spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	eecd7d9559	Update Deprecated Reactor Usage	8 months ago
Joe Grandja	791feee355	Prevent downgraded usage of DPoP-bound access tokens Issue gh-16574 Closes gh-16937	8 months ago
Tran Ngoc Nhan	d864e51ff6	Format OpaqueTokenIntrospector Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	8 months ago
Tran Ngoc Nhan	d899bc5240	Polish javadoc Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	8 months ago
Steve Riesenberg	1fb3fc80f9	Polish gh-15819 Closes gh-15818	8 months ago
Jonah Klöckner	9674532f4d	Add support for access token in body parameter as per rfc 6750 Sec. 2.2 Issue gh-15818	8 months ago
Steve Riesenberg	3c0fef59b5	Polish gh-16039 Closes gh-16038	8 months ago
Jonah Klöckner	da94fbe431	Evaluate URI query parameter only if enabled Issue gh-16038	8 months ago
Tran Ngoc Nhan	7bca17cb5a	Polish Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	9 months ago
Josh Cummings	56e757a2a1	Provide Authentication to AuthenticationExceptions Issue gh-16444	9 months ago
Rob Winch	adb303e152	Add testRuntimeOnly junit-platform-launcher Closes gh-16755	9 months ago
Joe Grandja	2480d41981	Add support for OAuth 2.0 Demonstrating Proof of Possession (DPoP) Signed-off-by: Joe Grandja <10884212+jgrandja@users.noreply.github.com>	10 months ago
Tran Ngoc Nhan	aced3bcf16	Encode Introspection clientId and clientSecret Closes gh-15988 Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>	11 months ago
Josh Cummings	244fd2eb51	Support Serialization in Exceptions Issue gh-16276	11 months ago
Josh Cummings	018e1ae1a4	Added Serialization Values Issue gh-16276	1 year ago
Josh Cummings	b9911fd522	Add serialVersionUID to Authentication classes Issue gh-16276	1 year ago
Steve Riesenberg	86f3cd6dc7	Polish gh-15940 Closes gh-15885	1 year ago
Hyeongi Jeong	4c6fef82b9	Fix error when Bearer token is requested with empty string Issue gh-15885	1 year ago
Josh Cummings	8a972917fa	Deprecate Nimbus(Reactive)OpaqueTokenIntrospector Issue gh-14245	1 year ago
Tran Ngoc Nhan	31f8caec5f	Polish diamond operator usage	1 year ago
Thomas Darimont	b06c40d9ef	Add ExpressionJwtGrantedAuthoritiesConverter to extract authorities with an expression This helps to reduce custom code necessary to extract roles from deeply nested claims. Closes #15201 Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>	1 year ago
Daniel Garnier-Moiroux	79fb0113c8	Bump io-spring-javaformat from 0.0.42 to 0.0.43 Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43. Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) --- updated-dependencies: - dependency-name: io.spring.javaformat:spring-javaformat-checkstyle dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin dependency-type: direct:production update-type: version-update:semver-patch ... --- Manual updates: - Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST be used together Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
Daniel Garnier-Moiroux	2caf1fb6b4	Bump io-spring-javaformat from 0.0.42 to 0.0.43 Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43. Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) --- updated-dependencies: - dependency-name: io.spring.javaformat:spring-javaformat-checkstyle dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin dependency-type: direct:production update-type: version-update:semver-patch ... --- Manual updates: - Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST be used together Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
Josh Cummings	5c1a108b8b	Remove Stray JavaDoc Statement As of the 5.2 release, a separate registrar bean was no longer necessary Closes gh-15425	1 year ago
Josh Cummings	dd5edeb255	Preserve ArrayListFromString Type Closes gh-15165	2 years ago
Marcus Hert Da Coregio	08f11f06ab	Revert unnecessary commits from main Issue gh-15016	2 years ago
Josh Cummings	0af0751cfd	Treat Map Method Parameter as Immutable Closes gh-14802	2 years ago
Josh Cummings	10d88cdf28	Polish Introspection Authentication Converter - Added Reactive Support - Separated SCOPE claim and authorities work - Adjusted for style Issue gh-14198	2 years ago
ahmd-nabil	8279b22940	Add Introspection Authentication Converter Closes #14198 Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>	2 years ago
Steve Riesenberg	9db33f33c7	Revert unnecessary merges on 6.0.x This commit removes unnecessary main-branch merges starting from `8750608b5b` and adds the following needed commit(s) that were made afterward: - `5dce82c48b`	2 years ago
Marcus Da Coregio	64e2a2ff8b	Apply updated Code Style Closes gh-13881	2 years ago
Josh Cummings	fed3de8dce	Remove Logging of Untrusted Data	2 years ago
Josh Cummings	3307c656f4	Polish - Added JavaDoc @since attribute - Added Predicate based test - Adjusted test names Issue gh-13427	2 years ago
Baljit Singh	e1bae73703	add factory methods for Jwt issuer resolvers Closes gh-13427	2 years ago
Baljit Singh	7a713cab6f	improve performance of Jwt issuer resolvers	2 years ago
Baljit Singh	da35fa0485	make logging consistent for Jwt issuer resolvers	2 years ago
Baljit Singh	af00be8a3d	fix Javadocs for Jwt issuer resolvers	2 years ago
Josh Cummings	6c3636d780	Update Removed Usages Issue gh-13544	2 years ago
Claudio Nave	52e12ad64b	Replace deprecated methods	3 years ago
Krzysztof Krason	9b603b99ab	Using modern Java features	3 years ago
Vedran Pavic	6f8ec3df60	Ensure access token isn't resolved from query for form-encoded requests Closes gh-5668	3 years ago
Marcus Kainth	f0ef54050e	Add ability to set principalClaimName in ReactiveJwtAuthenticationConverter Closes #12907	3 years ago
ch4mpy	7ad4ebd07a	Allow authentication details to be set by converter Prevent JwtAuthenticationProvider from setting authentication details when jwtAuthenticationConverter returned an authentication instance with non null details. Closes gh-11822	3 years ago
Josh Cummings	cd0f02de49	Polish authorities claim delimiter PR gh-12074	3 years ago
Patrick Walter	9c9fd9f4bd	Add configurable authorities split regex Before this commit splitting the authorities claim was done by a hardcoded regex " ". This commit allows to configure to set any regex to split the authorities claim while keeping the previously hardcoded regex as a default. Closes gh-12074	3 years ago
Josh Cummings	5fe59cc635	Revert "Add configurable authorities split regex" This reverts commit `e93ed6d94c`. This can't be merged until after the 6.0 release	3 years ago
Patrick Walter	e93ed6d94c	Add configurable authorities split regex Before this commit splitting the authorities claim was done by a hardcoded regex " ". This commit allows to configure to set any regex to split the authorities claim while keeping the previously hardcoded regex as a default.	3 years ago
Josh Cummings	f4cc27c375	Change Default for (Server)AuthenticationEntryPointFailureHandler Closes gh-9429	3 years ago
Josh Cummings	099aaa33ff	Remove Deprecation Markers Since Spring Security still needs these methods and classes, we should wait on deprecating them if we can. Instead, this commit changes the original classes to have a boolean property that is currently false, but will switch to true in 6.0. At that time, BearerTokenAuthenticationFilter can change to use the handler. Closes gh-11932	3 years ago
Daniel Garnier-Moiroux	200b7fecd3	Add (Server)AuthenticationEntryPointFailureHandlerAdapter Issue gh-11932, gh-9429 (Server)AuthenticationEntryPointFailureHandler should produce HTTP 500 instead when an AuthenticationServiceException is thrown, instead of HTTP 401. This commit deprecates the current behavior and introduces an opt-in (Server)AuthenticationEntryPointFailureHandlerAdapter with the expected behavior. BearerTokenAuthenticationFilter uses the new adapter, but with a closure to keep the current behavior re: entrypoint.	3 years ago

1 2 3 4 5 ...

251 Commits (5abbcecccc1e0b1795f28eaa9dde02cc729145fe)