spring-security

Commit Graph

Author	SHA1	Message	Date
Juny Tse	d0da160007	Use Base64 encoder with no CRLF in output for SAML 2.0 messages Closes gh-11262	4 years ago
Marcus Da Coregio	d86ed6f523	Update copyright headers Issue gh-10956	4 years ago
Marcus Da Coregio	1959c25a03	Fix mvcMatchers overriding previous paths Closes gh-10956	4 years ago
Rob Winch	7b6fd598d0	Multiple <authentication-manager> Do Not Duplicate Alias Previously, two authentication managers with different ids would duplicate the alias to the global authentication manager. This would cause failures for when allowBeanDefinitionOverriding = false. This commit ensures that if the global authentication manager alias is already set, then it is not set again. This means the first <authentication-manager> will be used as the global AuthenticationManager. Closes gh-8767	4 years ago
Eleftheria Stein	5ac5edc2e6	Detect UserDetailsService bean in X509 configuration Closes gh-11174	4 years ago
Eleftheria Stein	d40c15e09e	Update remember me Javadocs Describe the new behaviour for retrieving the UserDetailsService Issue gh-11170	4 years ago
Marcus Da Coregio	e94adedb94	Add shouldFilterAllDispatcherTypes to Kotlin DSL Closes gh-11153	4 years ago
Eleftheria Stein	8e34cedcfe	Detect UserDetailsService bean in remember me Closes gh-11170	4 years ago
nor-ek	a3e7e54b70	Security Context Dsl Closes gh-11039	4 years ago
Marcus Da Coregio	23594b3d01	Fix setServletContext not being called for AuthorizationManagerWebInvocationPrivilegeEvaluator Issue gh-10908	4 years ago
Rob Winch	aaf78330b1	ForceEagerSessionCreationFilter Closes gh-11109	4 years ago
Marcus Da Coregio	7fea639a43	Add Option to Filter All Dispatcher Types Closes gh-11092	4 years ago
Josh Cummings	147ab42440	Revert "Pick up AuthorizationManager Bean" This reverts commit `32b83aae63`. Issue gh-11067	4 years ago
Rob Winch	39b0620a84	Add DisableUrlRewritingFilter Closes gh-11084	4 years ago
Josh Cummings	32b83aae63	Pick up AuthorizationManager Bean Closes gh-11067 Closes gh-11068	4 years ago
Josh Cummings	b39f213e64	Revert "Add AuthorizationManager to Messaging" This reverts commit `77a6e014a9`.	4 years ago
Josh Cummings	77a6e014a9	Add AuthorizationManager to Messaging Closes gh-11076	4 years ago
Josh Cummings	66213e5b2e	Add Default Test to HttpBasicConfigurerTests Issue gh-10973	4 years ago
Josh Cummings	47c8676be7	Polish Saml2LoginConfigurerTests Issue gh-10973	4 years ago
Josh Cummings	c175118f62	Use RequestMatcherEntry Closes gh-11046	4 years ago
Josh Cummings	061f69eb70	Polish Authorization Event Support - Added spring-security-config support - Renamed classes - Changed contracts to include the authenticated user and secured object - Added method security support Issue gh-9288	4 years ago
Josh Cummings	a43677d36a	Simplify PrePostMethodSecurityConfiguration Issue gh-9288	4 years ago
Rob Winch	67fd46bfa6	Add SecurityContextRepository.loadContext(HttpServletRequest) This allows loading the SecurityContext lazily, without the need for the response, and does not attempt to automatically save the request when the response is comitted. Closes gh-11028	4 years ago
Yuriy Savchenko	446ab5047c	Add authorizeHttpRequests to Kotlin DSL Closes gh-10481	4 years ago
Yuriy Savchenko	3016ed0067	Fix typos in Kotlin DSL docs Issue gh-10481	4 years ago
Rob Winch	87ed31a99c	Add SecurityContextHolderFilter Closes gh-9635	4 years ago
Rob Winch	dbcb5004b4	Extract createSecurityContextRepository() Extract out method in preparation for adding SecurityContextHolderFilter configuration. Issue gh-9635	4 years ago
Norbert Nowak	ac9c29b2a0	Add UsernamePasswordAuthenticationToken factory methods - unauthenticated factory method - authenticated factory method - test for unauthenticated factory method - test for authenticated factory method - make existing constructor protected - use newly factory methods in rest of the project - update copyright dates Closes gh-10790	4 years ago
Marcus Da Coregio	93d4fd3559	Add SAML 2.0 Single Logout XML Support Closes gh-10842	4 years ago
Marcus Da Coregio	73f839312d	Add SAML 2.0 Login XML Support Closes gh-9012	4 years ago
Josh Cummings	7a02bd14c1	Replace Apache Commons Base64 Decoding Issue gh-10923	4 years ago
m0k045e	3aa7a65cb4	OAuth2AuthorizedClientArgumentResolver resolves ReactiveOAuth2AuthorizedClientManager Closes gh-10846	4 years ago
Eleftheria Stein	e97c643870	Deprecate WebSecurityConfigurerAdapter Closes gh-10822	4 years ago
Eleftheria Stein	c2635ba6bf	Apply configurers from spring.factories to HttpSecurity bean Closes gh-10814	4 years ago
Josh Cummings	cbd87fac89	Polish ignoring() log messaging - Public API remains unchanged Issue gh-9334	4 years ago
Manuel Jordan	01ed617d5f	Print ignore message DefaultSecurityFilterChain When either `web.ignoring().mvcMatchers(...)` or `web.ignoring().antMatchers(...)` methods are used, for all their variations, the DefaultSecurityFilterChain class now indicates correctly through its ouput what paths are ignored according the `ignoring()` settings. Closes gh-9334	4 years ago
Josh Cummings	d538423f98	Add Saml2AuthenticationRequestResolver Closes gh-10355	4 years ago
Eleftheria Stein	a537b636c1	Add LDAP factory beans Issue gh-10138	4 years ago
Josh Cummings	75f25bff82	Polish multiple RequestRejectedHandlers support Issue gh-10603	4 years ago
Adam Ostrožlík	4ea57f3e3f	Support multiple RequestRejectedHandler beans Closes gh-10603	4 years ago
Marcus Da Coregio	60ed3602f6	Make source code compatible with JDK 8 Closes gh-10695	4 years ago
heowc	1ab0705b47	Fix typo	4 years ago
Marcus Da Coregio	18427b6411	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Josh Cummings	cd8983d4e5	Polish enableSessionUrlRewriting Clarification Closes gh-7644	4 years ago
James Howe	5598688fa6	Clarify behaviour of enableSessionUrlRewriting See #3087	4 years ago
Marcus Da Coregio	65426a40ec	Add Cross Origin Policies headers Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers Closes gh-9385, gh-10118	4 years ago
Marcus Da Coregio	ed3b0fbaad	Prevent using both authorizeRequests and authorizeHttpRequests Closes gh-10573	4 years ago
Steve Riesenberg	df0f6f83af	Polish gh-9597	4 years ago
Karl Tinawi	925d531cbe	Set details on authentication token created by HttpServlet3RequestFactory Currently the login mechanism when triggered by executing HttpServlet3RequestFactory#login does not set any details on the underlying authentication token that is authenticated. This change adds an AuthenticationDetailsSource on the HttpServlet3RequestFactory, which defaults to a WebAuthenticationDetailsSource. Closes gh-9579	4 years ago
Steve Riesenberg	074e38d565	Add missing since Issue gh-7765	4 years ago

1 2 3 4 5 ...

1720 Commits (8ea37360acf03147dbdc52c61dcaee6ee226d8b8)