spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	be20201bf7	FACTOR uses defaultEntryPoint when possible Previously they used addEntryPointFor(entryPoint, AnyRequestMatcher.INSTANCE) to work around gh-17955. They now can use defaultEntryPoint which is more concise. Issue gh-gh-17955	6 months ago
Rob Winch	029e31ebe8	DelegatingAuthenticationEntryPoint.Builder allows just defaultEntryPoint Previously build threw an Exception when entryPoints was empty and defaultEntryPoint was specified. This commit changes build to return the defaultEntryPoint instead. Closes gh-17955	6 months ago
Josh Cummings	ad6fe4fdc3	Polish MFA Samples This commit removes unneeded AuthorizationManagerFactory implementations, simplifies the custom AuthorizationManagerFactory example, and updates usage of hasAllAuthorities. Issue gh-17934	6 months ago
Rob Winch	f652920bb3	Add @EnableGlobalMultiFactorAuthentication Closes gh-17954	6 months ago
Rob Winch	e33e4d80a9	Fix Antora Warnings in servlet/authentication/adaptive.adoc Issue gh-2603	6 months ago
Rob Winch	b2d76dfe66	Add GrantedAuthorities.FACTOR_*_AUTHORITY Closes gh-17952	6 months ago
Josh Cummings	28aad8855c	Merge branch 'mfa' Closes gh-2603	6 months ago
Josh Cummings	bbba2930e9	Add Initial Documentation Issue gh-17934	6 months ago
Josh Cummings	d757e6e44e	Response to Additional Feedback - Moved request attribute to WebAttributes - Renamed ExceptionHandlingConfigurer methods - Removed varargs from DelegatingMissingAuthorityAccessDeniedHandler Issue gh-17901 Issue gh-17934	6 months ago
Josh Cummings	50ebd467c3	Polish Default Login Page Issue gh-17901	6 months ago
Josh Cummings	42376e2eee	Prepopulate Username When Known Closes gh-17935	6 months ago
Josh Cummings	e813aad82b	Support Showing One Part of Login Page Closes gh-17901	6 months ago
Josh Cummings	9f317757c3	Make Public Missing Authority AccessDeniedHandler Issue gh-17934	6 months ago
Josh Cummings	df7a7cdc99	Update Test for Method Security Issue gh-17936	6 months ago
Josh Cummings	e66c498d80	Redirect to Appropriate Entry Point Based on Missing Authorities Issue gh-17934	6 months ago
Josh Cummings	fe17f2904d	Initial Exception Handling This commit hardcodes factors as a proof of concept for multi-factor authentication Issue gh-17934	6 months ago
Rob Winch	549569ea55	Add DefaultAuthorizationManagerFactory.additionalAuthorization	6 months ago
Rob Winch	1608465a38	DefaultAuthorizationManagerFactory additionalAuthorization This commit adds AuthorizationManager<T> additionalAuthorization to DefaultAuthorizationManagerFactory which can be used for multi factor authorization. There is a builder that allows for creating an instance that requires static additional authorities, but for more advanced cases users can inject an additionalAuthorization that looks up if the user has settings that enable additional required authorities. The builder can later be updated to support checking that a particular authority was granted within a specified amount of time. Issue gh-17900	6 months ago
Rob Winch	459b872a20	Cleanup Kotlin AuthorizationManagerFactory Generics This cleans up the generic types within the Kotlin DSL that reference AuthorizationManagerFactory Issue gh-17860	6 months ago
Josh Cummings	628f3da30b	Revert "Add AuthorityUtils Methods" This reverts commit `50bdaeb100` that was accidentally committed	6 months ago
Josh Cummings	5ca5aca48e	Add Null Guard Issue gh-17933	6 months ago
Josh Cummings	c61f53ad64	Copy Query to Parameters Issue gh-17450	6 months ago
Josh Cummings	50bdaeb100	Add AuthorityUtils Methods This commit adds a couple of utility methods for working with authorities by type. Now that there are infrastructural authorities that Spring Secuirty works with directly, it's helpful to be able to filter them out of the authority list.	6 months ago
Rob Winch	b31fdcd89f	Merge branch '6.5.x'	6 months ago
Rob Winch	1878a1e03b	Merge branch '6.4.x' into 6.5.x	6 months ago
Rob Winch	f0f57ad560	Bump org.assertj:assertj-core from 3.27.4 to 3.27.5	6 months ago
Rob Winch	93ded52236	Bump org.gretty:gretty from 4.1.7 to 4.1.10	6 months ago
Rob Winch	329af112ed	Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE	6 months ago
Rob Winch	3f1a60b0b8	Bump com.google.code.gson:gson from 2.13.1 to 2.13.2	6 months ago
Rob Winch	67373e8c13	Bump org.assertj:assertj-core from 3.27.4 to 3.27.5	6 months ago
Rob Winch	4ef16b14d2	Update terminology to HTTP Service Clients Closes gh-17947	6 months ago
dependabot[bot]	7d93186c69	Bump org.gretty:gretty from 4.1.7 to 4.1.10 Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty) from 4.1.7 to 4.1.10. - [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases) - [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md) - [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.7...v4.1.10) --- updated-dependencies: - dependency-name: org.gretty:gretty dependency-version: 4.1.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
dependabot[bot]	ae4b2e50e2	Bump org.gretty:gretty from 4.1.7 to 4.1.10 Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty) from 4.1.7 to 4.1.10. - [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases) - [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md) - [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.7...v4.1.10) --- updated-dependencies: - dependency-name: org.gretty:gretty dependency-version: 4.1.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
dependabot[bot]	e323377768	Bump org.gretty:gretty from 4.1.7 to 4.1.10 Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty) from 4.1.7 to 4.1.10. - [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases) - [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md) - [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.7...v4.1.10) --- updated-dependencies: - dependency-name: org.gretty:gretty dependency-version: 4.1.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
Andrey Litvitski	68742e170c	Support Automatically Checking for Required Authorities in Authorization Rules Closes: gh-17900 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	6 months ago
Josh Cummings	a63e87d8fb	Remove Static Mock These can cause infinite loops when running tests in an IDE.	6 months ago
Rob Winch	229c7bca5b	Add AuthorizationManagerFactory in Kotlin DSL Closes gh-17860	6 months ago
Josh Cummings	765bdf1ed0	SpEL Expressions Support Returning AuthorizationManager Closes gh-17936	6 months ago
Josh Cummings	25e413127c	Merge branch 'authentication-factors' Closes gh-17933	6 months ago
Josh Cummings	1e1cb0097a	Document Authentication Factors Issue gh-17933	6 months ago
Josh Cummings	6e7a181eac	Polish Authentication Factors Issue gh-17933	6 months ago
Josh Cummings	758b35df9c	Add Factor Tests for Authentication Providers Issue gh-17933	6 months ago
Josh Cummings	39e2bb67fc	Create Authentication Only Once Issue gh-17933	6 months ago
Josh Cummings	0f4e1f2a2a	Move FACTOR_X509 into PreAuthenticatedAuthenticationProvider Issue gh-17933	6 months ago
Josh Cummings	e8accd0499	Add Factory Authority When Authentication Succeeds Issue gh-17933	6 months ago
Rob Winch	9eaadcc70d	Add hasAll(Roles\|Authorities) to SecurityExpressionRoot This adds support for hasAllRoles and hasAllAuthorities to method security expressions. Issue gh-17932	6 months ago
dependabot[bot]	a3b2ebff6e	Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.4 to 3.27.5. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.4...assertj-build-3.27.5) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
dependabot[bot]	476e5c5a3a	Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.4 to 3.27.5. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.4...assertj-build-3.27.5) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
Rob Winch	bce8049815	Web uses AuthorizationManager<? super RequestAuthorizationContext> This allows AuthorizationManager<Object> to be used instead of just AuthorizationManager<RequestAuthorizationContext>. In addition, the code was updated to use `AuthorizationManagerFactory<? super RequestAuthorizationContext>` Closes gh-17931	6 months ago
Rob Winch	675835e525	Add AuthorizationManagerFactory.hasAll(Authorities\|Roles) Closes gh-17932	6 months ago

1 2 3 4 5 ...

19573 Commits (be20201bf7be7923ebfdabea15c9dfbbf29c30f0) All Branches Search

19573 Commits (be20201bf7be7923ebfdabea15c9dfbbf29c30f0)

All Branches