spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	8eedb3919e	Policy OAuth2ResourceServerSpecTests Issue: gh-6052	7 years ago
Erik van Paassen	3a6582d2a6	Fix csrf:token-repository-ref XSD documentation The documentation of the token-repository-ref attribute of the csrf element in the schema has been updated to make clear the default repository is lazy. Targets versions 4.2, 5.0 and 5.1. Fixes gh-6037	7 years ago
Josh Cummings	9a13f9acde	Custom Bearer Token Error Handling Support Users can specify a custom access denied handler and authentication entry point for reactive resource servers. Fixes: gh-6052	7 years ago
Josh Cummings	75e7e099ab	MiscHttpConfigTests groovy->java Issue: gh-4939	7 years ago
Bob Maertz	52be2839ca	Migraged unit test from groovy to java Moved AbstractConfigAttributeRequestMatcherRegistryTests.groovy to AbstractConfigAttributeRequestMatcherRegistryTests.java gh-4939	7 years ago
Joe Grandja	8ef65ce5c5	Set AuthenticationEventPublisher on each AuthenticationManagerBuilder Fixes gh-6009	7 years ago
Brian Demers	8f49ca850a	Fixing IllegalStateException message in OAuth2ResourceServerConfigurer Updated message to include `http.oauth2ResourceServer()`	7 years ago
Josh Cummings	bd9e3877f9	JDK 10 Compatibility Upgrading dependencies and reconfiguring PowerMock Issue: gh-5860	7 years ago
Joe Grandja	921abefaa2	Remove address and phone scope from CommonOAuth2Provider.OKTA Fixes gh-5987	7 years ago
Josh Cummings	22bd8f1c1f	Reactive Jwt Authentication Converter Support Fixes: gh-5092	7 years ago
Rob Winch	93ca455405	OAuth2LoginAuthenticationFilter ignores authenticated Users This ensures that OAuth2 Client support works with the same log in URL as oauth2 login. Fixes: gh-5915	7 years ago
Rob Winch	5d18bb68ed	Add @formatter to @EnableWebFluxSecurity Javadoc Fixes: gh-5898	7 years ago
Rob Winch	45a9c0fd54	Polish Automatically Add CsrfServerLogoutHandler Issue: gh-5337	7 years ago
Eric Deandrea	b060ec050a	Automatically add CsrfServerLogoutHandler if csrf enabled The configuration DSL should automatically add CsrfServerLogoutHandler if csrf is enabled Fixes gh-5337	7 years ago
Vedran Pavic	79828d4f7b	Polish WebFlux Referrer-Policy header config	7 years ago
Rob Winch	8a49c431c3	Add OAuth2ClientSpec.and Fixes: gh-5888	7 years ago
Josh Cummings	73c1abbba0	EnableGlobalMethodSecurity Misconfiguration Check This polishes the EnableGlobalMethodSecurity misconfiguration check to not error if the user has specified a custom method security metadata source. Issue: gh-5341	7 years ago
artsiom	1e864ad764	Validate @EnableGlobalMethodSecurity usage Fixes: gh-5341	7 years ago
Rob Winch	9e0c7f17b7	Default RequestCache should ignore favicon Fixes: gh-5875	7 years ago
Joe Grandja	8b0a3a760c	Use providedSessionAuthenticationStrategy Fixes gh-5763	7 years ago
Rob Winch	501c008526	Add WebFlux Redirect to HTTPS Reference Fixes: gh-5869	7 years ago
Rob Winch	54d07b6b8b	Add WebFlux HTTP Headers Reference Fixes: gh-5868	7 years ago
Rob Winch	72301e548a	Reactive OAuth2 DSL Customizations Fixes: gh-5855	7 years ago
Rob Winch	385bdfc055	OAuth2AuthorizationCodeGrantWebFilter works with /{action}/ This ensures that the same URL can work for both log in and authorization code which prevents having to create additional registrations on the client and potentially on the server (GitHub only allows a single valid redirect URL). Fixes: gh-5856	7 years ago
Rob Winch	68bc649a45	Fix XsdDocumentedTests Issue: gh-5836	7 years ago
Johnny Lim	42327a0aec	Polish OAuth2ResourceServerConfigurerTests	7 years ago
Josh Cummings	2c982a4168	Reactive Redirect to Https This introduces the capability to configure Reactive Spring Security to upgrade requests to HTTPS Fixes: gh-5749	7 years ago
Johnny Lim	f164f2f869	Polish FilterComparator Extracts STEP incrementing into a separate helper class	7 years ago
Rob Winch	438d2911fb	OAuth2AuthorizedClientResolver Extract out a private API for shared code between the argument resolver and WebClient support. This makes it easier to make changes in both locations. Later we will extract this out so it is not a copy/paste effort. Issue: gh-4921	7 years ago
Rob Winch	07b6699fd9	ServerWebExchangeReactorContextWebFilter Fixes: gh-5779	7 years ago
Sola	c60fcf263e	provide test for custom principal extractor config Signed-off-by: Sola <dev@sola.love>	7 years ago
Sola	2980f96b55	Allow PrincipalExtractor to be customized. Signed-off-by: Sola <dev@sola.love>	7 years ago
Josh Cummings	932ea245fb	AuthenticationManager for OAuth2ResourceServerSpec This makes the AuthenticationManager used by the OAuth2 Resource Server configurable, focusing at this point on the Jwt use case. Fixes: gh-5750	7 years ago
Josh Cummings	25d1f49d84	Remove Resource Server's Session Policy Config Resource Server doesn't need to set the session policy for the application to STATELESS since it can rely on the SessionManagementFilter ignoring token's annotated with @Transient, which a JwtAuthenticationToken is. Fixes: gh-5759	7 years ago
Josh Cummings	8510e9a285	Reactive Resource Server insufficient_scope This introduces an implementation of ServerAccessDeniedHandler that is compliant with the OAuth 2.0 spec for insufficent_scope errors. Fixes: gh-5705	7 years ago
Joe Grandja	229b69dd35	Add DefaultAuthorizationCodeTokenResponseClient Fixes gh-5547	7 years ago
Vedran Pavic	cb0ba58b58	Fix WhitespaceAfterCheck Checkstyle check	7 years ago
Rob Winch	1640a1f462	Polish ServerAuthenticationConverter Fix package tangles Issue: gh-5338	7 years ago
Josh Cummings	68d836d508	Reactive Resource Server Csrf Bypass This makes requests identified as bearer token requests skip the csrf filter. Fixes: gh-5710	7 years ago
Rob Winch	820fb7d828	Polish formatting ServerHttpSecurity JwtSpec Fixes: gh-5728	7 years ago
Josh Cummings	cba2444e1a	ServerHttpSecurity ReactiveJwtDecoder discovery This makes so that WebFlux OAuth 2.0 Resource Server configuration will pick up a ReactiveJwtDecoder exposed as a bean. Fixes: gh-5720	7 years ago
Josh Cummings	0fdc081ab5	Add unit tests Added some unit tests around some untested parts of the code that I will be touching for this issue. Issue: gh-5720	7 years ago
Joe Grandja	ff6e1232c8	Flatten HttpSecurity.oauth2() Fixes gh-5715	7 years ago
Joe Grandja	0f89e59707	Simplified oauth2().client() DSL Fixes gh-5662	7 years ago
Rob Winch	0dc80aed40	Flatten ServerHttpSecurity.oauth2() Fixes: gh-5712	7 years ago
Rob Winch	53652584b2	ResourceServerSpec->OAuth2ResourceServerSpec Fixes: gh-5713	7 years ago
Joe Grandja	c3e19e29b5	Remove authorizationEndpoint.baseUri in OAuth2ClientConfigurer Fixes gh-5661	7 years ago
Vedran Pavic	f382b69507	Add reactive support for Referrer-Policy security header	7 years ago
Vedran Pavic	10621a0f2c	Add reactive support for Content-Security-Policy security header	7 years ago
Vedran Pavic	29cfc3dd1d	Add reactive support for Feature-Policy security header Closes gh-5672	7 years ago

1 2 3 4 5 ...

1220 Commits (a32d19ec7dfcd9dd2b51e37f1adc3d8f1bf23490)