spring-security

Commit Graph

Author	SHA1	Message	Date
Eleftheria Stein	758397f102	Allow configuration of headers through nested builder Issue: gh-5557	7 years ago
Eleftheria Stein	6986cf3ef3	Allow configuration of csrf through nested builder Issue: gh-5557	7 years ago
Eleftheria Stein	1a31376dda	Allow configuration of exception handling through nested builder Issue: gh-5557	7 years ago
Eleftheria Stein	92314b0956	Allow configuration of logout through nested builder Issue: gh-5557	7 years ago
Eleftheria Stein	d66d895e60	Migrate ServletApiConfigurerTests groovy->java Issue: gh-4939	7 years ago
Clement Ng	491da9db03	Added OAuth2TokenAttributes to wrap attributes To simplify access to OAuth 2.0 token attributes Fixes gh-6498	7 years ago
Josh Cummings	ee8182dceb	NamespaceSessionManagementTests groovy->java Issue: gh-4939	7 years ago
Tadaya Tsuyukubo	7782e29a58	Allow custom ReactiveAuthenticationManager for basic and form auth Prior to this change, "HttpBasicSpec#authenticationManager" and "FormLoginSpec#authenticationManager" were always overridden by "ServerHttpSecurity#authenticationManager". This commit makes sure override only happens when custom authentication manager was not specified. Fixes: gh-5660	7 years ago
Eleftheria Stein	39ba1006ba	Migrate FormLoginConfigurerSpec groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	3c240d0ce3	Migrate DefaultLoginPageConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	12da990b6b	Allow configuration of HTTP basic through nested builder Issue: gh-5557 Fixes: gh-6885	7 years ago
Joe Grandja	6e76df8f1d	Revert OAuth2AuthorizationCodeGrantWebFilter works with /{action}/ Issue #5856 Commit `385bdfc055` NOTE: This commit 'partially' reverts #5856. Only the ServerWebExchangeMatcher for OAuth2LoginSpec is reverted. Fixes gh-6890	7 years ago
Joe Grandja	06943d2d39	Revert OAuth2LoginAuthenticationFilter should ignore authenticated requests Issue #5915 Commit `93ca455405` Fixes gh-6890	7 years ago
Rafiullah Hamedy	f6ed1db702	Introduced ReactiveAuthenticationManagerResolver Suitable for multi-tenant reactive applications needing to branch authentication strategies based on request details.	7 years ago
Eleftheria Stein	759e47ba84	Migrate OpenIDLoginConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	e6ace0891f	Migrate X509ConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	6ad46da426	Migrate ExpressionUrlAuthorizationConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	56b716d9f7	Migrate SessionManagementConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	1ec040e554	Disable bean proxying in configuration classes Fixes gh-6967	7 years ago
Eleftheria Stein	371a3b9c7f	Migrate CorsConfigurerTests groovy->java Issue: gh-4939	7 years ago
Vishal Raj	b6e8997e95	Updates OAuth2ResourceServer configuration tests Refactores collapsed imports	7 years ago
Eleftheria Stein	d285c6ab4c	Migrate JeeConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	8e6db95048	Fix HttpSecurity Javadoc for jee() method Fixes: gh-6958	7 years ago
Daniel Meier	fcd8a38f0b	Add success handler modification of OAuth2LoginSpec Add the ability to modify the success handler used in OAuth2LoginSpec. The default success handler remains unchanged. Closes #6863	7 years ago
Eleftheria Stein	abe7da6b85	Migrate RememberMeConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	06d3b60947	Replace bean method calls with injection This is so that our configuration classes do not rely on CGLIB to proxy bean methods. Fixes gh-6818	7 years ago
Eleftheria Stein	4f042a4ff1	Migrate ChannelSecurityConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	be651d9d16	Migrate CsrfConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	6148eef689	Migrate SecurityContextConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	16b0d782f4	Migrate HeadersConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	7806ac21aa	Migrate RequestMatcherConfigurerTests groovy->java Issue: gh-4939	7 years ago
Florian Aumeier	9fe8949883	Add @transient to OAuth2IntrospectionAuthenticationToken fixes gh-6829	7 years ago
Eleftheria Stein	e15922322e	Migrate LogoutConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	d660084538	Migrate HttpBasicConfigurerTests groovy->java Issue: gh-4939	7 years ago
Eleftheria Stein	f5f965b6aa	Fix JavaDoc for defaultSuccessUrl Fixes gh-3337	7 years ago
Josh Cummings	1ed9e3a1c6	Resource Server AuthenticationManager Making the authentication manager for jwt() and opaqueToken() configurable. Fixes: gh-6832 Fixes: gh-6849	7 years ago
Joe Grandja	5aa50500cf	oauth2Login does not auto-redirect for XHR request Fixes gh-6812	7 years ago
Tadaya Tsuyukubo	aef3f514fe	Set "rolePrefix" in ReactiveMethodSecurityConfiguration Currently, `GrantedAuthorityDefaults` is not considered in `ReactiveMethodSecurityConfiguration`. This commit updates the configuration to be aware of `GrantedAuthorityDefaults` and update `rolePrefix` when the bean is available. Also, use the same instance of `DefaultMethodSecurityExpressionHandler` when constructing `ExpressionBasedAnnotationAttributeFactory`.	7 years ago
Josh Cummings	cf0c5f9026	Various NamespaceHttp*Tests groovy->java Issue: gh-4939	7 years ago
Josh Cummings	b1195e7789	Opaque Token Intermediate Type Introducing OAuth2TokenIntrospectionClient and also ReactiveOAuth2TokenIntrospectionClient as configuration points. The DSL looks in the application context for these types in the same way it looks for JwtDecoder and ReactiveJwtDecoder, and exposes similar configuration methods. Fixes: gh-6632	7 years ago
Alexey Nesterov	9a67441507	Add x509 support for Reactive Security [gh #5038]	7 years ago
Joe Grandja	5aacd0c955	Expose bean setters in @Configuration used by @EnableWebFluxSecurity Fixes gh-6624	7 years ago
Josh Cummings	1c25fe26c9	Introduce Support for Reading RSA Keys Fixes: gh-6494	7 years ago
Dan Zheng	570eb01733	review phase1	7 years ago
Dan Zheng	678e0b19e0	Introduce @CurrentSecurityContext for method arguments	7 years ago
Denis Babochenko	21f7148e7a	Update filters documentation Fixes: gh-5553	7 years ago
Josh Cummings	7e8aadeb96	Multi-tenancy for Resource Server Fixes: gh-5351	7 years ago
Joe Grandja	4e9c37b1ae	Manual URL Cleanup	7 years ago
Rafiullah Hamedy	3617fd257e	Introduced placeholder support for Headers tag attributes Added the functionality to allow the disabled and defaults-disabled attribute of <header> tag to accept a placeholder and resolve it during parsing. - Updated the spring-security .rnc files starting from 4.2 up to 5.2 with xsd:token type instead of boolean - Added unit tests for headers.disabled and headers.defaults-disabled attributes with placeholder - Modified the HeadersBeanDefinitionParser to support resolving placeholders - Updated spring.schemas to point to latest spring-security-5.2.xsd Fixes gh-6547	7 years ago
Daniel Fritz	bfe1e6a154	OAuth2AccessTokenResponseClient<OAuth2ClientCredentialsGrantRequest> @Bean is discovered by OAuth2ClientConfiguration Fixes gh-6572	7 years ago

... 24 25 26 27 28 ...

2645 Commits (820e3f57504a7fb8fcc8a74e06a481ab47a10ea2)