copyright start years See gh-4655 See gh-4725	8 years ago
Johnny Lim	5f518d00e5	Apply Checkstyle EmptyStatementCheck module This commit adds Checkstyle `EmptyStatementCheck` module and aligns code with it.	8 years ago
Johnny Lim	b6895e6359	Apply Checkstyle WhitespaceAfterCheck module	8 years ago
Johnny Lim	d900f2a623	Remove unused imports This commit also adds UnusedImportsCheck Checkstyle module.	8 years ago
Rob Winch	d9abd2e443	User.UserBuilder only encodes once Fixes gh-4794	8 years ago
Greg Turnquist	881cd0befb	Fix UsernamePasswordAuthenticationTokenMixin to handle null credentials/details Resolves #4698	8 years ago
Rob Winch	e95430fa36	Polish Reactive Method Security reference Issue gh-4757	8 years ago
Frank Pavageau	35706ad60a	Deserialize the principal in a neutral way When the principal of the Authentication is an object, it is not necessarily an User: it could be another implementation of UserDetails, or even a completely unrelated type. Since the type of the object is serialized as a property and used by the deserialization anyway, there's no point in enforcing a stricter type.	8 years ago
Antoine	0771778b81	Polish more AssertJ assertions	8 years ago
Antoine	e0aca04a28	Polish AssertJ assertions Polish AssertJ assertions	8 years ago
Rob Winch	9ea4df5b5d	ReactiveSecurityContextHolder Fixes gh-4713	8 years ago
Rob Winch	8291f20796	DaoAuthenticationProvider uses DelegatingPasswordEncoder This means that passwords will be encoded with BCrypt by default Fixes: gh-2775	8 years ago

1 2 3 4 5 ...

1130 Commits (4d1a23b6b401c195428e5bfdd9fd954c08e2548f)