spring-security

Commit Graph

Author	SHA1	Message	Date
Steve Riesenberg	9d0db200eb	Handle encoded spaces in the root dn Fixes an issue where provider URLs passed to the constructor of the DefaultSpringSecurityContextSource can be URL encoded, resulting in an invalid base dn. Additionally adds support for list constructor to support spaces in base dn. Closes gh-9742	5 years ago
Steve Riesenberg	589eccc547	Handle custom status codes in error handler Fixes an issue where custom status codes in the error response cause an IllegalArgumentException to be thrown when resolving an HttpStatus. Closes gh-9741	5 years ago
Rob Winch	f3436f25fb	Additional HttpSessionOAuth2AuthorizationRequestRepository tests Issue gh-5145	5 years ago
Craig Andrews	e447a35cf2	HttpSessionOAuth2AuthorizationRequestRepository: store one request by default Add setAllowMultipleAuthorizationRequests allowing applications to revert to the previous functionality should they need to do so. Closes gh-5145 Intentionally regresses gh-5110	5 years ago
Rob Winch	4a2f493be0	docs.af.pivotal.io->docs-ip.spring.io Closes gh-9686	5 years ago
kevin	ec46ce08c9	Release ByteBuf Closes gh-9661	5 years ago
Josh Cummings	2c625f30e0	Add NPE Guards - Like values, names are only validated if they are not null Closes gh-9598	5 years ago
Joe Grandja	6725b1324a	WebFlux httpBasic() matches on XHR requests Closes gh-9660	5 years ago
Craig Andrews	b97e93a486	Add guard around logger.debug statement The log message involves string concatenation, the cost of which should only be incurred if debug logging is enabled Issue gh-9648	5 years ago
Rob Winch	26788a7309	Fix HttpSecurity.addFilter* Ordering Closes gh-9633	5 years ago
Denis Washington	67d5520194	Limit oauth2Login() links to redirect-based flows This prevents the generated login page from showing links for authorization grant types like "client_credentials" which are not redirect-based, and thus not meant for interactive use in the browser. Closes gh-9457	5 years ago
Joe Grandja	c381503f7b	Next Development Version	5 years ago
Joe Grandja	8850ccb1c6	Revert "Lock Dependencies" This reverts commit `924ceac681`.	5 years ago
Joe Grandja	321e6a8742	Release 5.4.6	5 years ago
Joe Grandja	924ceac681	Lock Dependencies	5 years ago
Joe Grandja	951cb844dd	Update to Spring Boot 2.4.4	5 years ago
佚名	9570d0cada	Add null check in CsrfFilter and CsrfWebFilter Solve the problem that CsrfFilter and CsrfWebFilter throws NPE exception when comparing two byte array is equal in low JDK version. When JDK version is lower than 1.8.0_45, method java.security.MessageDigest#isEqual does not verify whether the two arrays are null. And the above two class call this method without null judgment. ZiQiang Zhao<1694392889@qq.com> Closes gh-9561	5 years ago
Eleftheria Stein	e7ee70384d	Consider Order on SecurityFilterChain bean definitions Closes gh-9154	5 years ago
Josh Cummings	d192b3eb91	Next Development Version	5 years ago
Josh Cummings	71e0967b53	Revert "Lock Dependencies for Release" This reverts commit `8c04074264`.	5 years ago
Josh Cummings	45bca751c7	Release 5.4.5	5 years ago
Josh Cummings	8c04074264	Lock Dependencies for Release	5 years ago
Andy Wilkinson	7db6c9189e	Downgrade to Nimbus JOSE JWT 8.+	5 years ago
Josh Cummings	f6a2850753	Next Development Version	5 years ago
Josh Cummings	cf032d86d6	Revert "Lock Dependencies" This reverts commit `9535a41d5a`.	5 years ago
Josh Cummings	abc523c063	Release 5.4.4	5 years ago
Josh Cummings	9535a41d5a	Lock Dependencies	5 years ago
Rob Winch	4b6b417d5a	Additional Test for HttpSessionSecurityContextRepository Issue gh-9387	5 years ago
Rob Winch	c72a6fac04	Optimize HttpSessionSecurityContextRepository Closes gh-9387	5 years ago
Josh Cummings	357446ba9d	Next Development Version	5 years ago
Josh Cummings	f449da8b78	Revert "Lock Dependencies" This reverts commit `d17ebf53f9`.	5 years ago
Josh Cummings	9fbcfd9513	Release 5.4.3	5 years ago
Josh Cummings	d17ebf53f9	Lock Dependencies	5 years ago
Josh Cummings	c241f643ad	Update to GAE 1.9.86 Closes gh-9448	5 years ago
Josh Cummings	d4461dc856	Update to Spring Boot 2.4.2 Closes gh-9447	5 years ago
Josh Cummings	ad0ad06705	Update to Kotlin 1.4.30 Closes gh-9446	5 years ago
Josh Cummings	db76882f75	Fix Test Configuration - Typo in PlaceholderConfig was causing Windows builds to resolve the CLASSPATH environment variable Closes gh-9421	5 years ago
kavi87	27e6743fd6	Update saml2-login.adoc Fix example on registering custom marshaller for saml request	5 years ago
Josh Cummings	e79141a188	Downgrade nimbus-jose-jwt to 8.+ Closes gh-9399	5 years ago
Josh Cummings	da7141eb5b	Polish Tests Issue gh-9331	5 years ago
happier233	e30d78086a	Configure CurrentSecurityContextArgumentResolver BeanResolver Closes gh-9331	5 years ago
Mayur Patel	fc24c7991c	Allow null or empty authorities for DefaultOAuth2User Make DefaultOAuth2User more inline with other part of spring-security. For example, - DefaultOAuth2AuthenticatedPrincipal - AbstractAuthenticationToken Closes gh-9366	5 years ago
Josh Cummings	42013ee3a1	Change Example Name Closes gh-9379	5 years ago
Rob Winch	21f03b53f2	Use spring-build-conventions:0.0.37	5 years ago
Benjamin Faal	f6b678f137	Make user info response status check error only Closes gh-9336	5 years ago
Josh Cummings	76657631fd	Migrate SAML 2.0 Tests and Docs to PCFOne Issue gh-9362	5 years ago
Josh Cummings	3f2057364e	Migrate SAML 2.0 Samples to PCFOne Closes gh-9362	5 years ago
Josh Cummings	a8a66480be	Fix SAML 2.0 Javaconfig Sample Issue gh-9362	5 years ago
Eleftheria Stein	1f4aa8fe4f	Provide artifactoryUsername/Password in docs and schema jobs	5 years ago
Eleftheria Stein	420e8227d4	Resolve artifacts from Maven Central first - Use spring-build-conventions:0.0.36 - Add https://repo.spring.io/release to reference Closes gh-9367	5 years ago

1 2 3 4 5 ...

9125 Commits (9d0db200eb5cebf264be67ade14d1b2d4054b2af) All Branches Search

9125 Commits (9d0db200eb5cebf264be67ade14d1b2d4054b2af)

All Branches