spring-security

Commit Graph

Author	SHA1	Message	Date
Eleftheria Stein	67d2efde1c	Resolve package tangles with security marker annotation	6 years ago
Eleftheria Stein	bc272ddf73	Resolve package tangles in Kotlin server package	6 years ago
Eleftheria Stein	0a42aa26c8	Mock request with non-standard HTTP method in test Fixes gh-8594	6 years ago
Craig Andrews	f1db7167cb	Polish Use `getBeanOrNull` in `registerDelegateApplicationListener` to simplify implementation. This change does not alter behavior.	6 years ago
Craig Andrews	dbdeec4216	Check for an existing SessionRegistry bean If a SessionRegistry is necessary, check for one in the ApplicationContext before creating one.	6 years ago
Evgeniy Cheban	0fa339f75b	Allow port=0 for ApacheDSContainer Fixes gh-8144	6 years ago
justmehyp	06254a4fd4	Remove unused field 'digester' in Md4PasswordEncoder `private Digester digester;` defined in Md4PasswordEncoder is never used. So remove it.	6 years ago
Mazharul Islam	bf9e8295d6	mentioning the default strength of BCryptPasswordEncoder	6 years ago
Thomas Turrell-Croft	014df98ebb	Polish * Correct documented default schema to match default schema exposed as classpath resource * Fix Java example of adding users to JdbcUserDetailsManager	6 years ago
Maksim Vinogradov	4f58576952	Prevent StackOverflowError for AccessControlEntryImpl.hashCode Getting StackOverflowError when invoke AclImpl.hashCode because of cross-references between AclImpl and AccessControlEntryImpl Remove from AccessControlEntryImpl.hashCode method invocation of acl.hashCode fixes gh-5401	6 years ago
Astushi Yoshikawa	f08ca4e688	Throw exception if URL does not include context path when context relative Issue: gh-8399	6 years ago
Rob Winch	dc514b369e	FilterInvocation Support Default Methods on HttpServletRequest Closes gh-8566	6 years ago
Andreas Volkmann	16b0a268d9	Update index.adoc	6 years ago
Josh Cummings	9a72654b8d	Update to jQuery 3.5.1 Fixes gh-8557	6 years ago
Josh Cummings	c519d726ed	Polish hellojs Sample - Apply timestamp to composed messages - Remove unnecessary $.map call - Add password encoder prefix to password Fixes gh-8555 Fixes gh-8556	6 years ago
Josh Cummings	b04b34ba85	Fix Logout in OpenID Sample Fixes gh-8554	6 years ago
Dávid Kovács	4ab9da1c53	Object ID Identicy conversion to long fails on old schema This change fixed a bug which tried to convert non-string object as string Fixes gh-7621	6 years ago
Josh Cummings	51a0cffd36	Post-process AuthenticationRequestFilter Fixes gh-8552	6 years ago
Josh Cummings	8e7c4c143c	Add TestSaml2AuthenticationRequestContexts Issue gh-8552	6 years ago
Josh Cummings	9241cd2892	Move TestRelyingPartyRegistrations Fixes gh-8551	6 years ago
Josh Cummings	7c7934c052	Remove Extra TestSaml2X509Credentials This class is a duplicate of the one already in org.springframework.security.saml2.credentials Issue gh-8404	6 years ago
cbornet	bfb401eeed	Create the CSRF token on the bounded elactic scheduler The CSRF token is created with a call to UUID.randomUUID which is blocking. This change ensures this blocking call is done on the bounded elastic scheduler which supports blocking calls. Fixes gh-8128	6 years ago
Parikshit Dutta	1e211b6558	Add RequestCache setter in OAuth2AuthorizationCodeGrantFilter Fixes gh-8120	6 years ago
Joe Grandja	c1abc9b134	Polish gh-8501	6 years ago
Thomas Vitale	78fa859798	Add issuerUri to ClientRegistration.providerDetails - Add "issuerUri" attribute to ClientRegistration.providerDetails for OpenID Connect Discovery 1.0 or OAuth 2.0 Authorization Server Metadata. - Validate OidcIdToken "iss" claim against the OpenID Provider "issuerUri" value. - Update documentation for client registration: it includes issuer-uri property now. Fixes gh-8326	6 years ago
Dávid Kovács	db4ca1f756	Document NoOpPasswordEncoder will not be removed This commit adds extension to deprecation notice. Fixes gh-8506	6 years ago
Rob Winch	bb05603b3c	AbstractUserDetailsReactiveAuthenticationManager uses boundidElastic() Some JVMs have blocking operations when accessing SecureRandom and thus this needs to be performed in a pool that is larger than the number of CPUs Closes gh-7522	6 years ago
Rob Winch	e5d2aaf6fe	Deprecate OpenID 2.0 support Deprecate OpenID 2.0 support	6 years ago
Mathieu Ouellet	cd08102b93	Add debug logging Goal is to provide insight to devs on: - Authentication & Authorization success/failures - WebSession & SecurityContext - Request matchers, cache & authn/authz flow Fixes gh-5758	6 years ago
Rob Winch	8d447633f4	Fix non-standard HTTP method for CsrfWebFilter Closes gh-8452	6 years ago
Rob Winch	4473dca022	Polish matchesRequireCsrfProtectionWhenNonStandardHTTPMethodIsUsed Issue gh-8149	6 years ago
Parikshit Dutta	0f92415395	Fix non-standard HTTP method for CsrfWebFilter Closes gh-8149	6 years ago
Artyom Tarynin	6db514a4e2	Update AntPathRequestMatcher.java Fixed typo in JavaDoc. Actually, In these two cases, we are calling the constructor with a `boolean caseSensitive` which is equal to true. This means case sensitive	6 years ago
Eleftheria Stein	1aadbb2f4d	Remove "/path/**/other" patterns in tests Fixes gh-8513	6 years ago
Jean-Pierre Bergamin	fbd3cfa40e	Fix code snippets to configure timeouts Issue: gh-8487	6 years ago
Dávid Kovács	f2a2b469c4	Deprecate openID 2.0 support This commit adds deprecation notice to xml schema, parser of the schema and removes fixme comments. Fixes gh-7153	6 years ago
Rob Winch	d91b153cad	Explicitly set useSuffixPatternMatch for Tests Spring MVC changed their default behavior in https://github.com/spring-projects/spring-framework/issues/23915 This causes failures in some of Spring Security's tests. This explicitly sets useSuffixPatternMatch=true to ensure that Spring Security still works if users have modified their defaults. Closes gh-8493	6 years ago
Jean-Pierre Bergamin	6d5d883518	Use Opaquetoken properties to configure timeouts Improve the documentation to show how to re-use the Opaquetoken properties of `OAuth2ResourceServerProperties` to set up basic auth in the configured `RestTemplate`.	6 years ago
Rob Winch	e1fd0b3859	Update to spring-build-conventions:0.0.32.RELEASE Closes gh-8499	6 years ago
Pei-Tang Huang	9dcdae3269	Update Traditional Chinese translation. Align with commit `f7b33da577`.	6 years ago
Joe Grandja	f92ab34ca0	Next development version	6 years ago
Joe Grandja	86ca6b013c	Unlock dependencies This reverts commit `206960cf44`.	6 years ago
Joe Grandja	c506ee6b69	Release 5.4.0-M1	6 years ago
Joe Grandja	206960cf44	Lock dependencies for 5.4.0-M1	6 years ago
Eleftheria Stein	07f8154a06	Temporarily build against Framework 5.2.x snapshot Issue: gh-8489	6 years ago
Eleftheria Stein	545286188d	Update SAML2 errors in integration tests	6 years ago
Eleftheria Stein	026a951d4f	Remove JDK 9 and JDK 10 build from Jenkins pipeline Closes gh-8482	6 years ago
Eleftheria Stein	db155b3094	Clean up Javadoc Fixes gh-8480	6 years ago
Josh Cummings	d4dbe069ad	Polish OpenSamlAuthenticationProvider - Use type-safe CriteriaSet - Keep Assertion immutable Closes gh-8471	6 years ago
Andrii Hrytsiuk	7748fb00ba	Fix typos in documentation	6 years ago

1 2 3 4 5 ...

8717 Commits (67d2efde1cb6ab72bbfd692f01cd4c5ed0ede57d) All Branches Search

8717 Commits (67d2efde1cb6ab72bbfd692f01cd4c5ed0ede57d)

All Branches