37a2812d1a
Mimic Annotation Fallback Logic
...
For backward compatibility, this commit changes the annotation traversal
logic to match what is found in PrePostAnnotationSecurityMetadataSource.
This reverts gh-13783 which is a feature that unfortunately regressess
pre-existing behavior like that found in gh-15352. As such, that
functionality has been removed.
Issue gh-15352
2 years ago
77bce14462
Polish Annotation Test
...
This new arrangement of the test better matches the class
hierarchy described by the original ticket.
Issue gh-13234
2 years ago
90335bd0a6
Polish Annotation Test
...
This test was made more effective by having it focus on the real
scenario of resolving annotations from the standpoint of a bean
2 years ago
f20ae1a71c
Revert gh-13783
...
This feature unfortunately regresses pre-existing behavior
like that found in gh-15352. As such, this functionality
has been removed.
Closes gh-15352
2 years ago
4036e910c7
Add @FunctionalInterface to AuthenticationManager
2 years ago
c736e075c1
Add AnnotationSythesizer API
...
Closes gh-13234
Closes gh-13490
Closes gh-15097
2 years ago
e3438aa36a
Support AliasFor
...
Closes gh-15436
2 years ago
03bcc6776a
Correct Authorization Tests
...
Issue gh-9289
2 years ago
56c93afc66
Correct Tests About Conflicting Annotations
...
Issue gh-9289
2 years ago
9a714424d5
Adds missing translated messages for PT-BR
...
Partially fix #spring-projectsgh-9315
Adds Brazilian Portuguese translation missing for following messages in messages_pt_BR.properties;
- ExceptionTranslationFilter.insufficientAuthentication
- LdapAuthenticationProvider.badLdapConnection
- PersistentTokenBasedRememberMeServices.cookieStolen
2 years ago
aa9bf83c6d
Polish Exception Handling
...
Issue gh-15093
2 years ago
63f48167bd
Add Kotlin support to PreFilter and PostFilter annotations
...
Closes gh-15093
2 years ago
742c95b1fc
Use instanceof Pattern Matching
2 years ago
e932387714
fix docs error
...
Closes gh-14978
2 years ago
08f11f06ab
Revert unnecessary commits from main
...
Issue gh-15016
2 years ago
b3c7f3ff19
Rename CompromisedPasswordCheckResult to CompromisedPasswordDecision
...
Issue gh-7395
2 years ago
2a6f0cac5a
Fix not exist class in java doc
...
Closes gh-14954
2 years ago
2fbbcc4bd0
Polish Method Authorization Denied Handling
...
- Renamed @AuthorizationDeniedHandler to @HandleAuthorizationDenied
- Merged the post processor interface into MethodAuthorizationDeniedHandler , it now has two methods handleDeniedInvocation and handleDeniedInvocationResult
- @HandleAuthorizationDenied now handles AuthorizationDeniedException thrown from the method
Issue gh-14601
2 years ago
933ef67637
Polish AuthorizationDeniedException Handling
...
Issue gh-14600
2 years ago
50b85aea0d
Handle SpEL AuthorizationDeniedExceptions
...
Closes gh-14600
2 years ago
61eba00654
Move HaveIBeenPwnedRestApiPasswordChecker to spring-security-web
...
Prior to this commit, the implementation was placed in spring-security-core, however we do not want to introduce a dependency on spring-web and spring-webflux for that module.
Issue gh-7395
2 years ago
8d914ef145
Add @AuthorizationDeniedHandler for Method Authorization Denied Handling
...
Issue gh-14601
2 years ago
c8e5fbf21b
Fix Package Tangle
...
Issue gh-14598
2 years ago
e5f7453690
fix: variable naming convention
...
Changed the variable name from MAX_INTITEM_LENGTH to MAX_INT_ITEM_LENGTH to adhere to naming conventions
2 years ago
3f7355abc6
Synthesize all annotation attributes
...
Issue gh-14601
2 years ago
6f07d63938
Support SpEL Returning AuthorizationDecision
...
Closes gh-14598
2 years ago
0a9c482f62
Revert "Support SpEL Returning AuthorizationDecision"
...
This reverts commit 77f2977c55
2 years ago
77f2977c55
Support SpEL Returning AuthorizationDecision
...
Closes gh-14599
2 years ago
d85857f905
Add Authorization Denied Handlers for Method Security
...
Closes gh-14601
2 years ago
19d66c0b8a
Introduce AuthorizationResult
2 years ago
7d66525e23
Add Compromised Password Checker
...
Closes gh-7395
2 years ago
7162046144
Remove Reference to MethodInvocationResult
...
Closes gh-14794
2 years ago
04799c5aac
Update AuthenticationProvider JavaDoc
...
Authentication is an interface, not a class. So, it's not correct
to say "instance of the Authentication class".
2 years ago
e1c5dc0e66
Polish JavaDoc
...
Issue gh-14597
2 years ago
9898e0e993
Move AuthorizationAdvisorProxyFactory
...
To prevent package tangles
Issue gh-14596
2 years ago
12ea8a5738
Add Supplier Support
...
Issue gh-14597
2 years ago
795e44d11f
Add Value-Type Ignore Support
...
Issue gh-14597
2 years ago
ce54a6db18
Add TestAuthentication convenience method
...
Issue gh-14597
2 years ago
d169d5a835
Add AuthorizeReturnObject
...
Closes gh-14597
2 years ago
5a7f12f1a9
Check for null Authentication
...
Closes gh-14715
2 years ago
c611b7e33b
Add AuthorizationProxyFactory Reactive Support
...
Issue gh-14596
2 years ago
f541bce492
Polish AuthorizationAdvisorProxyFactory
...
- Ensure Reasonable Defaults
- Simplify Construction
Issue gh-14596
2 years ago
52dfbfb5b3
Add Authorization Proxy Support
...
Closes gh-14596
2 years ago
8f42c86a57
Use AuthorizationInterceptorsOrder for Post Authorize Method Interceptors
...
Closes gh-14720
2 years ago
c5a4405c54
Polish JavaDoc
...
Issue gh-14521
2 years ago
09010f3f51
Add ContinueOnError Support For Failed Authentications
...
Closes gh-14521
2 years ago
4d383023cb
Add meta-annotation parameter support
...
Closes gh-14480
2 years ago
750cb30ce4
Add AuthenticationTrustResolver.isAuthenticated
2 years ago
915d68e216
Remove includeExpiredSessions parameter
...
The reactive implementation of max sessions does not keep track of expired sessions, therefore we do not need such parameter
Issue gh-6192
2 years ago
b0da37d4fa
Have Method Security Start at Target Class
...
Closes gh-13783
2 years ago
Josh Cummings
KyeongHoon Lee
Juliana Hachmann
Blagoja Stamatovski
Hyeon Sung
MrJovanovic13
Marcus Hert Da Coregio
DingHao
YunByungil
Ali-Hassan
ruabtmh
Rob Winch