8146b1fdda
Deprecate CustomUserTypesOAuth2UserService
...
Closes gh-8908
6 years ago
0ed919f072
Deprecate ClientRegistration.redirectUriTemplate
...
Closes gh-8906
6 years ago
11cc94afd8
Deprecate ImplicitGrantConfigurer
...
Closes gh-8902
6 years ago
0a2006ebec
Support custom filter in Server Kotlin DSL
...
Closes gh-8783
6 years ago
37aa5f9b7c
Introduce AuthenticationConverterServerWebExchangeMatcher
...
AuthenticationConverterServerWebExchangeMatcher is ServerWebExchangeMatcher implementation based on AuthenticationConverter which matches if ServerWebExchange can be converted to Authentication.
It can be used as a matcher where SecurityFilterChain should be matched based on used authentication method.
BearerTokenServerWebExchangeMatcher was replaced by this matcher.
Closes gh-8824
6 years ago
cc44a93333
Polish WebSecurityConfigurerAdapter JavaDoc
...
Issue gh-8784
6 years ago
956a6ee00c
WebSecurityConfigurerAdapter JavaDoc
...
Closes gh-8784
6 years ago
2c960d2ad1
Add AuthnRequestConsumerResolver
...
Closes gh-8141
6 years ago
7cc6509200
Polish gh-8669
6 years ago
78ed6c4de6
Add custom HeaderWriter in Kotlin DSL
...
Closes gh-8823
6 years ago
815ceae45c
Allow disabling headers in Kotlin DSL
...
Closes gh-8816
6 years ago
0b5a14a900
Register OAuth2AuthorizedClientArgumentResolver as custom resolver for XML config
...
Issue gh-8669
6 years ago
3e25714dc6
Add reified function variants to security DSL
...
Closes gh-8697
6 years ago
edf06a3461
OAuth2AuthorizedClientArgumentResolver uses OAuth2AuthorizedClientManager @Bean
...
Closes gh-8700
6 years ago
951e64185b
Register OAuth2AuthorizedClientArgumentResolver for XML Config
...
Closes gh-8669
6 years ago
224361cb4a
Fix typo in Javadoc
6 years ago
4e7be2078f
DefaultWebSecurityExpressionHandler uses RoleHierarchy bean
...
Fixes gh-7059
6 years ago
a907026eae
Deprecate X-FRAME-OPTIONS ALLOW-FROM Directive
...
Closes gh-8677
6 years ago
da4b626bf1
OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException
...
Issue gh-8609
6 years ago
28d2cfa14a
Add ServerRequestCache setter in OAuth2AuthorizationCodeGrantWebFilter
...
Fixes gh-8536
6 years ago
748538d19f
Delay AuthenticationPrincipalArgumentResolver Creation
...
Use ObjectProvider<AuthenticationPrincipalArgumentResolver> to delay its
lookup.
Closes gh-8613
6 years ago
61060b3a4f
Add multipart configuration to CSRF Kotlin DSL
...
Fixes gh-8602
6 years ago
6f5947cab7
Fix test warnings
6 years ago
fa11ae3c33
Remove unused import
6 years ago
67d2efde1c
Resolve package tangles with security marker annotation
6 years ago
bc272ddf73
Resolve package tangles in Kotlin server package
6 years ago
f1db7167cb
Polish
...
Use `getBeanOrNull` in `registerDelegateApplicationListener` to simplify implementation.
This change does not alter behavior.
6 years ago
dbdeec4216
Check for an existing SessionRegistry bean
...
If a SessionRegistry is necessary, check for one in the ApplicationContext before creating one.
6 years ago
0fa339f75b
Allow port=0 for ApacheDSContainer
...
Fixes gh-8144
6 years ago
51a0cffd36
Post-process AuthenticationRequestFilter
...
Fixes gh-8552
6 years ago
9241cd2892
Move TestRelyingPartyRegistrations
...
Fixes gh-8551
6 years ago
1e211b6558
Add RequestCache setter in OAuth2AuthorizationCodeGrantFilter
...
Fixes gh-8120
6 years ago
c1abc9b134
Polish gh-8501
6 years ago
78fa859798
Add issuerUri to ClientRegistration.providerDetails
...
- Add "issuerUri" attribute to ClientRegistration.providerDetails for OpenID Connect Discovery 1.0 or OAuth 2.0 Authorization Server Metadata.
- Validate OidcIdToken "iss" claim against the OpenID Provider "issuerUri" value.
- Update documentation for client registration: it includes issuer-uri property now.
Fixes gh-8326
6 years ago
1aadbb2f4d
Remove "/path/**/other" patterns in tests
...
Fixes gh-8513
6 years ago
f2a2b469c4
Deprecate openID 2.0 support
...
This commit adds deprecation notice to xml schema, parser of the schema and removes fixme comments.
Fixes gh-7153
6 years ago
d91b153cad
Explicitly set useSuffixPatternMatch for Tests
...
Spring MVC changed their default behavior in
https://github.com/spring-projects/spring-framework/issues/23915 This
causes failures in some of Spring Security's tests.
This explicitly sets useSuffixPatternMatch=true to ensure that Spring
Security still works if users have modified their defaults.
Closes gh-8493
6 years ago
339d44b5a1
Deprecate openID 2.0 support
...
This commit puts deprecation notice on docs, sample applications and configurations (java and xml)
Fixes gh-7153
6 years ago
4a9fa0337a
Allow Configure RequestRjectedHandler in XML
...
Issue gh-5007
6 years ago
b826c798f7
Add RequestRejectedHandler
...
Closes gh-5007
6 years ago
8e8251ac5f
Add ROLE_INFRASTRUCTURE to infrastructure beans
...
Closes gh-8407
6 years ago
0f29bee1b0
Add authorize() DSL method that accepts HttpMethod
...
Fixes: gh-8307
6 years ago
16a7cbee4b
Use named arguments in Kotlin authorization rule
6 years ago
401393d756
Extract pattern type in request matcher DSL
6 years ago
5cd1ec7bb3
Add AuthoritiesMapper setter for reactive OAuth2Login
...
Allow the configuration of a custom GrantedAuthorityMapper for reactive OAuth2Login
- Add setter in OidcAuthorizationCodeReactiveAuthenticationManager
and OAuth2LoginReactiveAuthenticationManager
- Use an available GrantedAuthorityMapper bean to configure the default ReactiveAuthenticationManager
Fixes gh-8324
6 years ago
2cccf223df
Add Flag to enable searching of LDAP groups on subtrees
...
Closes gh-8939
6 years ago
146d9ba0bf
Add marker to make Kotlin DSL type safe.
...
Fixes gh-8366
6 years ago
a70d55552b
Resource Server Finds JwtAuthenticationConverter Beans
...
Fixes gh-8185
6 years ago
9a42a028e7
Logout defaults to use Global SecurityContextServerLogoutHandler
...
Closes gh-8375
6 years ago
711954e016
Deprecate Saml2AuthenticationRequestFilter Constructor
...
Removing the default usage of OpenSamlAuthenticationRequestFactory.
Otherwise, the Open SAML dependency is required, even when
Saml2AuthenticationRequestFactory is implemented without it.
Fixes gh-8359
6 years ago
Joe Grandja
Evgeniy Cheban
Dávid Kováč
Josh Cummings
Romil Patel
Eleftheria Stein
Peer Schönhusen
Rob Winch
Parikshit Dutta
Craig Andrews
Joe Grandja
Thomas Vitale
Dávid Kovács
Leonard Brünings
Adam Millerchip
Antonin Arquey
Roberto Paolillo
Loïc Labagnara