spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	80e13bad41	Remove PowerMock from oauth2-client Issue: gh-6025	7 years ago
Josh Cummings	39933b10ff	Add scopes method to TestOAuth2AccessTokens Issue: gh-6025	7 years ago
dperezcabrera	f6414e9a52	Make InMemory*ClientRegistrationRepository Consistent The previous builders with the list argument were inconsistent with their respective builders of var args.	7 years ago
Rafael Dominguez	e1d68e4f6b	WebClientReactiveClientCredentialsTokenResponseClient.getTokenResponse expects 2xx http status code This ensures that token response is only extracted when ClientResponse has a successful status Fixes: gh-6089	7 years ago
Josh Cummings	1ea73e7d8e	Jwt Decoder Local Key Configuration Adds support for configuring Resource Server DSL with a local public key. Fixes: gh-5131	7 years ago
Rafael Dominguez	75a2c2b729	OAuth2AccessTokenResponseBodyExtractor supports Object values This commit ensures the token response is parsed correctly if the values are not a String. Fixes: gh-6087	7 years ago
Josh Cummings	d28e32b000	NimbusJwtDecoder Builder A Builder to simply common construction patterns for NimbusJwtDecoder Issue: gh-6010	7 years ago
Josh Cummings	fbcf48cea0	Low-level Nimbus Jwt Decoder Introduces a JwtDecoder which takes a raw Nimbus JWTProcessor configuration. Fixes: gh-5648	7 years ago
Josh Cummings	ae74f22e30	Reactive Jwt Claim Set Converter Support Exposes setClaimSetConverter on NimbusReactiveJwtDecoder, lining it up with the same support on NimbusJwtDecoder. Fixes: gh-6015	7 years ago
Josh Cummings	19649db9ce	Leave Issuer As String Since StringOrURI is a valid issuer, MappedJwtClaimSetConverter and JwtIssuerValidator no longer assume it. Issue: gh-6073	7 years ago
Josh Cummings	c70b65c5df	Favor URL.toExternalForm Converts URLs to Strings before comparing them. Uses toString(), which delegates to toExternalForm(). Fixes: gh-6073	7 years ago
Josh Cummings	a32d19ec7d	Polish NimbusReactiveJwtDecoderTests Issue: gh-5650	7 years ago
Joe Grandja	a96893a42a	Remove charset from Accept header in UserInfo request Fixes gh-6017	7 years ago
Vedran Pavic	e1b095df32	Allow in-memory client registration repos to be constructed with a map Fixes gh-5918	7 years ago
Josh Cummings	22bd8f1c1f	Reactive Jwt Authentication Converter Support Fixes: gh-5092	7 years ago
Joe Grandja	07d2e43d7a	Deprecate NimbusAuthorizationCodeTokenResponseClient Fixes gh-5954	7 years ago
Rob Winch	725b3b5482	Fix OAuth2AuthorizationCodeGrantWebFilter works w/ /{action/ Issue: gh-5856	7 years ago
Joe Grandja	9565e90b6e	Remove oauth2-oidc-sdk dependency from oauth2-jose module Fixes gh-5891	7 years ago
Joe Grandja	d46f83caf4	Ensure consistent matching of redirect_uri Fixes gh-5890	7 years ago
Josh Cummings	77fa495860	DelegatingOAuth2TokenValidator Varargs Constructor Fixes: gh-5889	7 years ago
Rob Winch	410f6bae1a	Fix ServerOAuth2AuthorizedClientExchangeFilterFunctionTests Merge Issue: gh-5872	7 years ago
Rob Winch	dcbf762a0b	WebClient OAuth2 Support for defaultClientRegistrationId Fixes: gh-5872	7 years ago
Joe Grandja	e8d8eb59bf	Make OAuth2AuthorizedClient Serializable Fixes gh-5757	7 years ago
Joe Grandja	2c078c5dd9	Remove expiresAt constructor-arg in OAuth2RefreshToken Fixes gh-5854	7 years ago
Rob Winch	cc8935e904	Fix Reactive OIDC to add refresh token Fixes: gh-5858	7 years ago
Rob Winch	72301e548a	Reactive OAuth2 DSL Customizations Fixes: gh-5855	7 years ago
Rob Winch	385bdfc055	OAuth2AuthorizationCodeGrantWebFilter works with /{action}/ This ensures that the same URL can work for both log in and authorization code which prevents having to create additional registrations on the client and potentially on the server (GitHub only allows a single valid redirect URL). Fixes: gh-5856	7 years ago
Joe Grandja	ed9cd478ba	Polish Issue gh-5776	8 years ago
Joe Grandja	8746e71b9a	Use OAuth2AuthorizationException in authorization flows	8 years ago
Joe Grandja	ef02ab2f8a	DefaultOAuth2UserService handles OAuth2AuthorizationException	8 years ago
Joe Grandja	7474d6524e	DefaultAuthorizationCodeTokenResponseClient throws OAuth2AuthorizationException	8 years ago
Joe Grandja	56b4576396	DefaultClientCredentialsTokenResponseClient throws OAuth2AuthorizationException Fixes gh-5726	8 years ago
Joe Grandja	e56c048db3	Remove OAuth2ClientException	8 years ago
Joe Grandja	b3282957a8	Add OAuth2AuthorizationException	8 years ago
Rob Winch	26e577b0fa	UnauthenticatedServerOAuth2AuthorizedClientRepository->UnAuthenticatedServerOAuth2AuthorizedClientRepository Issue: gh-5817	8 years ago
Rob Winch	11ea92ef1c	Add UnauthenticatedServerOAuth2AuthorizedClientRepository Fixes: gh-5817	8 years ago
Josh Cummings	9e0f171d47	Jwt Claim Mapping This introduces a hook for users to customize standard Jwt Claim values in cases where the JWT issuer isn't spec compliant or where the user needs to add or remove claims. Fixes: gh-5223	8 years ago
Rob Winch	438d2911fb	OAuth2AuthorizedClientResolver Extract out a private API for shared code between the argument resolver and WebClient support. This makes it easier to make changes in both locations. Later we will extract this out so it is not a copy/paste effort. Issue: gh-4921	8 years ago
Rob Winch	23726abb1e	ServerOAuth2AuthorizedClientExchangeFilterFunction default ServerWebExchange Leverage ServerWebExchange established by ServerWebExchangeReactorContextWebFilter Issue: gh-4921	8 years ago
Rob Winch	ac78258847	ServerOAuth2AuthorizedClientExchangeFilterFunction defaultOAuth2AuthorizedClient Defaults to use the OAuth2AuthenticationToken to resolve the authorized client Issue: gh-4921	8 years ago
Rob Winch	158b8aa6d5	ServerOAuth2AuthorizedClientExchangeFilterFunction clientRegistrationId Issue: gh-4921	8 years ago
Rob Winch	28537fa3b6	WebClientReactiveClientCredentialsTokenResponseClient Fixes: gh-5607	8 years ago
Rob Winch	89f2874bff	ServerOAuth2AuthorizedClientExchangeFilterFunction clientRegistrationId You can now provide the clientRegistrationId and ServerOAuth2AuthorizedClientExchangeFilterFunction will look up the authorized client automatically. Issue: gh-4921	8 years ago
Rob Winch	5bcbb1c40f	ServerOAuth2AuthorizedClientExchangeFilterFunction uses ServerOAuth2AuthorizedClientRepository Issue: gh-4921	8 years ago
Josh Cummings	65c81ce952	Make JwtReactiveAuthenticationManager final	8 years ago
Joe Grandja	057587ef29	ClientRegistration contains Provider Configuration Metadata Fixes gh-5540	8 years ago
Joe Grandja	dfd572a4d2	Polish	8 years ago
Joe Grandja	3b480a3a05	Provide RestOperations in CustomUserTypesOAuth2UserService Fixes gh-5602	8 years ago
Joe Grandja	4a8c95a3e8	Provide RestOperations in DefaultOAuth2UserService Fixes gh-5600	8 years ago
Josh Cummings	8510e9a285	Reactive Resource Server insufficient_scope This introduces an implementation of ServerAccessDeniedHandler that is compliant with the OAuth 2.0 spec for insufficent_scope errors. Fixes: gh-5705	8 years ago

... 15 16 17 18 19 ...

1228 Commits (820e3f57504a7fb8fcc8a74e06a481ab47a10ea2)