Guirong Hu
3935f4bffe
Fix the bug that the custom GrantedAuthority comparison fails
...
Closes gh-10566
4 years ago
Josh Cummings
78857c62f4
Polish Memory Leak Mitigation
...
Issue gh-9841
4 years ago
Hiroshi Shirosaki
809ff883b0
Address SecurityContextHolder memory leak
...
To get current context without creating a new context.
Creating a new context may cause ThreadLocal leak.
Closes gh-9841
4 years ago
Eleftheria Stein
4f8c1b34af
Polish LDAP serialization
...
Closes gh-9263
4 years ago
Markus Heiden
7cfd415cb5
Start with LDAP Jackson2 mixins
...
Issue gh-9263
4 years ago
Marcus Da Coregio
5a0f1d51c3
Drop EhCache2 support
...
Issue gh-10363
4 years ago
Marcus Da Coregio
db60df2f9c
Update to Spring Framework 6.0
...
Issue gh-10360
4 years ago
Marcus Da Coregio
b2e6c60d94
Remove remoting technologies support
...
Closes gh-10366
4 years ago
Marcus Da Coregio
010f719344
Upgrade to JDK 17
...
Closes gh-10343
4 years ago
Marcus Da Coregio
12f3e908b0
Update to Spring Security 6.0
4 years ago
Emil Sierżęga
e0821f2a99
DaoAuthenticationProviderTests#avg returns fraction
4 years ago
Steve Riesenberg
5e091b94a9
Deprecate RemoteAuthentication* for 5.6
...
Closes gh-10430
4 years ago
Emil Sierżęga
a188138715
Javadocs author tag doesn't work in methods
4 years ago
Rob Winch
f836897190
Checkstyle Fixes
...
- Javadoc tag ordering
- Private constructors before inner classes
Issue gh-10394
4 years ago
Marcus Da Coregio
7fa39c8807
Deprecate EhCache2 support
...
Since EhCache 3 is fully JSR-107 compliant, we should remove EhCache2 support and provide JCache implementations
Closes gh-10362
4 years ago
Marcus Da Coregio
86c24da38b
Improve Method Security logging
...
Closes gh-10247
4 years ago
Marcus Da Coregio
ef01124eb9
Add reasons to AuthorizationDecisions
...
Closes gh-9287
4 years ago
Marcus Da Coregio
570092c467
Remove trace logs for PrePostAnnotationSecurityMetadataSource
...
Those logs were producing too much noise on the console without adding much value.
Issue gh-10247
4 years ago
Marcus Da Coregio
02b2fcc6f0
Restore ManagementConfigurationPlugin
...
Issue gh-9615
4 years ago
Marcus Da Coregio
d2e5f2ae0d
Update Gradle to 7.2
...
Closes gh-9615
4 years ago
Alexander Furer
8c74d6cea5
Fix isAssignable order
...
Closes gh-10236
4 years ago
heowc
84d173c310
Fix typo
4 years ago
OllisGit
658aff501c
Assert Error-Messages already includes dashes
...
When the cert-content is not valid, the assert output message is not correct.
Because it outputs too many dashes .The const X509- and PKCS8-PEM_HEADER already includes the dashes.
I took the output message via copy and paste, but it was still not valid ;-(
Only the output is affected, the checks itself is correct.
4 years ago
heowc
7b73b94198
Fix typo
4 years ago
Josh Cummings
5da55448f9
Polish SecurityContextChangedEvent
...
- Changed methods to getOldContext and getNewContext
Closes gh-10249
4 years ago
Josh Cummings
3e87ef84ae
Replace SecurityContextHolder#addListener
...
Closes gh-10226
4 years ago
Hiroshi Shirosaki
6f3e346b76
Add SecurityContextHolder#addListener
...
Closes gh-10032
5 years ago
Josh Cummings
b8d51725c7
Immutable SecurityContext
...
Issue gh-10032
5 years ago
Rob Winch
f73f213f50
Remove DependencySetPlugin
...
Closes gh-10070
5 years ago
Josh Cummings
01af7877ea
Polish RsaKeyConverters
...
- Remove potential for returning null
- Remove potential for parsing more than one header
Issue gh-9736
5 years ago
shazin
5f7d871258
Add X.509 Certificate Support
...
Closes gh-9736
5 years ago
Rob Winch
b6ff4d3674
Fix mockito UnnecessaryStubbingException
5 years ago
Rob Winch
3e93b024d6
openrewrite Junit Migration
5 years ago
Rob Winch
14240b2559
Remove Powermock
...
Powermock does not support JUnit5 yet, so we need to remove it
to support JUnit 5. Additionally, maintaining additional libraries
adds extra work for the team.
Mockito now supports final classes and static method mocking. This
commit replaces Powermock with mockito-inline.
Closes gh-6025
5 years ago
Josh Cummings
81ded2a0e5
Polish Assertion
...
By using the supplier version of Assert.notNull, the
string concatenation is delayed.
Issue gh-3403
5 years ago
Marcus Da Coregio
19aa44af41
Improve Error Message for Invalid Properties
...
Closes gh-3403
5 years ago
Ruben Suarez Alvarez
7cd344acab
Add spanish translation of insufficient authentication and cookie stolen
5 years ago
YBCoding
25fa187406
Add insufficient authentication message for French
...
Partially fix gh-9315
5 years ago
pxzxj
20577c39c1
Add insufficient authentication message for Simplified Chinese and Traditional Chinese
...
Partially fix gh-9315
5 years ago
Josh Cummings
7ed38f1a26
Adjust Test Names
...
Issue gh-9514
5 years ago
Josh Cummings
e1e31939a3
Add @since
...
Issue gh-9514
5 years ago
Giacomo Baso
80743a267c
Add SecurityContext to delegating TaskScheduler
...
Wrap DelegatingSecurityContextTaskScheduler's Runnable tasks in
DelegatingSecurityContextRunnables, allowing to specify a
SecurityContext to use for tasks execution.
- Renamed private variable taskScheduler to delegate
- Removed unused local variable in unit test
- Add SecurityContext tests for delegating TaskScheduler
Closes gh-9514
5 years ago
Josh Cummings
67e5c05a47
Polish AuthorizationManager Method Security
...
- Removed consolidated pointcut advisor in favor of each interceptor
being an advisor. This allows Spring AOP to do more of the heavy
lifting of selecting the set of interceptors that applies
- Created new method context for after interceptors instead of
modifying existing one
- Added documentation
- Added XML support
- Added AuthorizationInterceptorsOrder to simplify interceptor
ordering
- Adjusted annotation lookup to comply with JSR-250 spec
- Adjusted annotation lookup to exhaustively search for duplicate
annotations
- Separated into three @Configuration classes, one for each set of
authorization annotations
Issue gh-9289
5 years ago
Evgeniy Cheban
84e2e80915
Consider AuthorizationManager for Method Security
...
Closes gh-9289
5 years ago
Rob Winch
1898446f68
core depends on crypto
...
Issue gh-9767
5 years ago
Rob Winch
56b7c662e4
Remove spring-security-crypto from spring-core pom
...
Instead of having api extend included configuration, we should use the
*Classpath configurations.
Closes gh-9767
5 years ago
Josh Cummings
d203235567
Update to Spring Security 5.6
...
Closes gh-9695
5 years ago
Rob Winch
304636520d
buildSrc to publish
5 years ago
Josh Cummings
17cfc6ade3
Inline ResourceKeyConverterAdapter
...
Closes gh-9689
Closes gh-9626
5 years ago
Eleftheria Stein
de0cd11a72
Fix PreAuthorize when returning Kotlin Flow
...
Closes gh-9676
5 years ago