Joe Grandja
206960cf44
Lock dependencies for 5.4.0-M1
6 years ago
Joe Grandja
413dfc8679
Unlock dependencies
...
This reverts commit a61145f74c .
6 years ago
Joe Grandja
a61145f74c
Lock dependencies for 5.3.2.RELEASE
6 years ago
Dávid Kovács
339d44b5a1
Deprecate openID 2.0 support
...
This commit puts deprecation notice on docs, sample applications and configurations (java and xml)
Fixes gh-7153
6 years ago
Rob Winch
4a9fa0337a
Allow Configure RequestRjectedHandler in XML
...
Issue gh-5007
6 years ago
Leonard Brünings
b826c798f7
Add RequestRejectedHandler
...
Closes gh-5007
6 years ago
Dávid Kovács
c399185365
Add ROLE_INFRASTRUCTURE to infrastructure beans
...
Closes gh-8407
6 years ago
Dávid Kovács
a89e3d385f
Add ROLE_INFRASTRUCTURE to infrastructure beans
...
Closes gh-8407
6 years ago
Dávid Kovács
8e8251ac5f
Add ROLE_INFRASTRUCTURE to infrastructure beans
...
Closes gh-8407
6 years ago
Adam Millerchip
0f29bee1b0
Add authorize() DSL method that accepts HttpMethod
...
Fixes: gh-8307
6 years ago
Adam Millerchip
16a7cbee4b
Use named arguments in Kotlin authorization rule
6 years ago
Adam Millerchip
401393d756
Extract pattern type in request matcher DSL
6 years ago
Antonin Arquey
5cd1ec7bb3
Add AuthoritiesMapper setter for reactive OAuth2Login
...
Allow the configuration of a custom GrantedAuthorityMapper for reactive OAuth2Login
- Add setter in OidcAuthorizationCodeReactiveAuthenticationManager
and OAuth2LoginReactiveAuthenticationManager
- Use an available GrantedAuthorityMapper bean to configure the default ReactiveAuthenticationManager
Fixes gh-8324
6 years ago
Roberto Paolillo
2cccf223df
Add Flag to enable searching of LDAP groups on subtrees
...
Closes gh-8939
6 years ago
Loïc Labagnara
146d9ba0bf
Add marker to make Kotlin DSL type safe.
...
Fixes gh-8366
6 years ago
Evgeniy Cheban
a70d55552b
Resource Server Finds JwtAuthenticationConverter Beans
...
Fixes gh-8185
6 years ago
Rob Winch
7b34b223e6
Logout defaults to use Global SecurityContextServerLogoutHandler
...
Closes gh-8375
6 years ago
Rob Winch
f6ddba8cd8
Logout defaults to use Global SecurityContextServerLogoutHandler
...
Closes gh-8375
6 years ago
Rob Winch
9a42a028e7
Logout defaults to use Global SecurityContextServerLogoutHandler
...
Closes gh-8375
6 years ago
Josh Cummings
711954e016
Deprecate Saml2AuthenticationRequestFilter Constructor
...
Removing the default usage of OpenSamlAuthenticationRequestFactory.
Otherwise, the Open SAML dependency is required, even when
Saml2AuthenticationRequestFactory is implemented without it.
Fixes gh-8359
6 years ago
Eleftheria Stein
39e09e4ca5
Idiomatic Kotlin DSL for server HTTP security
...
Issue: gh-5558
6 years ago
Eleftheria Stein
6017510fdd
Compile Kotlin tasks using JVM 1.8
6 years ago
hotire
f011c36ba4
Fix typo in Javadoc of ServerHttpSecurity#hasAuthority
...
Closes gh-8336
6 years ago
hotire
6d45ec5d6b
Fix typo in Javadoc of ServerHttpSecurity#hasAuthority
6 years ago
Markus Engelbrecht
dc6b8ce470
Add addFilterAfter and addFilterBefore to Kotlin DSL
...
Fixes gh-8316
6 years ago
Eleftheria Stein
bb654fdcdf
Fix HttpSecurity Javadoc
...
Fixes gh-4404
6 years ago
Eleftheria Stein
2d71297b7e
Fix HttpSecurity Javadoc
...
Fixes gh-4404
6 years ago
Eleftheria Stein
1de0cf5057
Fix HttpSecurity Javadoc
...
Fixes gh-4404
6 years ago
Joe Grandja
a78872f268
Unlock dependencies for 5.3.1.RELEASE
...
This reverts commit 88c02684bb .
6 years ago
Joe Grandja
88c02684bb
Lock dependencies for 5.3.1.RELEASE
6 years ago
Rob Winch
615f9a3f05
Fix HttpServlet3RequestFactory Logout Handlers
...
Previously there was a problem with Servlet API logout integration
when Servlet API was configured before log out.
This ensures that logout handlers is a reference to the logout handlers
vs copying the logout handlers. This ensures that the ordering does not
matter.
Closes gh-4760
6 years ago
Rob Winch
32c3353921
SpringTestContext returns ConfigurableWebApplicationContext
...
Closes gh-8233
6 years ago
Rob Winch
0e6e2b2a21
Fix HttpServlet3RequestFactory Logout Handlers
...
Previously there was a problem with Servlet API logout integration
when Servlet API was configured before log out.
This ensures that logout handlers is a reference to the logout handlers
vs copying the logout handlers. This ensures that the ordering does not
matter.
Closes gh-4760
6 years ago
Rob Winch
f82d59a1e5
SpringTestContext returns ConfigurableWebApplicationContext
...
Closes gh-8233
6 years ago
Rob Winch
91728ef53b
Fix HttpServlet3RequestFactory Logout Handlers
...
Previously there was a problem with Servlet API logout integration
when Servlet API was configured before log out.
This ensures that logout handlers is a reference to the logout handlers
vs copying the logout handlers. This ensures that the ordering does not
matter.
Closes gh-4760
6 years ago
Rob Winch
b055f8bb25
SpringTestContext returns ConfigurableWebApplicationContext
...
Closes gh-8233
6 years ago
Josh Cummings
cb7786bf97
Malformed Bearer Token Returns 401 for WebFlux
...
Fixes gh-7668
6 years ago
Joe Grandja
4706b16a2b
oauth2Login WebFlux does not auto-redirect for XHR request
...
Fixes gh-8118
6 years ago
Joe Grandja
0230827335
oauth2Login WebFlux does not auto-redirect for XHR request
...
Fixes gh-8118
6 years ago
Joe Grandja
e27e548215
oauth2Login WebFlux does not auto-redirect for XHR request
...
Fixes gh-8118
6 years ago
Eleftheria Stein
699fed7f98
Fix rsocket test
...
Request route that exists; add additional error message verification
Fixes gh-8154
6 years ago
Eleftheria Stein
256aba7b37
Fix rsocket test
...
Request route that exists; add additional error message verification
Fixes gh-8154
6 years ago
Eleftheria Stein
97085ef310
Fix rsocket test
...
Request route that exists; add additional error message verification
Fixes gh-8154
6 years ago
Josh Cummings
2d8c65db56
Support port=0 for LDAP Servers
...
Fixes gh-8138
6 years ago
Josh Cummings
4d99ee2896
Allow port=0 in XSD
...
Issue gh-8138
6 years ago
Josh Cummings
f438bdfbcf
Add spring-security-5.4.xsd
...
Issue gh-8138
6 years ago
Erik van Paassen
86e25ff2ab
Fix typo in Javadoc of HttpSecurity#csrf()
...
`HttpSecurity#csrf()` obviously returns a `CsrfConfigurer`, while the Javadoc states that it returns the `ServletApiConfigurer`.
6 years ago
Erik van Paassen
82dbce47b1
Fix typo in Javadoc of HttpSecurity#csrf()
...
`HttpSecurity#csrf()` obviously returns a `CsrfConfigurer`, while the Javadoc states that it returns the `ServletApiConfigurer`.
6 years ago
Erik van Paassen
ad9bb7f230
Fix typo in Javadoc of HttpSecurity#csrf()
...
`HttpSecurity#csrf()` obviously returns a `CsrfConfigurer`, while the Javadoc states that it returns the `ServletApiConfigurer`.
6 years ago
Eleftheria Stein
40b15f5a46
Rename to SessionFixationDslTests
6 years ago