Josh Cummings
72db6a20c9
Don't Cache ReactiveJwtDecoders Errors
...
Closes gh-10444
5 years ago
Rob Winch
e4a76b0ec9
Checkstyle Fixes
...
- Javadoc tag ordering
- Private constructors before inner classes
Issue gh-10394
5 years ago
Steve Riesenberg
b2db2bdb2a
Update r2dbc-spi-test to 0.8.6.RELEASE
...
Closes gh-10410
5 years ago
Dávid Kováč
eb0597154d
Update JavaDoc according to implementation
...
Update ClaimAccessor#getClaimAsMap and ClaimAccessor#getClaimAsStringList
JavaDoc according to the current implementation
Closes gh-10117
5 years ago
Josh Cummings
1f919bc791
Fix OAuth2 Error Code
...
Closes gh-10319
5 years ago
Fabio Guenci
b067aa4653
Preserve Null Claim Values
...
Prior to this commit ClaimTypeConverter returned the claims with the
original value for all the claims with a null converted value.
The changes allows ClaimTypeConverter to overwrite and return claims
with converted value of null.
Closes gh-10135
5 years ago
Steve Riesenberg
dfebd6d9d4
Revert "URL encode client credentials"
...
This reverts commit e6c268add00bef40cc6f47d8963176f43b8a1de1.
Issue gh-9610 gh-9858
Closes gh-10018
Closes gh-10121
5 years ago
Arnaud Mergey
5fd81eeaf1
fix typo preventing full exception to be displayed in log
...
closes gh-9901
5 years ago
Steve Riesenberg
a332e2a728
Support additional client authentication methods
...
Closes gh-9780
5 years ago
Steve Riesenberg
9daf058a6e
Handle missing authorization endpoint uri
...
Closes gh-9795
5 years ago
Steve Riesenberg
839cc5e851
Remove validation for unsupported grant types
...
Closes gh-9828
5 years ago
Joe Grandja
6fbd038111
Jwt client authentication converter detects new key
...
Closes gh-9814
5 years ago
Steve Riesenberg
700bda68b7
Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository
...
Related to gh-9649
Closes gh-9857
5 years ago
Steve Riesenberg
e6c268add0
URL encode client credentials
...
Closes gh-9610
5 years ago
Josh Cummings
f48a006034
Polish postLogoutRedirectUri encoding
...
Issue gh-9511
5 years ago
Hans Hosea Schaefer
b7a0959ede
Encode postLogoutRedirectUri query params
...
Now encodes already encoded queryparameters in postLogoutRedirectUrl
correctly
Closes gh-9511
5 years ago
Steve Riesenberg
de4b3a4310
Handle custom status codes in error handler
...
Fixes an issue where custom status codes in the error response cause an
IllegalArgumentException to be thrown when resolving an HttpStatus.
Closes gh-9741
5 years ago
Rob Winch
372c2b805b
Update r2dbc-spi-test to 0.8.5.RELEASE
...
Closes gh-9752
5 years ago
Josh Cummings
5b24bd1288
Adjust ClientRegistrationsTests
...
Closes gh-9748
5 years ago
Asian Malaysian Vietnamese
5f6de026a8
Update javadoc AuthorizationCodeOAuth2AuthorizedClientProvider
...
Closes gh-9708
5 years ago
Rob Winch
64b7af473d
Additional HttpSessionOAuth2AuthorizationRequestRepository tests
...
Issue gh-5145
5 years ago
Craig Andrews
35f5ebdbcf
HttpSessionOAuth2AuthorizationRequestRepository: store one request by default
...
Add setAllowMultipleAuthorizationRequests allowing applications to
revert to the previous functionality should they need to do so.
Closes gh-5145
Intentionally regresses gh-5110
5 years ago
Marcus Hert da Coregio
6413511eb6
Update Deprecated Property in Opaque Token Introspectors
...
Update NimbusOpaqueTokenIntrospector and NimbusReactiveOpaqueTokenIntrospector to use MediaType.APPLICATION_JSON instead of the deprecated MediaType.APPLICATION_JSON_UTF8
Closes gh-9353
5 years ago
Joe Grandja
761e3a9dd8
JwtBearerOAuth2AuthorizedClientProvider checks for access token expiry
...
Fixes gh-9700
5 years ago
Josh Cummings
b0011893d2
Update Copyright
...
Issue gh-9651
5 years ago
Tibor Koch
5da472f3be
Fix ClassCastException
...
Closes gh-9651
5 years ago
Josh Cummings
7ded671858
Refactor AuthenticationDetailsSource support
...
- BearerTokenAuthenticationFilter exposes this directly, simplifying
configuration and removing a package tangle
Closes gh-9576
5 years ago
Joe Grandja
b556655290
Make OAuth2AuthorizationResponseType constructor public
...
Closes gh-9584
5 years ago
Joe Grandja
dca7e03b91
Deprecate OAuth2AuthorizationResponseType.TOKEN
...
Closes gh-9582
5 years ago
Joe Grandja
eff4cdc924
Polish gh-9505
5 years ago
Hassene Laaribi
7694aa27cf
Add jwt-bearer authorization grant
...
Closes gh-6053
5 years ago
Joe Grandja
9c97970e26
Add Jwt Client Authentication support
...
Closes gh-8175
5 years ago
Rob Winch
f3f1106624
Update io.spring.javaformat to 0.0.27
...
Closes gh-9553
5 years ago
Rob Winch
8323590b6c
Update r2dbc-spi-test to 0.8.4.RELEASE
...
Closes gh-9551
5 years ago
Rob Winch
60d3db5798
add management platform(project(":spring-security-dependencies"))
...
Closes gh-9540
5 years ago
Rob Winch
1a76ee7442
Update Gradle configuration names
...
Closes gh-9540
5 years ago
Hassene Laaribi
b8e47882aa
Fix test to use non-expired token
...
Closes gh-9506
5 years ago
Eleftheria Stein
4a492846f1
Revert "Lock dependencies for 2.5.0-M3"
...
This reverts commit f05cc6269c8f4c9531d512ed7939a37d94a815e4.
5 years ago
Eleftheria Stein
f05cc6269c
Lock dependencies for 2.5.0-M3
5 years ago
Josh Cummings
b774e91734
Polish BearerTokenAuthenticationConverter
...
Issue gh-8840
5 years ago
Jeongjin Kim
31f310fd22
Add BearerTokenAuthenticationConverter
...
BearerTokenAuthenticationConverter is introduced to solve the
problem of not being able to change AuthenticationDetailsSource.
BearerTokenAuthenticationFilter delegates to
BearerTokenAuthenticationConverter the task of creating
BearerTokenAuthenticationToken and setting AuthenticationDetailsSource.
BearerTokenAuthenticationConverter is customizable and the customized
converter can be used in BearerTokenAuthenticationFilter.
Closes gh-8840
5 years ago
Josh Cummings
5e5ff27109
Configure Jackson for nanosecond precision
...
Closes gh-9461
5 years ago
Josh Cummings
a0a9718b8b
Use Instant with micro-second precision
...
Closes gh-9449
5 years ago
Josh Cummings
c4be1c6a56
Revert "Lock Dependencies"
...
This reverts commit a85caa4098589b0080d75e428f0d262090b6a1f1.
5 years ago
Josh Cummings
a85caa4098
Lock Dependencies
5 years ago
Josh Cummings
02d017abf7
Adjust Test Assertion
...
- Netty returns a slightly different exception on Windows,
so adjusted assertion accordingly.
Issue gh-9421
5 years ago
Josh Cummings
ccb3b02888
Bearer Token Server-side Errors Return 500
...
Closes gh-9395
5 years ago
Mayur Patel
75706f118c
Allow null or empty authorities for DefaultOAuth2User
...
Make DefaultOAuth2User more inline with other part of
spring-security.
For example,
- DefaultOAuth2AuthenticatedPrincipal
- AbstractAuthenticationToken
Closes gh-9366
5 years ago
Benjamin Faal
d85a7cfc4a
Make user info response status check error only
...
Closes gh-9336
5 years ago
tristanessquare
56db058fd0
Fix NullPointerException
...
- Caused by a malformed WWW-Authenticate value
5 years ago