spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	9cb668aec2	SessionManagementConfigurer properly defaults SecurityContextRepository Previously the default was an HttpSessionSecurityContextRepository which meant that if a stateless authentication occurred the SecurityContext would be lost on ERROR dispatch. This commit ensures that the RequestAttributeSecurityContextRepository is also consulted by default. Closes gh-12070	3 years ago
Rob Winch	a4858d9eaa	Add SpringTestContext.addFilter Add SpringTestContext.addFilter which allows Spring Security's tests to specify a Filter to be added to the SpringTestContext. Closes gh-12071	3 years ago
Steve Riesenberg	33b492df54	Default to DelegatingSecurityContextRepository Closes gh-12023 Closes gh-12049	3 years ago
Steve Riesenberg	c75ca10900	Add DeferredSecurityContext Issue gh-12023	3 years ago
Steve Riesenberg	819529f5ea	Remove CsrfSpec.tokenFromMultipartDataEnabled Also removed ServerCsrfDsl.tokenFromMultipartDataEnabled Closes gh-12020	3 years ago
Joe Grandja	753e113a13	RequestMatcherDelegatingAuthorizationManager defaults to deny Closes gh-11958	3 years ago
Steve Riesenberg	2407d07890	Default to Xor CSRF tokens in CsrfWebFilter Closes gh-11960	3 years ago
Steve Riesenberg	2a2051cd7b	Default to Xor CSRF tokens in CsrfFilter Issue gh-11960	3 years ago
Josh Cummings	2713075d08	Mark Observations with Firewall Failures Closes gh-11994	3 years ago
Josh Cummings	46ab84684b	Mark Observations with CSRF Failures Closes gh-11993	3 years ago
Josh Cummings	99a87179dd	Instrument Filter Chain Closes gh-11911	3 years ago
Josh Cummings	8c610684f3	Instrument Authentication and Authorization Closes gh-11989 Closes gh-11990	3 years ago
Steve Riesenberg	440748ec65	Add test support for Xor CSRF tokens Issue gh-4001	3 years ago
Daniel Garnier-Moiroux	27059ced87	Default X-Xss-Protection header value to "0" Closes gh-9631	3 years ago
Steve Riesenberg	37fa49b32d	Polish gh-11952	3 years ago
Steve Riesenberg	f462134e87	Add reactive support for BREACH Closes gh-11959	3 years ago
Steve Riesenberg	f4ca90e719	Add reactive interfaces for CSRF request handling Issue gh-11959	3 years ago
Marcus Da Coregio	398f5dee7f	Remove deprecated RequestMatcher methods from Java Configuration Closes gh-11939	3 years ago
Marcus Da Coregio	9fd195d419	Default to shouldFilterAllDispatcherTypes=true in XML Closes gh-11970	3 years ago
Marcus Da Coregio	f3321c256c	Add XML support for shouldFilterAllDispatcherTypes Closes gh-11492	3 years ago
Marcus Da Coregio	8a5aed2983	Add deprecation warning to CsrfDsl#ignoringAntMatchers Issue gh-11347	3 years ago
Marcus Da Coregio	bc4ad52feb	Add deprecation warning to mvcMatchers methods Issue gh-11347	3 years ago
Josh Cummings	12b9f2e196	use-authorization-manager defaults to true Closes gh-11929	3 years ago
Marcus Da Coregio	52ab2303da	Fix failing test Issue gh-11061	3 years ago
Marcus Da Coregio	c4d23f2b49	Use MvcRequestMatcher by default if Spring MVC is present Closes gh-11899	3 years ago
Josh Cummings	2079309c5a	Add SecurityContextHolderStrategy XML Configuration for OAuth2 Issue gh-11061	3 years ago
Josh Cummings	7543effe89	Add SecurityContextHolderStrategy Java Configuration for OAuth2 Issue gh-11061	3 years ago
Josh Cummings	7e3841105b	Add SecurityContextHolderStrategy XML Configuration for Saml2 Issue gh-11061	3 years ago
Josh Cummings	19181a5afd	Add SecurityContextHolderStrategy Java Configuration for Saml2 Issue gh-11061	3 years ago
Josh Cummings	0c0e298aa7	Polish Saml2 XML Use of SecurityContextHolderStrategy Issue gh-11061	3 years ago
Josh Cummings	b4d13e7726	Polish use-authorization-manager - Use SecurityContextHolderStrategy - Allow empty role prefix - Disallow access-decision-manager-ref and authorization-manager-ref together Issue gh-11305	3 years ago
Josh Cummings	7043ef6ccb	Polish OpaqueTokenAuthenticationConverterTests Issue gh-11665	3 years ago
Steve Riesenberg	dce1c30522	Add support for BREACH Closes gh-4001	3 years ago
Steve Riesenberg	6bbf20be93	Fix failing tests Issue gh-11952	3 years ago
Steve Riesenberg	1d706ae13d	Add csrfTokenRequestResolver to CsrfDsl Closes gh-11952	3 years ago
Marcus Da Coregio	c2ed65c67a	Fix failing tests Issue gh-9159	3 years ago
Marcus Da Coregio	bf6e85ec15	Accept String varargs in securityMatcher Issue gh-9159	3 years ago
Marcus Da Coregio	76d7a85bc0	Use modified classpath test support for tests that depend on the classpath Issue gh-11347	3 years ago
Marcus Da Coregio	77dcc691b3	Add modified classpath test support Closes gh-11951	3 years ago
Marcus Da Coregio	5002199be3	Revert "Disable tests that need Spring MVC mocked in classpath" This reverts commit `c6978fba7c`.	3 years ago
Marcus Da Coregio	35f7e46d05	Remove WebSecurityConfigurerAdapter Closes gh-10902	3 years ago
Steve Riesenberg	3bc76815c2	Update csrf.request-handler-ref in 6.0 Issue gh-11918	3 years ago
Marcus Da Coregio	c6978fba7c	Disable tests that need Spring MVC mocked in classpath Issue gh-11347	3 years ago
Steve Riesenberg	475b3bb6bb	Add deferred CsrfTokenRepository.loadDeferredToken * Move DeferredCsrfToken to top-level and implement Supplier<CsrfToken> * Move RepositoryDeferredCsrfToken to top-level and make package-private * Add CsrfTokenRepository.loadToken(HttpServletRequest, HttpServletResponse) * Update CsrfFilter * Rename CsrfTokenRepositoryRequestHandler to CsrfTokenRequestAttributeHandler Issue gh-11892 Closes gh-11918	3 years ago
Steve Riesenberg	c847efd3fd	Fix servlet import Issue gh-11347 Issue gh-9159	3 years ago
Steve Riesenberg	c98de7af2f	Add xss-protection.header-value in 6.0 Issue gh-9631	3 years ago
Daniel Garnier-Moiroux	0e215a21ad	Add X-Xss-Protection headerValue to XML config Issue gh-9631	3 years ago
Marcus Da Coregio	039e0328e1	Simplify Java Configuration RequestMatcher Usage If Spring MVC is present in the classpath, use MvcRequestMatcher by default. This commit also adds a new securityMatcher method in HttpSecurity Closes gh-11347 Closes gh-9159	3 years ago
Steve Riesenberg	d9a682a414	Polish gh-11896	3 years ago
Steve Riesenberg	7f9600ae08	Polish gh-11896	3 years ago

1 2 3 4 5 ...

2048 Commits (7adc000c6bb604b0e415bda0cffabb6cd6d8e5dd)