Marcus Da Coregio
64e2a2ff8b
Apply updated Code Style
...
Closes gh-13881
3 years ago
Steve Riesenberg
9b7a110704
Fix OAuth2AuthenticationExceptionMixinTests on JDK 17
...
Closes gh-11893
3 years ago
Josh Cummings
c1002ff745
Improve Error Handling
...
Closes gh-13143
3 years ago
이경욱
52c7141aac
Save Request Before Response Is Committed
...
Specifically important for cookie-based authorization request
repositories.
Closes gh-11602
3 years ago
Michael Sosa
52888d6206
Warn when AuthorizationGrantType does not match
...
Log a warning when AuthorizationGrantType does not exactly match a
pre-defined constant.
Closes gh-11905
3 years ago
Steve Riesenberg
fde26e003a
Request user info when AS returns no scopes
...
Closes gh-12144
3 years ago
Ger Roza
8315545144
Update RP-Initiated Logout target URLs.
...
The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs.
Fixes: gh-12081
3 years ago
Steve Riesenberg
75004587a4
Fix scope mapping
...
Issue gh-12101
3 years ago
Steve Riesenberg
bbac85e20b
Reduce severity of invalid registrationId to warn
...
This prevents filling the log file with error messages when routine
scans are being performed.
Closes gh-11344
4 years ago
Daniel Garnier-Moiroux
bea7761a1c
ClientRegistrations#rest defines 30s connect and read timeouts
4 years ago
Rob Winch
32dbaceec5
Fix mockito 4.7.0 merge
...
Issue gh-11748
4 years ago
Rob Winch
2fb625db84
Remove mockito deprecations
...
Issue gh-11748
4 years ago
Igor Bolic
efaee4e56b
Allow customization of redirect strategy
...
The default redirect strategy will provide authorization redirect
URI within HTTP 302 response Location header.
Allowing the configuration of custom redirect strategy will provide
an option for the clients to obtain the authorization URI from e.g.
HTTP response body as JSON payload, without a need to handle
automatic redirection initiated by the HTTP Location header.
Closes gh-11373
4 years ago
Joe Grandja
95155ddb0c
Deprecate Resource Owner Password Credentials grant
...
Closes gh-11590
4 years ago
Josh Cummings
1d72a05c32
Add SecurityContextHolderStrategy to OAuth2
...
Issue gh-11060
4 years ago
Josh Cummings
539a11d0a4
Encode postLogoutRedirectUri query params
...
Closes gh-11379
4 years ago
Josh Cummings
f035c30edb
Encode postLogoutRedirectUri query params
...
Closes gh-11379
4 years ago
Josh Cummings
01513ab17e
Add placeholders to reactive post_logout_redirect_uri
...
Now also supports baseScheme, baseHost, basePort, and basePath
Issue gh-11229
4 years ago
Josh Cummings
6f69d85fcb
Reactive OAuth 2.0 logout handler resolves registrationId
...
Closes gh-11378
4 years ago
Josh Cummings
3f30de388a
Encode postLogoutRedirectUri query params
...
Closes gh-11379
4 years ago
Michael
e4505ed6c8
Add placeholders to post_logout_redirect_uri
...
Now supports baseScheme, baseHost, basePort, and basePath in addition
to extant baseUrl.
Closes gh-11229
4 years ago
Marcus Da Coregio
b8b0661d73
Lock Dependencies for Release
4 years ago
Steve Riesenberg
f0168c6c27
Add support for customizing claims in JWT Client Assertion
...
Closes gh-9855
4 years ago
Joe Grandja
50d315d833
Remove unused code
4 years ago
Joe Grandja
a2ffc88294
Allow configuring PKCE for confidential clients
...
Closes gh-6548
4 years ago
Simone Giannino
73003d59d6
OAuth 2.0 logout handler resolves uri placeholders
...
- OidcClientInitiatedLogoutSuccessHandler can automatically resolve placeholders like baseUrl and registrationId inside the postLogoutRedirectUri
Issue gh-7900
4 years ago
Josh Cummings
931fb6a328
Move UnmodifiableMapDeserializer
...
Issue gh-10905
4 years ago
Marcus Da Coregio
bebd615507
Update io.r2dbc to 0.9.1.RELEASE
...
Closes gh-10883
4 years ago
Marcus Da Coregio
883c480af0
Update r2dbc-h2 to 0.8.5.RELEASE
...
Closes gh-10869
4 years ago
Eleftheria Stein
d655deb718
Update r2dbc-h2 to 0.8.5.RELEASE
...
Closes gh-10856
4 years ago
Rob Winch
c67ee6f2a8
javax.servlet:javax.servlet-api -> jakarta.servlet:jakarta.servlet-api
...
Issue gh-10501
4 years ago
Rob Winch
8f64bb6c8c
javax.servlet:javax.servlet-api -> jakarta.servlet:jakarta.servlet-api
...
Issue gh-10501
4 years ago
Steve Riesenberg
7c54f98944
Update io.r2dbc to 0.9.0.RELEASE
...
Closes gh-10717
4 years ago
Joe Grandja
214cfe807e
Allow Jwt assertion to be resolved
...
Closes gh-9812
4 years ago
Eleftheria Stein
3389cf3ffc
Revert "Lock dependencies"
...
This reverts commit 83bb4603f8 .
4 years ago
Marcus Da Coregio
cfbf28b8ba
Revert "Lock Dependencies for Release"
...
This reverts commit 3d4e90ba2a .
4 years ago
Eleftheria Stein
83bb4603f8
Lock dependencies
4 years ago
Marcus Da Coregio
3d4e90ba2a
Lock Dependencies for Release
4 years ago
Dávid Kováč
17e28fa7aa
Update clockSkew javadoc according to implementation
...
Closes gh-10174
4 years ago
Dávid Kováč
aa1ef46d84
Update clockSkew javadoc according to implementation
...
Closes gh-10174
4 years ago
Khaled Hamlaoui
00fafd878c
Allow custom OAuth2ErrorHttpMessageConverter with OAuth2ErrorResponseErrorHandler
...
Closes gh-10425
4 years ago
Steve Riesenberg
076c01daef
Add missing @since 5.6
4 years ago
Rob Winch
e4a76b0ec9
Checkstyle Fixes
...
- Javadoc tag ordering
- Private constructors before inner classes
Issue gh-10394
4 years ago
Rob Winch
f836897190
Checkstyle Fixes
...
- Javadoc tag ordering
- Private constructors before inner classes
Issue gh-10394
4 years ago
Rob Winch
0c088e278a
Update r2dbc-spi-test to 0.8.6.RELEASE
...
Closes gh-10393
4 years ago
Steve Riesenberg
0704c709dc
Revert "Lock Dependencies for Release"
...
This reverts commit 03c2c49d66 .
4 years ago
Steve Riesenberg
03c2c49d66
Lock Dependencies for Release
4 years ago
Steve Riesenberg
c83bd075a2
Revert "Lock Dependencies for Release"
...
This reverts commit bedb569f0d .
4 years ago
Steve Riesenberg
bedb569f0d
Lock Dependencies for Release
4 years ago
Steve Riesenberg
b2db2bdb2a
Update r2dbc-spi-test to 0.8.6.RELEASE
...
Closes gh-10410
4 years ago