86599afd43
Rename servletPath to basePath
...
Closes gh-16765
9 months ago
c53bf2befe
PathPatternRequestParser Retains Servlet Path
...
Issue gh-16765
9 months ago
1966ff3ce8
Parse RequestPath when cache is empty
...
Closes gh-16771
9 months ago
861a9a914e
OneTimeToken Missing Token Propagates Request
...
Closes gh-16780
9 months ago
8199015e79
Add Support for AuthenticationConverter
...
Closes gh-16793
9 months ago
24b7287d55
Replace dynamic error message with static "Access Denied"
...
Closes gh-16514
Signed-off-by: Daeho Kwon <trewq231@naver.com>
9 months ago
5ded04da6c
Fix javadocs on WebFlux CSRF classes
...
Signed-off-by: mmck328 <20348295+mmck328@users.noreply.github.com>
9 months ago
ab6e9d2d1f
Clarify WebInvocationPrivilegeEvaluator JavaDoc
...
Closes gh-16529
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
9 months ago
a50a8b2f17
Improve JdbcPublicKeyCredentialUserEntityRepository save
...
Closes gh-16726
Signed-off-by: Max Batischev <mblancer@mail.ru>
9 months ago
1120733e27
Update Copyright
9 months ago
8e9634d25c
Deprecate ConfigAttribute
...
Closes gh-16774
9 months ago
989aee244b
Deprecate SecurityMetadataSource
...
Closes gh-16772
9 months ago
d9a937f0c1
Correct Closing Tag
...
Closes gh-16600
Signed-off-by: AB <a.bierler@xdev-software.de>
9 months ago
adb303e152
Add testRuntimeOnly junit-platform-launcher
...
Closes gh-16755
9 months ago
0938ca01a4
Add support for automatic context-propagation with Micrometer
...
Closes gh-16665
9 months ago
c7673e8f2f
Polish AbstractAuthenticationTargetUrlRequestHandler
...
PR gh-16557
Signed-off-by: Max Batischev <mblancer@mail.ru>
10 months ago
47630ca354
Fix JdbcUserCredentialRepository Save
...
Closes gh-16620
Signed-off-by: Max Batischev <mblancer@mail.ru>
10 months ago
58a665e5aa
Add Support SingleResultAuthorizationManager
...
Closes gh-16590
Signed-off-by: Max Batischev <mblancer@mail.ru>
10 months ago
cfefccad1f
Update Http403ForbiddenEntryPoint to Use HttpStatus
...
Closes gh-16615
Signed-off-by: yelm-212 <21yrshin@naver.com>
10 months ago
ab52fd858a
Deprecate ChannelDecisionManager
...
Closes gh-16681
10 months ago
2d96fba5cf
Add HttpsRedirectFilter
...
Closes gh-16678
10 months ago
e569c7a39e
Fix Tests
...
Issue gh-16517
10 months ago
85f0f3f34a
Support Custom RequestMatchers for WebAuthn
...
Closes gh-16517
Signed-off-by: topiam <support@topiam.cn>
10 months ago
9417f02790
Deprecate PortResolver
...
Closes gh-15972
10 months ago
5f5427bd03
PortResolver.NO_OP
...
Closes gh-16666
10 months ago
588220a020
Add PathPatterRequestMatcher
...
Closes gh-16429
Clsoes gh-16430
10 months ago
7fc5d50adf
Polish gh-16551
10 months ago
0ccbd20f0a
Add Support ServerFormPostRedirectStrategy
...
Closes gh-16542
Signed-off-by: Max Batischev <mblancer@mail.ru>
10 months ago
0bc9313fdd
Fix bug PublicKeyCredentialUserEntityRepository saves anonymousUser
...
Issue gh-16385
Signed-off-by: Borghi <137845283+Borghii@users.noreply.github.com>
10 months ago
c4b223266c
Return Invalid Credentials message on login error
...
Closes gh-16484
Signed-off-by: tejas-teju <tejas8196@gmail.com>
10 months ago
946812691e
Make AuthenticatorAttestation Serializable
...
Issue gh-16481
10 months ago
b5a4218a0b
Make WebAuthnAuthenticationRequestToken Serializable
...
Closes gh-16481
Signed-off-by: Max Batischev <mblancer@mail.ru>
10 months ago
879b44f9a1
Make PublicKeyCredentialRequestOptions Serializable
...
Closes gh-16432
Signed-off-by: Max Batischev <mblancer@mail.ru>
10 months ago
6494ea9b18
fix for typo
10 months ago
238f47ce5e
One Time Token login registers the default login page
...
closes gh-16414
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
10 months ago
5ee6b83953
Introduce OneTimeTokenAuthenticationFilter
...
closes gh-16539
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
10 months ago
be81377235
Add Support ServerGenerateOneTimeTokenRequestResolver
...
Closes gh-16488
Signed-off-by: Max Batischev <mblancer@mail.ru>
11 months ago
54a6a19e05
Polish gh-16214
...
This commit applies the following changes:
* Added local Content-Security-Policy with script-src nonce directive
* Removed form-redirect.js and associated changes
* Renamed to FormPostRedirectStrategy
* Removed HtmlUtils usage
* Moved to same package as DefaultRedirectStrategy
11 months ago
58534e7f60
Add FormRedirectStrategy to enable POST OIDC Logout
...
FormRedirectStrategy redirects using an autosubmitting HTML form using the POST method versus DefaultRedirectStrategy which redirects using the GET method.
Can be used to implement POST binding for relying party initiated OIDC logout by setting FormRedirectStrategy as the redirection strategy on OidcClientInitiatedLogoutSuccessHandler.
Closes gh-13002
Signed-off-by: Craig Andrews <candrews@integralblue.com>
11 months ago
61d92e9db9
Fix assertion message in DefaultGenerateOneTimeTokenRequestResolver
...
Signed-off-by: Max Batischev <mblancer@mail.ru>
11 months ago
e31f04bebc
`withValue` used incorrectly
...
Closes gh-16525
Closes gh-16527
Signed-off-by: NeoTraveler <55753029+NeoTraveler@users.noreply.github.com>
11 months ago
b32f4f1afc
Polish gh-16502
11 months ago
1fa1848f9f
Add HttpStatusAccessDeniedHandler
...
Signed-off-by: earlgrey02 <san06036@naver.com>
11 months ago
c7bc4c98db
Make PublicKeyCredentialRequestOptions Serializable
...
Closes gh-16432
Signed-off-by: Max Batischev <mblancer@mail.ru>
11 months ago
d043884e32
Support Serialization
...
Issue gh-16276
11 months ago
e557c7227b
Implement Serializable for WebAuthnAuthentication
...
Closes gh-16273
Closes gh-16285
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
11 months ago
474b5e151a
Add Support GenerateOneTimeTokenRequestResolver
...
Closes gh-16291
Signed-off-by: Max Batischev <mblancer@mail.ru>
11 months ago
bb8e757c4b
Fix GenerateOneTimeTokenWebFilter double publish of chain.filter(...)
...
closes gh-16458
Signed-off-by: Daniel Garnier-Moiroux <git@garnier.wf>
11 months ago
3209930cca
Add TestBytes
...
Closes gh-16461
11 months ago
80e8e14500
Add GenerateOneTimeTokenFilterTests
11 months ago
Josh Cummings
Daeho Kwon
mmck328
Tran Ngoc Nhan
Max Batischev
AB
Rob Winch
Steve Riesenberg
yelm-212
topiam
Borghi
tejas-teju
ying.li
Daniel Garnier-Moiroux
Craig Andrews
NeoTraveler
earlgrey02