Eleftheria Stein
de7cbc82b5
Clarify in Javadoc that expressionHandler should not be null
...
Fixes: gh-2665
7 years ago
Josh Cummings
758af54796
ObjectPostProcessor Tests groovy->java
...
Issue gh-4939
7 years ago
Josh Cummings
a08be5bf6f
UrlAuthorizationsTests groovy->java
...
Issue gh-4939
7 years ago
Josh Cummings
870d83eb3e
PermitAllSupportTests groovy->java
...
Issue gh-4939
7 years ago
Luis Felipe Vega Calle
350bce761f
Add hasAuthority method to RSocketSecurity
...
Fixes gh-7435
7 years ago
Josh Cummings
5f905232cb
Polish CurrentSecurityContextArgumentResolvers
...
Fixes gh-7487
7 years ago
Joe Grandja
5ef6e7ed6f
Add author for SecurityReactorContextConfiguration
...
Issue gh-7422
7 years ago
Joe Grandja
0fea57d6a1
Optimize SecurityReactorContextConfiguration
...
Issue gh-7422
7 years ago
Josh Cummings
33ba292fed
Resource Server w/ SecurityReactorContextSubscriber
...
Fixes gh-7423
7 years ago
Joe Grandja
5a67971375
WebFluxSecurityConfiguration configures oauth2Client() by default
...
Fixes gh-7470
7 years ago
Joe Grandja
08d2c93713
Polish gh-7466
7 years ago
Roman Chigvintsev
9bae0a4dbd
Allow to customize OAuth2AuthorizationRequestRedirectWebFilter in OAuth2LoginSpec
...
Fixes gh-7466
7 years ago
Joe Grandja
2a5bd6e719
Align Servlet ExchangeFilterFunction CoreSubscriber
...
Fixes gh-7422
7 years ago
Joe Grandja
d3b7a47ef8
Polish gh-4442
7 years ago
Mark Heckler
da9f027fa4
Add nonce to OIDC Authentication Request
...
Fixes gh-4442
7 years ago
Jesús Ascama
ceab56f764
Fix AuthorizationPayloadInterceptor order using PayloadInterceptorOrder.AUTHORIZATION
...
Fixes gh-7434
7 years ago
Joe Grandja
9f18c2e21a
OAuth2AuthorizationCodeGrantWebFilter matches on registered redirect-uri
...
Fixes gh-7036
7 years ago
Eleftheria Stein
98e75eb51a
Fix Javadoc for anonymous
7 years ago
Ebert Toribio
3a66191756
Add hasAnyAuthority method in AuthorizePayloadsSpec.Access
...
See Fixes gh-7437
Co-authored-by: Eddú Meléndez <eddu.melendez@gmail.com>
7 years ago
Onur Kagan Ozcan
034b5e9e93
Introduce LogoutSuccessEvent
...
LogoutSuccessEvent is a simple AbstractAuthenticationEvent implementation which indicates successful logout.
By default, LogoutConfigurer will add a new LogoutHandler called LogoutSuccessEventPublishingLogoutHandler to publish this event.
This PR will also fix ConcurrentSessionFilter's composite logoutHandler, now will get LogoutHandler instances from LogoutConfigurer for consistency.
Fixes gh-2900
7 years ago
Manuel Tejeda
9926ad68b8
add hasAnyRole method in AuthorizePayloadsSpec.Access
7 years ago
Jesús Ascama
daf6b53e3a
Add denyAll method in AuthorizePayloadsSpec.Access
...
See gh-7437
Co-authored-by: Eddú Meléndez <eddu.melendez@gmail.com>
7 years ago
Josh Cummings
05caf3d8fb
Use Jwt.Builder
...
Fixes gh-7443
7 years ago
Josh Cummings
1176d0cfdb
Polish DefaultFilters,Issue55Tests
...
Formatted HttpSecurity and WebSecurity configuration stacks
Removed unnecessary code
Issue gh-4939
7 years ago
kostya05983
950e6422a1
Migrate DefaultFilters,Issue55Tests groovy->java
...
Issue gh-4939
7 years ago
Josh Cummings
101e0a21a8
Bearer WebClient Filter Authentication Propagation
...
Fixes: gh-7418
7 years ago
Rob Winch
96d44cd4b7
Add Default RSocketSecurity
...
Fixes gh-7361
7 years ago
Rob Winch
5d0815bc76
Allow RSocketMessageHandlerITests to timeout
...
Fixes gh-7415
7 years ago
Rob Winch
6296e6e896
RSocketSecurity delegates to correct matcher
...
Fixes gh-7414
7 years ago
Rob Winch
1b699a49fb
Polish RSocket packaging
...
Fixes gh-7413
7 years ago
Eleftheria Stein
aa533c2565
Add missing javadoc to session fixation
7 years ago
Rob Winch
316380e622
Allow Custom PayloadInterceptor to be Added
...
Fixes gh-7362
7 years ago
Joe Grandja
a60446836b
OAuth2AuthorizeRequest supports attributes
...
Fixes gh-7341
7 years ago
Filip Hanik
e9a44bc0ce
HttpSecurity.saml2login() - MVP Core Code
...
Implements minimal SAML 2.0 login/authentication functionality with the
following feature set:
- Supports IDP initiated login at the default url of /login/saml2/sso/{registrationId}
- Supports SP initiated login at the default url of /saml2/authenticate/{registrationId}
- Supports basic java-configuration via DSL
- Provides an integration sample using Spring Boot
Not implemented with this MVP
- Single Logout
- Dynamic Service Provider Metadata
Fixes gh-6019
7 years ago
Rob Winch
9639962e27
Fix RSocket Package Tangle
...
Issue gh-7360
7 years ago
Rob Winch
7ad641d106
RSocket Tests use Available Port
...
Issue gh-7360
7 years ago
Josh Cummings
26a65249f9
Remove invalid characters
7 years ago
Rob Winch
5a4eded696
Add RSocket Support
...
Fixes gh-7360
7 years ago
Joe Grandja
dcd997ea43
Add support for Resource Owner Password Credentials grant
...
Fixes gh-6003
7 years ago
Josh Cummings
de672e3ae9
Polish oauth2ResourceServer() Error Messaging
...
Fixes: gh-6876
7 years ago
Josh Cummings
1fc5b27fa2
Update LogoutConfigurerClearSiteData Tests
...
Issue gh-7347
7 years ago
Josh Cummings
068f4f0147
Polish Opaque Token
...
Use OAuth2AuthenticatedPrincipal
Use BearerTokenAuthentication
Update names to reflect more generic approach.
Fixes gh-7344
Fixes gh-7345
7 years ago
Eddú Meléndez
8773c7994f
Allow to set default securityContextRepository for each authentication mechanisms
...
Fixes gh-7249
7 years ago
kostya05983
f6c650db47
Replace Streams with Loops
...
First version of replacing streams
fix wwwAuthenticate and codestyle
fix errors in implementation to pass tests
Fix review notes
Remove uneccessary final to align with cb
Short circuit way to authorize
Simplify error message, make code readably
Return error while duplicate key found
Delete check for duplicate, checkstyle issues
Return duplicate error
Fixes gh-7154
7 years ago
Josh Cummings
d6d0d89ff8
NamespaceRememberMeTests groovy->java
...
Issue gh-4939
7 years ago
Josh Cummings
bf5b693549
NamespaceHttpOpenIDLoginTests groovy->java
...
Issue gh-4939
7 years ago
Lars Grefer
95511331fa
fix checkstyle
7 years ago
watsta
2c2e8e5f24
Remove internal Optional usage in favor of null checks
...
Issue gh-7155
7 years ago
Lars Grefer
34dd5fea30
Remove redundant throws clauses
...
Removes exceptions that are declared in a method's signature but never thrown by the method itself or its implementations/derivatives.
7 years ago
Joe Grandja
46756d2e6b
Introduce Reactive OAuth2AuthorizedClient Manager/Provider
...
Fixes gh-7116
7 years ago