Tran Ngoc Nhan
ffed4ea1dc
Polish diamond usage
1 year ago
Max Batischev
9cb81f8ad5
Polish JdbcOneTimeTokenService
1 year ago
Josh Cummings
981fbd5c2c
Polish Tests
...
Closes gh-14768
1 year ago
Max Batischev
ec13b8db4b
Add @FunctionalInterface to AuthorizationEventPublisher
1 year ago
Josh Cummings
95aaf3566f
Use Thread-safe Map
...
Closes gh-15906
1 year ago
Steve Riesenberg
af2b84246b
Fix flaky test
...
Issue gh-15735
1 year ago
kwonyonghyun
b8aa78829c
Improve readability of empty collection checks
1 year ago
Tran Ngoc Nhan
31f8caec5f
Polish diamond operator usage
1 year ago
Josh Cummings
9ce5a76e8c
Polish AuthorizationManager#authorize
...
Issue gh-14843
1 year ago
Max Batischev
e7644925f8
Add AuthorizationResult support for AuthorizationManager
...
Closes gh-14843
1 year ago
Josh Cummings
702538ebce
AuthorizationEventPublisher Accepts AuthorizationResult
...
Closes gh-15915
Co-authored-by: Max Batischev <mblancer@mail.ru>
1 year ago
Munawar Hafiz
aa7ef1192e
Replaces Date().getTime() method with System.currentTimeMillis()
1 year ago
Josh Cummings
b26f2af5d5
Polish
...
Formatting as well as adding a missing defer
Issue gh-15699
1 year ago
Max Batischev
2ca2e56383
Add Reactive One-Time Token Login support
...
Closes gh-15699
1 year ago
Rob Winch
c3a5ae1254
Fix logger checkstyle
1 year ago
Rob Winch
7738e6c895
Add logger.isDebugEnabled()
...
Issue gh-15735
1 year ago
Rob Winch
c4b60cd080
Reduce visibility for JdbcOneTimeTokenServiceTests
...
Issue gh-15735
1 year ago
Rob Winch
650ec3ba82
Use Duration for calculating validity
...
This improves readability.
Issue gh-15735
1 year ago
Rob Winch
e8c71df899
Use private Inner JdbcOneTimeTokenService classes
...
Issue gh-15735
1 year ago
Rob Winch
612b15abcc
JdbcOneTimeTokenService.setCleanupCron
...
Spring Security uses setter methods for optional member variables. Allows
for a null cleanupCron to disable the cleanup.
In a clustered environment it is likely that users do not want all nodes
to be performing a cleanup because it will cause contention on the ott
table.
Another example is if a user wants to invoke cleanUpExpiredTokens with a
different strategy all together, they might want to disable the cron job.
Issue gh-15735
1 year ago
Rob Winch
4787ac254d
cleanUpExpiredTokens->cleanupExpiredTokens
...
Issue gh-15735
1 year ago
Rob Winch
4f328c9503
destroy() shuts down the taskScheduler
...
Issue gh-15735
1 year ago
Max Batischev
0c216f0b59
Add public to setClock method in InMemoryOneTimeTokenService
...
Closes gh-15863
1 year ago
Max Batischev
50cc36d53e
Add support JdbcOneTimeTokenService
...
Closes gh-15735
1 year ago
DingHao
68d814e042
Polish ExpressionTemplateSecurityAnnotationScanner
1 year ago
Jonny Coddington
b90851d968
Improve Error Messages for PasswordEncoder
...
Closes gh-14880
Signed-off-by: Jonny Coddington <bottlerocketjonny@protonmail.com>
1 year ago
Josh Cummings
1760e7fac8
Cache Annotation Lookups
...
Closes gh-15799
1 year ago
Josh Cummings
d194724a04
Skip Proxying If Already Proxied
...
Issue gh-15709
1 year ago
Josh Cummings
6f5e103dec
Use AnnotationTemplateExpressionDefaults in Reactive
...
Issue gh-15097
1 year ago
Marcus Hert Da Coregio
0618d4e03f
Provide Runtime Hints for Beans used in Pre/PostAuthorize Expressions
...
Closes gh-14652
1 year ago
Josh Cummings
fd5d03d384
Add AuthorizeReturnObject Hints
...
Closes gh-15709
1 year ago
Josh Cummings
da38b13a17
Add SecurityHintsRegistrar
...
An interface for registering hints based on Security infrastructure
beans.
Closes gh-15772
1 year ago
Josh Cummings
927de0d3b8
Use AuthorizationProxy Interface for Class Proxying
...
Issue gh-15747
1 year ago
Marcus Hert Da Coregio
2ff29dc229
Throw AuthorizationDeniedException when AuthorizationResult is available
...
Closes gh-15706
1 year ago
Josh Cummings
fce2eb1531
Add AuthorizationProxy Interface
...
Closes gh-15747
1 year ago
Marcus Hert Da Coregio
a0e6c17512
Do not log exception if CasJackson2Module is not present
...
Closes gh-15749
1 year ago
DingHao
5c20505b0e
Support Class Attributes in Annotation Template Processing
...
Closes gh-15721
1 year ago
Josh Cummings
c53ee19a83
Polish Abstract Deserializer
1 year ago
hyunmin0317
fee79ccb51
Abstract Jackson2 Set and List Deserializers
1 year ago
Niels Basjes
2dc787a573
Fix adding more implied roles in the RoleHierarchy Builder.
...
Closes gh-15717
Signed-off-by: Niels Basjes <niels@basjes.nl>
1 year ago
Marcus Hert Da Coregio
00e4a8fb54
Add support for One-Time Token Login
...
Closes gh-15114
1 year ago
DingHao
fd05c5ad76
Remove Advised Methods from Authorization Proxy Objects
...
Closes gh-15561
1 year ago
Josh Cummings
626610a975
Polish Annotation API
...
Rename to a class that isn't focused on the synthesis implementation detail.
Also add Security to the front of the name to clarify that it is only intended
for security annotations, reminiscent of SecurityMetadataSource.
Refine method signatures to better articulate supported use cases.
Issue gh-15286
1 year ago
Josh Cummings
cc6de8fa5d
Hide MergedAnnotation Implementation Details
...
Issue gh-15286
1 year ago
DingHao
84fc5a70ee
Fix variable targetClassToUse not used
...
Closes gh-15567
1 year ago
Josh Cummings
1118b0ec63
Defer Sorting AuthorizationAdvisors in addAdvisor
...
Issue gh-15658
1 year ago
Josh Cummings
0cab7c8f15
Defer Sorting AuthorizationAdvisors
...
Invoking AnnotationAwareOrderComparator#sort while the
AuthorizationAdvisors are still being computed causes those
advisors to be eagerly instantiated, making components
like ObservationRegistry ineligible for post processing.
This commit defers the sorting of the advisors until
after they are all fully instantiated and available in
the application context.
Closes gh-15658
1 year ago
Josh Cummings
f398be793d
Simplify AuthorizationAdvisorProxyFactory Configuration
...
Closes gh-15497
1 year ago
Daniel Garnier-Moiroux
79fb0113c8
Bump io-spring-javaformat from 0.0.42 to 0.0.43
...
Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43)
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43)
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
---
Manual updates:
- Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST
be used together
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
Daniel Garnier-Moiroux
2caf1fb6b4
Bump io-spring-javaformat from 0.0.42 to 0.0.43
...
Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43)
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43)
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
---
Manual updates:
- Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST
be used together
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago