spring-security

Commit Graph

Author	SHA1	Message	Date
Hiroshi Shirosaki	809ff883b0	Address SecurityContextHolder memory leak To get current context without creating a new context. Creating a new context may cause ThreadLocal leak. Closes gh-9841	4 years ago
Guirong Hu	9f51240bf1	Support IP whitelist for Spring Security Webflux Closes gh-7765	4 years ago
Josh Cummings	ba5a68ec63	Polish LdapAuthenticationPopulator Support PR gh-9276	4 years ago
Filip Hanik	ae08608011	LdapAuthoritiesPopulator should be postProcessed To enable customizations through withObjectPostProcessor	4 years ago
Norbert Nowak	4bc55769a3	Import cleanup Issue gh-10333	4 years ago
Norbert Nowak	4f186f2c1f	Move Dsl files to annotation Package Closes gh-10333	4 years ago
Marcus Da Coregio	25feedb870	Fix removal of framework deprecated code Issue https://github.com/spring-projects/spring-framework/issues/27686	4 years ago
« Christophe	e85958f65c	Fix CsrfConfigurer default AccessDeniedHandler consistency Fix when AccessDeniedHandler is specified per RequestMatcher on ExceptionHandlingConfigurer. This introduces evolutions on : - CsrfConfigurer#getDefaultAccessDeniedHandler, to retrieve an AccessDeniedHandler similar to the one used by ExceptionHandlingConfigurer. - OAuth2ResourceServerConfigurer#accessDeniedHandler, to continue to handle CsrfException with the default AccessDeniedHandler implementation Fixes: gh-6511	4 years ago
Rob Winch	0aa75e04b7	Fix imports for ChannelSecurityConfigurerTests gh-7997	4 years ago
Stephane Nicoll	2e4c6c3bf1	Avoid using SpEL to change the meaning of the injection point This commit removes the use of SpEL expression and replaces it with an explicit call to the underlying method.	4 years ago
Onur Kagan Ozcan	ef25304a30	Add RedirectStrategy customization to ChannelSecurityConfigurer for RetryWith classes	4 years ago
Josh Cummings	869e379099	Separate Namespace Servlet Docs Issue gh-10367	4 years ago
Marcus Da Coregio	caf4c47105	Remove CAS module Closes gh-10441	4 years ago
Marcus Da Coregio	db60df2f9c	Update to Spring Framework 6.0 Issue gh-10360	4 years ago
Marcus Da Coregio	b2e6c60d94	Remove remoting technologies support Closes gh-10366	4 years ago
Marcus Da Coregio	010f719344	Upgrade to JDK 17 Closes gh-10343	4 years ago
Marcus Da Coregio	12f3e908b0	Update to Spring Security 6.0	4 years ago
Marcus Da Coregio	2f1638ec57	Fix javadoc Closes gh-10382	4 years ago
Emil Sierżęga	cb70b6a39b	Fixed invalid usage of & tag in Javadocs	4 years ago
Emil Sierżęga	04b47c5928	Fixed various broken links in Javadocs	4 years ago
Emil Sierżęga	a188138715	Javadocs author tag doesn't work in methods	4 years ago
Emil Sierżęga	6b26032ce7	Fixed invalid usege of > tag in Javadocs	4 years ago
Rob Winch	f836897190	Checkstyle Fixes - Javadoc tag ordering - Private constructors before inner classes Issue gh-10394	4 years ago
Philipp Neuschwander	6db58cbf8a	Conditionally resolve bearer token from request parameters Before this commit, the DefaultBearerTokenResolver unconditionally resolved the request parameters to check whether multiple tokens are present in the request and reject those requests as invalid. This commit changes this behaviour to resolve the request parameters only if parameter token is supported for the specific request according to spec (RFC 6750). Closes gh-10326	4 years ago
Gaurav Tiwari	33708e61fb	Add postProcess support to Saml2LogoutConfigurer Closes gh-10311	4 years ago
Josh Cummings	fbb7691be4	Polish SecurityNamespaceHandler Tests Issue gh-8974	4 years ago
Emil Sierżęga	8daa6ec1fd	SecurityNamespaceHandler: update schema version to 5.6 Closes gh-8974	4 years ago
Eleftheria Stein	ba8844a67e	Deprecate Kotlin methods that don't use reified types Closes gh-10365	4 years ago
Marcus Da Coregio	02b2fcc6f0	Restore ManagementConfigurationPlugin Issue gh-9615	4 years ago
Marcus Da Coregio	d2e5f2ae0d	Update Gradle to 7.2 Closes gh-9615	4 years ago
Marcus Da Coregio	7112ee3eaa	Allow SAML 2.0 loginProcessingURL without registrationId Closes gh-10176	4 years ago
Marcus Da Coregio	e36e2b2a97	Move Saml2AuthnRequestRepository to web package Moving to solve package tangles Issue gh-9185	4 years ago
Rob Winch	3b64cdfc03	Fix XsdDocumentedTests Issue gh-5835	4 years ago
Josh Cummings	c3ba2332da	Wire BeanResolver into DefaultMethodSecurityExpressionHandler Closes gh-10305	4 years ago
Josh Cummings	7b599d4770	Share JWKSource Instances Closes gh-10312	4 years ago
Marcus Da Coregio	0364518b69	Update Saml2LoginConfigurer to pick up Saml2AuthenticationTokenConverter bean Closes gh-10268	4 years ago
Eleftheria Stein	1e76b11b3c	Remove duplicate entry from test LDIF file Closes gh-10274	4 years ago
Josh Cummings	4f06fc6ed1	Add Saml2LogoutConfigurer Closes gh-9497	4 years ago
Josh Cummings	6488295cad	Add RelyingPartyRegistrationResolver Closes gh-9486	4 years ago
Derek Van Blerkom	58d50888df	Fix return type to allow further security config	4 years ago
Yanming Zhou	f2b2e6002f	Replace static "ROLE_" with customized role prefix Fix gh-4134	4 years ago
Eleftheria Stein	3ab6bee856	Make method static to prevent circular dependency error Workaround for circular dependency between ServerHttpSecurityConfiguration and WebFluxConfigurationSupport. Closes gh-10076	5 years ago
Marcus Da Coregio	662ab10416	Fix test getting stuck The tests are getting stuck when running a single test class and the mock is performed in a static variable inside an inner class Issue gh-6025	5 years ago
Marcus Da Coregio	16e17d242e	Add Saml2AuthenticationRequestRepository Closes gh-9185	5 years ago
Josh Cummings	6b68a6d62b	Apply rnc2Xsd Issue gh-8657	5 years ago
Josh Cummings	6370906ead	Add SpringOpaqueTokenIntrospector Closes gh-9354	5 years ago
Abdul Al-Faraj	d1dfb2b9ee	Improve OpenSAML Version Check Closes gh-10077	5 years ago
Nick McKinney	5c8fb254c2	Add AuthenticationDetailsSource to OAuth2 Login Kotlin DSL Closes gh-9838	5 years ago
Nick McKinney	b1612b1283	Add AuthenticationDetailsSource to Form Login Kotlin DSL Closes gh-9837	5 years ago
Rob Winch	f73f213f50	Remove DependencySetPlugin Closes gh-10070	5 years ago

1 2 3 4 5 ...

1823 Commits (809ff883b03e44ac4053b51360fcd9ee270476fe)