247f737bc8
Move HttpBasicServerAuthenticationEntryPoint
...
Move it up a package as www is too sparse. This is different than servlet
based support, but we also are now using a generic AuthenticationWebFilter
Fixes gh-4617
9 years ago
7271a427e8
SecurityContextServerRepository->ServerSecurityContextRepository
...
Issue gh-4615
9 years ago
792944eee7
HttpSecurity->ServerHttpSecurity
...
Issue gh-4615
9 years ago
185d3032f5
LogoutHandler->ServerLogoutHandler
...
Issue gh-4615
9 years ago
c9ce528206
AuthenticationFailureHandler->ServerAuthenticationFailureHandler
...
Issue gh-4615
9 years ago
897e7111e3
AccessDeniedHandler->ServerAccessDeniedHandler
...
Issue gh-4615
9 years ago
a5af2a07d7
HttpHeadersWriter->ServerHttpHeadersWriter
...
Issue gh-4615
9 years ago
2982b82b2d
AuthenticationSuccessHandler->ServerAuthenticationSuccessHandler
...
Issue gh-4615
9 years ago
b858985b0e
AuthenticationReactorContextFilter->AuthenticationReactorContextWebFilter
...
Issue gh-4615
9 years ago
bfcc2a602d
SecurityContextRepository->SecurityContextServerRepository
...
Issue gh-4615
9 years ago
e99e2a9f09
PrePostAdviceMethodInterceptor->PrePostAdviceReactiveMethodInterceptor
...
Issue gh-4615
9 years ago
d0de8d40dd
WebFilterChainFilter -> WebFilterChainProxy
...
Issue gh-4615
9 years ago
cfc5572b7a
AuthenticationEntryPoint->ServerAuthenticationEntryPoint
...
Issue gh-4615
9 years ago
8d4a73cf3f
Use Server<Description>AuthenticationConverter
...
Issue gh-4615
9 years ago
5502856095
UserDetailsRepositoryAuthenticationManager->UserDetailsRepositoryReactiveAuthenticationManager
...
Issue gh-4615
9 years ago
4681697581
UserDetailsRepository->ReactiveUserDetailsService
...
Issue gh-4615
9 years ago
f1bc82dcef
AuthenticatedAuthorizationManager->AuthenticatedReactiveAuthorizationManager
...
Issue gh-4615
9 years ago
866ce5eaec
AuthorityAuthorizationManager->AuthorityReactiveAuthorizationManager
...
Issue gh-4615
9 years ago
d840090cb0
Add support for implicit grant type
...
Fixes gh-4500
9 years ago
6963b3c5d5
Expose login page config for oauth2Login
...
Fixes gh-4570
9 years ago
da0a7afa38
Polish AuthorizationCodeAuthenticationFilter
...
Fixes gh-4599
9 years ago
efa4bf409c
Remove AuthorizationCodeRequestRedirectFilter. setAuthorizationRequestMatcher
9 years ago
6b16fa0d8c
Polish OAuth Security Configurers
9 years ago
23f56f568c
Update MockitJunitRunner import
...
Issue: gh-4608
9 years ago
445834784a
Update to Mockito 2.10.0
...
Issue: gh-4608
9 years ago
370fc48afe
Polish LogoutBuilder
...
Issue gh-4603
9 years ago
79e749790f
Add Reactive LogoutBuilder
...
Fixes gh-4541
9 years ago
c77cc72cd3
Fix EnableWebFluxSecurityTests
...
Fixes gh-4604
9 years ago
926ad45f21
Add default config for common OAuth2 Providers
...
Fixes gh-4597
9 years ago
29d36e4d16
Remove OAuth2ClientTemplatePropertiesLoader
...
Fixes gh-4598
9 years ago
1b7e761be4
Remove SecurityTokenRepository from AuthorizationCodeAuthenticationProvider constructor
...
Fixes gh-4591
9 years ago
eb320bfed4
AuthorizationCodeAuthenticationProcessingFilter -> AuthorizationCodeAuthenticationFilter
9 years ago
5c14e48b18
Add OAuth2UserAuthenticationProvider
...
Moved logic from AuthorizationCodeAuthenticationProvider
to OAuth2UserAuthenticationProvider (new) related to
loading user attributes via OAuth2UserService.
This re-factor is part of the work required for Issue gh-4513
9 years ago
f8a9077d5a
Generalize AuthorizationCodeAuthenticationProvider
...
The AuthorizationCodeAuthenticationProvider implements part of the
Authorization Code Grant flow as defined in
OAuth 2.0 Authorization Framework and OpenID Connect Core 1.0.
The implementation needs to be de-coupled to allow for better re-use and readability.
This commit introduces the AuthorizationGrantAuthenticator and extracts logic from
AuthorizationCodeAuthenticationProvider and provides different implementations
for OAuth 2.0 and OpenID Connect 1.0.
This re-factor is part of the work required for Issue gh-4513
9 years ago
fb57111ecd
redirect-uri property supports 'baseRedirectUrl' uri variable
...
Fixes gh-4589
9 years ago
66647070ab
Default login page supports Iterable<ClientRegistration>
...
Fixes gh-4596
9 years ago
99f06ca58c
HttpSecurity invokes configure(this)
...
Issue gh-4542
9 years ago
b3bd5ba946
Add Reactive HttpSecurity.addWebFilterAt
...
Fixes gh-4542
9 years ago
737c48de06
Polish
9 years ago
b9258aa6ee
Make AuthorizationRequestUriBuilder optional
...
Fixes gh-4577
9 years ago
9a8ddebc94
Use param matching for Authorization Response
...
Fixes gh-4576
9 years ago
8448a54678
Remove ClientRegistrationRepository.getRegistrations()
...
Fixes gh-4582
9 years ago
b463f8e6b5
Remove httpSecurity.oauth2Login().userInfoEndpoint().userNameAttributeName()
...
Related gh-4580
9 years ago
814742fef6
Rename ClientRegistration.clientAlias -> registrationId
...
Fixes gh-4575
9 years ago
38be35677d
Add userNameAttributeName to ClientRegistration
...
Fixes gh-4580
9 years ago
0e9b2807bf
Split up NimbusOAuth2UserService
...
Fixes gh-4447
9 years ago
6d26b86792
Add UserDetailsRepositoryResourceFactoryBean.fromString
...
Fixes gh-4566
9 years ago
a4c2073bcd
Add UserDetailsManagerResourceFactoryBean.fromString
...
Fixes gh-4567
9 years ago
bc99f8aff3
Add UserDetailsResourceFactoryBean.fromString
...
Fixes gh-4568
9 years ago
9e719bc313
Drop the `aopalliance:aopalliance` dependency
...
As of Spring 4.3 RC1 the `org.aopalliance` interfaces are once again bundled
with `spring-aop` [1]. Moreover, all modules with a dependency on
`aopalliance:aopalliance` directly or indirectly also depend on `spring-aop`.
This change drops the `aopalliance:aopalliance` dependency in all places it's
declared. Where applicable an explicit dependency on `spring-aop` was added in
its place. (This dependency was already present in most places; in one case the
module didn't require `aopalliance:aopalliance` in the first place.)
The documentation is updated accordingly.
[1] https://jira.spring.io/browse/SPR-13984
9 years ago
Rob Winch
Joe Grandja
shazin.sadakath@gmail.com
Stephan Schroevers