spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	617353eaa8	Merge branch '5.8.x' Closes gh-11928	3 years ago
Rob Winch	6d56af7b65	SessionManagementDsl.requireExplicitAuthenticationStrategy	3 years ago
Josh Cummings	8f10deb602	Merge remote-tracking branch 'origin/5.8.x'	3 years ago
Josh Cummings	f054505d6d	Support Deferred Contexts Closes gh-11817 Issue gh-10913	3 years ago
Emil Sierżęga	fc7f87feac	Removed unused test classes SomeDomainObject/Manager	3 years ago
Steve Riesenberg	76fbca9f46	Merge branch '5.8.x'	3 years ago
Daniel Garnier-Moiroux	93250013e4	Make X-Xss-Protection configurable through ServerHttpSecurity OWASP recommends using "X-Xss-Protection: 0". The default is currently "X-Xss-Protection: 1; mode=block". In 6.0, the default will be "0". This commits adds the ability to configure the xssProtection header value in ServerHttpSecurity. This commit deprecates the use of "enabled" and "block" booleans to configure XSS protection, as the state "!enabled + block" is invalid. This impacts HttpSecurity. Issue gh-9631	3 years ago
Steve Riesenberg	43a1f8249c	Update What's New for 6.0	3 years ago
Steve Riesenberg	e0e6467d9b	Remove UsernamePasswordAuthenticationToken check This commit reverts `21dd050d7b`. Closes gh-10347	3 years ago
shazin	1e0e9a2c98	Allow authenticationIsRequired to be overridden Issue gh-10347	3 years ago
Steve Riesenberg	4d62621094	Merge branch '5.8.x'	3 years ago
Steve Riesenberg	7b1158ddb7	Merge branch '5.7.x' into 5.8.x	3 years ago
Steve Riesenberg	70c61dc1dd	Merge branch '5.6.x' into 5.7.x	3 years ago
Dan Allen	c44230ba24	switch to offical Antora plugin for Gradle - lock version to latest release of Antora 3.1 - rename properties on extension block - use Node.js version provided by plugin - remove package.json file - assign environment variables using environments property on extension block - use single quotes where possible in build script - use default setting for log format	3 years ago
Marcus Da Coregio	3bfdf6dd0f	Merge branch '5.8.x' Closes gh-11922	3 years ago
Marcus Da Coregio	cf3349f31a	Configure ContentNegotiationStrategy in HttpSecurityConfiguration Closes gh-11916	3 years ago
Marcus Da Coregio	7f0140278e	Add native hint for OAuth2 Client's schemas Closes gh-11920	3 years ago
Marcus Da Coregio	ef879aadd6	Add native hint for the users JDBC schema Closes gh-11907	3 years ago
Josh Cummings	88e4b8b556	Merge remote-tracking branch 'origin/5.8.x'	3 years ago
Josh Cummings	506e50bfd0	Move Saml2 Authentication Filters Issue gh-8819	3 years ago
Steve Riesenberg	6c6aedf772	Update What's New for 6.0	3 years ago
Steve Riesenberg	181ee7410b	Change default authority for oauth2Login() Previously, the default authority was ROLE_USER when using oauth2Login() for both OAuth2 and OIDC providers. * Default authority for OAuth2UserAuthority is now OAUTH2_USER * Default authority for OidcUserAuthority is now OIDC_USER Documentation has been updated to include this implementation detail. Closes gh-7856	3 years ago
Steve Riesenberg	7527fd811c	Merge branch '5.8.x'	3 years ago
Steve Riesenberg	bbac85e20b	Reduce severity of invalid registrationId to warn This prevents filling the log file with error messages when routine scans are being performed. Closes gh-11344	3 years ago
Steve Riesenberg	c0e784b16d	Update What's New for 6.0	3 years ago
Josh Cummings	80a6ce940e	Merge remote-tracking branch 'origin/5.8.x'	3 years ago
Josh Cummings	ae6fb8c681	Add Deprecated Versions of Original Classes Issue gh-7349	3 years ago
Josh Cummings	37a160245f	Adjust OAuth2 Resource Server packaging Closes gh-7349	3 years ago
Steve Riesenberg	21c0c73878	Remove request-resolver-ref in 6.0 Issue gh-11896	3 years ago
Steve Riesenberg	bcb21c9384	Merge branch '5.8.x' # Conflicts: # config/src/test/java/org/springframework/security/config/annotation/web/configuration/DeferHttpSessionJavaConfigTests.java	3 years ago
Steve Riesenberg	46696a9226	CsrfTokenRequestHandler extends CsrfTokenRequestResolver Closes gh-11896	3 years ago
Josh Cummings	53dbcfd457	Add Deprecated Versions of Original Classes Issue gh-7349	3 years ago
Steve Riesenberg	3c66ef6305	Change default SecurityContextRepository Save SecurityContext in request attributes for stateless session management using RequestAttributeSecurityContextRepository. Closes gh-11026	3 years ago
Steve Riesenberg	ccac34b07c	Merge branch '5.8.x'	3 years ago
Steve Riesenberg	d140d95305	Fix assertion in NullSecurityContextRepository Issue gh-11060	3 years ago
Steve Riesenberg	5d757919a2	Add SecurityContextHolderStrategy to new repository In 6.0, RequestAttributeSecurityContextRepository will be the default implementation of SecurityContextRepository. This commit adds the ability to configure a custom SecurityContextHolderStrategy, similar to other components. Issue gh-11060 Closes gh-11895	3 years ago
Rob Winch	0efe26c1fd	Merge branch '5.8.x' Closes gh-11894	3 years ago
Rob Winch	d94677f87e	CsrfTokenRequestAttributeHandler -> CsrfTokenRequestHandler This renames CsrfTokenRequestAttributeHandler to CsrfTokenRequestHandler and moves usage from CsrfFilter into CsrfTokenRequestHandler. Closes gh-11892	3 years ago
Josh Cummings	44b7847258	Fix Import Order Issue gh-8819	3 years ago
Josh Cummings	70460ca009	Adjust OAuth2 Resource Server packaging Closes gh-7349	3 years ago
Josh Cummings	61c80bcac5	Move Saml2 Authentication Filters Closes gh-8819	3 years ago
Rob Winch	48e31f87e4	Remove Deprecated OpenSAML 3 Support Closes gh-10556	3 years ago
Josh Cummings	2a487ae7f8	Updated hashcode and equals Closes gh-4133	3 years ago
Josh Cummings	e071c28e8a	Merge remote-tracking branch 'origin/5.8.x'	3 years ago
Evgeniy Cheban	c1d27612af	Simplify AuthorizationManager composition Closes gh-11625	3 years ago
Josh Cummings	46f402243b	Merge remote-tracking branch 'origin/5.8.x'	3 years ago
Josh Cummings	3f8503f1b4	Deprecate AccessDecisionManager et al Closes gh-11302	3 years ago
Marcus Da Coregio	63af5c9b03	Merge branch '5.8.x'	3 years ago
Marcus Da Coregio	983ca6ea27	Update What's New for 5.8	3 years ago
Marcus Da Coregio	2b4a3a85f9	Update What's New for 6.0	3 years ago

1 2 3 4 5 ...

11463 Commits (617353eaa8dbcf57574e3feac0380eb47f6426e9) All Branches Search

11463 Commits (617353eaa8dbcf57574e3feac0380eb47f6426e9)

All Branches