spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	392129b616	Use 2004-present Copyright Header The Spring portfolio is changing to use <inception-year>-present in the copyright headers to simplify keeping headers up to date. This commit updates the headers and the checkstyle accordingly. The commit updated etc/checkstyle/header.txt It also updated the copyright headers using the following find/replace: Find: (Copyright \d{4})\s*(\-\d{4})? the original author or authors. Replace: Copyright 2004-present the original author or authors. Closes gh-17633	8 months ago
Andrey Litvitski	b0f8aa5ea0	Fix to allow multiple AuthenticationFilter instances to process each request Closes gh-17173 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	10 months ago
Josh Cummings	e48f26e51e	Propagate StrictFirewallRequest Wrapper Closes gh-16978	11 months ago
Max Batischev	c855453e40	Fix Typo In SubjectDnX509PrincipalExtractorTests Signed-off-by: Max Batischev <mblancer@mail.ru>	11 months ago
Josh Cummings	f93a7a2f85	Deprecate HandlerMappingIntrospectorRequestTransformer Closes gh-16536	12 months ago
chu3la	8cbe02e3aa	Update WebAuthn Test Objects Class Names Closes gh-16604 Signed-off-by: chu3la <elmansouri.houssam@gmail.com>	1 year ago
Josh Cummings	4cdc6dab21	Fix Formatting Issue gh-16604	1 year ago
Vasanth	04d7130975	Update WebAuthn Test Objects Class Names Renamed the WebAuthn test object class names Closes gh-16604 Signed-off-by: Vasanth <76898064+vasanth-79@users.noreply.github.com>	1 year ago
DingHao	857ef6fe08	WithHttpOnlyCookie defaults to false Closes gh-16820 Signed-off-by: DingHao <dh.hiekn@gmail.com>	1 year ago
Max Batischev	9a897d0b62	Add Support Postgres To JdbcUserCredentialRepository Closes gh-16832 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
wtigerhyunsu	bdbf6a2be3	Add toString() to IpAddressMatcher.java Closes gh-16795 Signed-off-by: wtigerhyunsu <jack951@naver.com>	1 year ago
Josh Cummings	99345537d6	Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter Issue gh-16417	1 year ago
Josh Cummings	1eec51ab6c	Polish SwitchUserFilterTests Ensure that the appropriate HTTP Method is specified in tests Issue gh-16417	1 year ago
Josh Cummings	de07b1108f	Use PathPatternRequestMatcher in Web Components This commit changes filters and resolvers that were using AntPathRequestMatcher as their default to using PathPatternRequestMatcher. Issue gh-16632	1 year ago
Josh Cummings	50ad378a29	Polish MockHttpServletRequest Usage This commit makes so that the requestURI is set to a value that makes sense with the other properties being mocked. Issue gh-16632	1 year ago
Rob Winch	a6b5c05da9	Additional WebAuthn4jRelyingPartyOperationTests - verify that anonymous users not saved - verify that when user found the CredentialRecord is allowed Issue gh-16385	1 year ago
Rob Winch	9c054474a8	Use Test Name Conventions Issue gh-16385	1 year ago
Borghi	e3a715b8f5	Fix issues identified in PR review Signed-off-by: Borghi <137845283+Borghii@users.noreply.github.com>	1 year ago
Josh Cummings	56e757a2a1	Provide Authentication to AuthenticationExceptions Issue gh-16444	1 year ago
Josh Cummings	464e506429	Polish ExceptionTranslateWebFilter - Isolated exception construction - Isolated entry point subscription Issue gh-16444	1 year ago
Josh Cummings	bfc12d55eb	Polish Tests Issue gh-16771	1 year ago
Josh Cummings	3d96878d43	Cache RequestPath In this way PathPatternRequestMatcher won't need to reparse for each request matcher. Issue gh-16771	1 year ago
Josh Cummings	86599afd43	Rename servletPath to basePath Closes gh-16765	1 year ago
Josh Cummings	c53bf2befe	PathPatternRequestParser Retains Servlet Path Issue gh-16765	1 year ago
Josh Cummings	861a9a914e	OneTimeToken Missing Token Propagates Request Closes gh-16780	1 year ago
Daeho Kwon	24b7287d55	Replace dynamic error message with static "Access Denied" Closes gh-16514 Signed-off-by: Daeho Kwon <trewq231@naver.com>	1 year ago
Steve Riesenberg	0938ca01a4	Add support for automatic context-propagation with Micrometer Closes gh-16665	1 year ago
Max Batischev	c7673e8f2f	Polish AbstractAuthenticationTargetUrlRequestHandler PR gh-16557 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Max Batischev	47630ca354	Fix JdbcUserCredentialRepository Save Closes gh-16620 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Max Batischev	58a665e5aa	Add Support SingleResultAuthorizationManager Closes gh-16590 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Josh Cummings	2d96fba5cf	Add HttpsRedirectFilter Closes gh-16678	1 year ago
Josh Cummings	e569c7a39e	Fix Tests Issue gh-16517	1 year ago
topiam	85f0f3f34a	Support Custom RequestMatchers for WebAuthn Closes gh-16517 Signed-off-by: topiam <support@topiam.cn>	1 year ago
Rob Winch	9417f02790	Deprecate PortResolver Closes gh-15972	1 year ago
Josh Cummings	588220a020	Add PathPatterRequestMatcher Closes gh-16429 Clsoes gh-16430	1 year ago
Steve Riesenberg	7fc5d50adf	Polish gh-16551	1 year ago
Max Batischev	0ccbd20f0a	Add Support ServerFormPostRedirectStrategy Closes gh-16542 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Borghi	0bc9313fdd	Fix bug PublicKeyCredentialUserEntityRepository saves anonymousUser Issue gh-16385 Signed-off-by: Borghi <137845283+Borghii@users.noreply.github.com>	1 year ago
tejas-teju	c4b223266c	Return Invalid Credentials message on login error Closes gh-16484 Signed-off-by: tejas-teju <tejas8196@gmail.com>	1 year ago
Max Batischev	b5a4218a0b	Make WebAuthnAuthenticationRequestToken Serializable Closes gh-16481 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Daniel Garnier-Moiroux	5ee6b83953	Introduce OneTimeTokenAuthenticationFilter closes gh-16539 Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>	1 year ago
Max Batischev	be81377235	Add Support ServerGenerateOneTimeTokenRequestResolver Closes gh-16488 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Steve Riesenberg	54a6a19e05	Polish gh-16214 This commit applies the following changes: * Added local Content-Security-Policy with script-src nonce directive * Removed form-redirect.js and associated changes * Renamed to FormPostRedirectStrategy * Removed HtmlUtils usage * Moved to same package as DefaultRedirectStrategy	1 year ago
Craig Andrews	58534e7f60	Add FormRedirectStrategy to enable POST OIDC Logout FormRedirectStrategy redirects using an autosubmitting HTML form using the POST method versus DefaultRedirectStrategy which redirects using the GET method. Can be used to implement POST binding for relying party initiated OIDC logout by setting FormRedirectStrategy as the redirection strategy on OidcClientInitiatedLogoutSuccessHandler. Closes gh-13002 Signed-off-by: Craig Andrews <candrews@integralblue.com>	1 year ago
Steve Riesenberg	b32f4f1afc	Polish gh-16502	1 year ago
earlgrey02	1fa1848f9f	Add HttpStatusAccessDeniedHandler Signed-off-by: earlgrey02 <san06036@naver.com>	1 year ago
Max Batischev	474b5e151a	Add Support GenerateOneTimeTokenRequestResolver Closes gh-16291 Signed-off-by: Max Batischev <mblancer@mail.ru>	1 year ago
Rob Winch	3209930cca	Add TestBytes Closes gh-16461	1 year ago
Max Batischev	80e8e14500	Add GenerateOneTimeTokenFilterTests	1 year ago
Josh Cummings	443af32314	Move Servlet Mocks to Web Issue gh-13551	1 year ago

1 2 3 4 5 ...

1180 Commits (5f0d44077c623257e8139bb9ba2143c155ceeba3)