Steve Riesenberg
86fbb8db07
Add new interfaces for CSRF request processing
...
Issue gh-4001
Issue gh-11456
3 years ago
Underground Hill
8b74bf9742
Updated reference to architecture page
...
In the context of Servlet Authentication page, "Architecture" should probably link to "Servlet Authentication Architecture" page
3 years ago
he1ex-tG
568277f8bc
Mistake in Kotlin code representation is fixed
3 years ago
Josh Cummings
0f58620643
Add AspectJ AuthorizationManager Support
...
Closes gh-11326
3 years ago
Josh Cummings
070dce1baf
Document ReactiveMethodSecurity improvements
...
Issue gh-9401
3 years ago
Josh Cummings
27ce5936cf
Add Caveat about Spring Security's co-routine support
...
Closes gh-10920
3 years ago
Rob Winch
89f8310d6c
Add Explicit SessionAuthenticationStrategy Option
...
SessionAuthenticationFilter requires accessing the HttpSession to do its
job. Previously, there was no way to just disable the
SessionAuthenticationFilter despite the fact that
SessionAuthenticationStrategy is invoked by the authentication filters
directly.
This commit adds an option to disable SessionManagmentFilter in favor of
requiring explicit SessionAuthenticationStrategy invocation already
performed by the authentication filters.
Closes gh-11455
3 years ago
jujunChen
13feb87171
Modify words
...
- <dependencyManagement> to dependencyManagement
- pom.xml to build.gradle
3 years ago
jujunChen
d93bde7465
Modify words
...
- <dependencyManagement> to dependencyManagement
- pom.xml to build.gradle
3 years ago
jujunChen
e3d85881e9
Modify words
...
- <dependencyManagement> to dependencyManagement
- pom.xml to build.gradle
3 years ago
Rob Winch
5b64526ba9
Add CsrfFilter.csrfRequestAttributeName
...
Previously the CsrfToken was set on the request attribute with the name
equal to CsrfToken.getParameterName(). This didn't really make a lot of
sense because the CsrfToken.getParameterName() is intended to be used as
the HTTP parameter that the CSRF token was provided. What's more is it
meant that the CsrfToken needed to be read for every request to place it
as an HttpServletRequestAttribute. This causes unnecessary HttpSession
access which can decrease performance for applications.
This commit allows setting CsrfFilter.csrfReqeustAttributeName to
remove the dual purposing of CsrfToken.parameterName and to allow deferal
of reading the CsrfToken to prevent unnecessary HttpSession access.
Issue gh-11699
3 years ago
github-actions[bot]
1510460a1a
Next development version
3 years ago
github-actions[bot]
db74e9d128
Next development version
3 years ago
github-actions[bot]
c188b70c88
Next development version
3 years ago
github-actions[bot]
4559d269e0
Release 5.6.7
3 years ago
github-actions[bot]
173d74d693
Release 5.7.3
3 years ago
github-actions[bot]
063e56ce8b
Release 5.8.0-M2
3 years ago
Igor Bolic
efaee4e56b
Allow customization of redirect strategy
...
The default redirect strategy will provide authorization redirect
URI within HTTP 302 response Location header.
Allowing the configuration of custom redirect strategy will provide
an option for the clients to obtain the authorization URI from e.g.
HTTP response body as JSON payload, without a need to handle
automatic redirection initiated by the HTTP Location header.
Closes gh-11373
3 years ago
Desmond Silveira
0d3c3c676d
"Well-Know" should be "Well-Known"
3 years ago
Desmond Silveira
06aa3362dd
"Well-Know" should be "Well-Known"
3 years ago
Desmond Silveira
2a336d4f49
"Well-Know" should be "Well-Known"
3 years ago
Yuriy Savchenko
0f64d4c091
Add Kotlin example for WebTestClient setup docs
...
Closes gh-9998
3 years ago
Yuriy Savchenko
7c7751635d
Add Kotlin example for WebTestClient setup docs
...
Closes gh-9998
3 years ago
Yuriy Savchenko
5322352427
Add Kotlin example for WebTestClient setup docs
...
Closes gh-9998
3 years ago
github-actions[bot]
8d147100ee
Next development version
3 years ago
github-actions[bot]
8d3586f949
Release 5.8.0-M1
3 years ago
Marcus Da Coregio
f45c4d4b8e
Add SHA256 as an algorithm option for Remember Me token hashing
...
Closes gh-8549
4 years ago
Marcus Da Coregio
57d6ab7134
Improve docs on dispatcherTypeMatcher
...
Closes gh-11467
4 years ago
Josh Cummings
624fdfa731
Add AuthorizationManager for protect-pointcut
...
Closes gh-11323
4 years ago
Tim te Beek
ce67fb08fd
Clearly end sentence in note before next sentence
4 years ago
Tim te Beek
6e63278ab9
Use Collection<ConfigAttribute> in examples
...
To match `org.springframework.security.access.ConfigAttribute`.
4 years ago
Josh Cummings
74a007dc91
Support AuthorizationManager for intercept-methods Element
...
Closes gh-11328
4 years ago
Josh Cummings
74167d62b1
Add SecurityContextHolderStrategy XML Configuration for Messaging
...
Issue gh-11061
4 years ago
Josh Cummings
9cd7c7b046
Add SecurityContextHolderStrategy XML Configuration for Method Security
...
Issue gh-11061
4 years ago
Joe Grandja
d3a024786b
Next Development Version
4 years ago
Joe Grandja
fa4c5449e7
Release 5.6.6
4 years ago
Joe Grandja
6f275deb55
Next Development Version
4 years ago
Joe Grandja
c40f65f5a2
Release 5.7.2
4 years ago
Josh Cummings
2a70707c35
Add SecurityContextHolderStrategy XML Configuration for Defaults
...
Issue gh-11061
4 years ago
sKai.fun
a3e996a66b
Fix title render issue of Digest Authentication document
...
Closes gh-11272
4 years ago
sKai.fun
953b54f63d
Fix title render issue of Digest Authentication document
...
Closes gh-11272
4 years ago
André Luis Gomes
aca3fc2412
Update opaque-token.adoc
...
Fixing yaml sample in Servlet and Reactive pages
4 years ago
André Luis Gomes
0c31cb21dc
Update opaque-token.adoc
...
Fixing yaml sample in Servlet and Reactive pages
4 years ago
André Luis Gomes
24701b547f
Update opaque-token.adoc
...
Fixing yaml sample in Servlet and Reactive pages
4 years ago
Josh Cummings
9dbd1f3e25
Use AuthorizationManager in <http>
...
Closes gh-11305
4 years ago
Josh Cummings
d7077b441a
Correct access(String) reference
...
Closes gh-11280
4 years ago
Josh Cummings
292585080a
Correct access(String) reference
...
Closes gh-11280
4 years ago
Josh Cummings
0abc54c7de
Correct access(String) reference
...
Closes gh-11280
4 years ago
Josh Cummings
101f11ba94
Improve ContextConfiguration Docs
...
Point to updated Spring Reference
Issue gh-10934
4 years ago
Josh Cummings
18b903f6e3
Polish ExtendWith Docs
...
Use spring-framework-reference-url placeholder
Issue gh-10934
4 years ago