spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Da Coregio	7983c695e2	Fix mvcMatchers overriding previous paths Closes gh-10956	4 years ago
Marcus Da Coregio	15b3744dcf	Fix setServletContext not being called for AuthorizationManagerWebInvocationPrivilegeEvaluator Issue gh-10908	4 years ago
Josh Cummings	040a28a8c9	Replace Apache Commons Base64 Decoding Issue gh-10923	4 years ago
Josh Cummings	a09f6e15ad	Polish ignoring() log messaging - Public API remains unchanged Issue gh-9334	4 years ago
Manuel Jordan	7e0302be5c	Print ignore message DefaultSecurityFilterChain When either `web.ignoring().mvcMatchers(...)` or `web.ignoring().antMatchers(...)` methods are used, for all their variations, the DefaultSecurityFilterChain class now indicates correctly through its ouput what paths are ignored according the `ignoring()` settings. Closes gh-9334	4 years ago
Marcus Da Coregio	a763382c3e	Make source code compatible with JDK 8 Closes gh-10695	4 years ago
Marcus Da Coregio	ba810e468f	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Rob Winch	e4a76b0ec9	Checkstyle Fixes - Javadoc tag ordering - Private constructors before inner classes Issue gh-10394	5 years ago
Josh Cummings	97dfabe92e	Polish SecurityNamespaceHandler Tests Issue gh-8974	5 years ago
Emil Sierżęga	944463e19a	SecurityNamespaceHandler: update schema version to 5.5 Closes gh-8974	5 years ago
Marcus Da Coregio	f45b990b4b	Allow SAML 2.0 loginProcessingURL without registrationId Closes gh-10176	5 years ago
Marcus Da Coregio	816e847af2	Allow SAML 2.0 loginProcessingURL without registrationId Closes gh-10176	5 years ago
Derek Van Blerkom	2bdaa31f72	Fix return type to allow further security config Issue gh-10245	5 years ago
Derek Van Blerkom	9a1f04c08f	Fix return type to allow further security config Issue gh-10245	5 years ago
Derek Van Blerkom	c55f1f8bea	Fix return type to allow further security config Issue gh-10245	5 years ago
Abdul Al-Faraj	ba16d91971	Improve OpenSAML Version Check Closes gh-10077	5 years ago
/usr/local/ΕΨΗΕΛΩΝ	2c1126c5aa	Improve AuthenticationManagerBeanDefinitionParser XML parsing Closes gh-7282	5 years ago
/usr/local/ΕΨΗΕΛΩΝ	5b1221a846	Improve AuthenticationManagerBeanDefinitionParser XML parsing Closes gh-7282	5 years ago
/usr/local/ΕΨΗΕΛΩΝ	50a17f58db	Improve AuthenticationManagerBeanDefinitionParser XML parsing Closes gh-7282	5 years ago
/usr/local/ΕΨΗΕΛΩΝ	61284ce22d	Improve AuthenticationManagerBeanDefinitionParser XML parsing Closes gh-7282	5 years ago
Eleftheria Stein	e313e6b89a	Apply DefaultLoginPageConfigurer before logout If they are not applied in this order, then the LogoutConfigurer cannot set the logoutSuccessUrl, because the DefaultLoginPageGeneratingFilter does not exist yet. This impacts users that inject the default HttpSecurity bean. Closes gh-9973	5 years ago
Eleftheria Stein	fdd017d935	Apply DefaultLoginPageConfigurer before logout If they are not applied in this order, then the LogoutConfigurer cannot set the logoutSuccessUrl, because the DefaultLoginPageGeneratingFilter does not exist yet. This impacts users that inject the default HttpSecurity bean. Closes gh-9973	5 years ago
Eleftheria Stein	f91608dcba	Disable default logout page when logout disabled Closes gh-9475	5 years ago
Eleftheria Stein	442c9cbf38	Disable default logout page when logout disabled Closes gh-9475	5 years ago
Eleftheria Stein	0c1bce5c82	Disable default logout page when logout disabled Closes gh-9475	5 years ago
Eleftheria Stein	cb4bb463da	Disable default logout page when logout disabled Closes gh-9475	5 years ago
Marcus Hert da Coregio	5a4cfe1226	Fix Adding Filter Relative to Custom Filter Closes gh-9787	5 years ago
Marcus Hert da Coregio	e16b88c9d5	Fix Adding Filter Relative to Custom Filter Closes gh-9787	5 years ago
Marcus Hert da Coregio	ac371d5de6	Fix Adding Filter Relative to Custom Filter Closes gh-9787	5 years ago
Marcus Hert da Coregio	53870ab3de	Fix Adding Filter Relative to Custom Filter Closes gh-9787	5 years ago
Joe Grandja	e51ca79954	Document Jwt Client Authentication support Closes gh-9578	5 years ago
Joe Grandja	f874a12ddb	Document jwt-bearer authorization grant Closes gh-9580	5 years ago
Josh Cummings	ca2bc4feb3	Bump Schema Version Closes gh-9694	5 years ago
Josh Cummings	4d564ffb50	Update AuthorizationManager references Issue gh-9692	5 years ago
Josh Cummings	17cfc6ade3	Inline ResourceKeyConverterAdapter Closes gh-9689 Closes gh-9626	5 years ago
Eleftheria Stein	de0cd11a72	Fix PreAuthorize when returning Kotlin Flow Closes gh-9676	5 years ago
Joe Grandja	99db0ca2c5	WebFlux httpBasic() matches on XHR requests Closes gh-9660	5 years ago
Joe Grandja	c8b6dc390d	WebFlux httpBasic() matches on XHR requests Closes gh-9660	5 years ago
Joe Grandja	6725b1324a	WebFlux httpBasic() matches on XHR requests Closes gh-9660	5 years ago
Joe Grandja	53e94bca45	Add oauth2Login() tests Issue gh-9548 gh-9660 gh-9266	5 years ago
Joe Grandja	5afeaa3ce7	WebFlux httpBasic() matches on XHR requests Closes gh-9660	5 years ago
Rob Winch	adf3e94c9f	Fix HttpSecurity.addFilter* Ordering Closes gh-9633	5 years ago
Rob Winch	6c5e92fb0b	Fix HttpSecurity.addFilter* Ordering Closes gh-9633	5 years ago
Rob Winch	26788a7309	Fix HttpSecurity.addFilter* Ordering Closes gh-9633	5 years ago
Rob Winch	a31a855146	Fix HttpSecurity.addFilter* Ordering Closes gh-9633	5 years ago
Denis Washington	521706d496	Limit oauth2Login() links to redirect-based flows This prevents the generated login page from showing links for authorization grant types like "client_credentials" which are not redirect-based, and thus not meant for interactive use in the browser. Closes gh-9457	5 years ago
Denis Washington	d3af4f7354	Limit oauth2Login() links to redirect-based flows This prevents the generated login page from showing links for authorization grant types like "client_credentials" which are not redirect-based, and thus not meant for interactive use in the browser. Closes gh-9457	5 years ago
Denis Washington	67d5520194	Limit oauth2Login() links to redirect-based flows This prevents the generated login page from showing links for authorization grant types like "client_credentials" which are not redirect-based, and thus not meant for interactive use in the browser. Closes gh-9457	5 years ago
Denis Washington	2b4b856b32	Limit oauth2Login() links to redirect-based flows This prevents the generated login page from showing links for authorization grant types like "client_credentials" which are not redirect-based, and thus not meant for interactive use in the browser. Closes gh-9457	5 years ago
Josh Cummings	163b5943ca	Revert AuthorizationManager Method Security	5 years ago

1 2 3 4 5 ...

1605 Commits (51a14799207df362c0d2c78ea37cda21b697b251)