spring-security

Commit Graph

Author	SHA1	Message	Date
Eleftheria Stein	e97c643870	Deprecate WebSecurityConfigurerAdapter Closes gh-10822	4 years ago
Eleftheria Stein	c2635ba6bf	Apply configurers from spring.factories to HttpSecurity bean Closes gh-10814	4 years ago
Josh Cummings	cbd87fac89	Polish ignoring() log messaging - Public API remains unchanged Issue gh-9334	4 years ago
Manuel Jordan	01ed617d5f	Print ignore message DefaultSecurityFilterChain When either `web.ignoring().mvcMatchers(...)` or `web.ignoring().antMatchers(...)` methods are used, for all their variations, the DefaultSecurityFilterChain class now indicates correctly through its ouput what paths are ignored according the `ignoring()` settings. Closes gh-9334	4 years ago
Josh Cummings	d538423f98	Add Saml2AuthenticationRequestResolver Closes gh-10355	4 years ago
Rob Winch	ba922dcdf0	Exclude javax from hibernate dependency Issue gh-10501	4 years ago
Rob Winch	27e1a2ca69	Remove javax.transaction Issue gh-10501	4 years ago
Rob Winch	9d4ecc9c37	Additional removal of javax.inject Issue gh-10501	4 years ago
Rob Winch	678c386834	jsr250-api -> jakarta.annotation-api Issue gh-10501	4 years ago
Rob Winch	0e8c03401b	javax.xml.bind:jaxb-api -> jakarta.xml.bind:jakarta.xml.bind-api Issue gh-10501	4 years ago
Rob Winch	8f64bb6c8c	javax.servlet:javax.servlet-api -> jakarta.servlet:jakarta.servlet-api Issue gh-10501	4 years ago
Rob Winch	f8e14683f6	Remove jcl-over-slf4j Issue gh-10499	4 years ago
Rob Winch	3c641dee75	Remove commons-logging Closes gh-10499	4 years ago
Eleftheria Stein	a537b636c1	Add LDAP factory beans Issue gh-10138	4 years ago
Josh Cummings	75f25bff82	Polish multiple RequestRejectedHandlers support Issue gh-10603	4 years ago
Adam Ostrožlík	4ea57f3e3f	Support multiple RequestRejectedHandler beans Closes gh-10603	4 years ago
Marcus Da Coregio	60ed3602f6	Make source code compatible with JDK 8 Closes gh-10695	4 years ago
heowc	1ab0705b47	Fix typo	4 years ago
Marcus Da Coregio	18427b6411	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Josh Cummings	cd8983d4e5	Polish enableSessionUrlRewriting Clarification Closes gh-7644	4 years ago
James Howe	5598688fa6	Clarify behaviour of enableSessionUrlRewriting See #3087	4 years ago
Marcus Da Coregio	65426a40ec	Add Cross Origin Policies headers Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers Closes gh-9385, gh-10118	4 years ago
Marcus Da Coregio	ed3b0fbaad	Prevent using both authorizeRequests and authorizeHttpRequests Closes gh-10573	4 years ago
Steve Riesenberg	df0f6f83af	Polish gh-9597	4 years ago
Karl Tinawi	925d531cbe	Set details on authentication token created by HttpServlet3RequestFactory Currently the login mechanism when triggered by executing HttpServlet3RequestFactory#login does not set any details on the underlying authentication token that is authenticated. This change adds an AuthenticationDetailsSource on the HttpServlet3RequestFactory, which defaults to a WebAuthenticationDetailsSource. Closes gh-9579	4 years ago
Steve Riesenberg	074e38d565	Add missing since Issue gh-7765	4 years ago
Steve Riesenberg	3af619d565	Add hasIpAddress to Reactive Kotlin DSL Closes gh-10571	4 years ago
Josh Cummings	a68411566e	Polish Memory Leak Mitigation Issue gh-9841	4 years ago
Hiroshi Shirosaki	2bc643d6c8	Address SecurityContextHolder memory leak To get current context without creating a new context. Creating a new context may cause ThreadLocal leak. Closes gh-9841	4 years ago
Igor Pelesic	a3a9de1b9b	PermitAllSupport supports AuthorizeHttpRequestsConfigurer PermitAllSupport supports either an ExpressionUrlAuthorizationConfigurer or an AuthorizeHttpRequestsConfigurer. If none or both are configured an error message is thrown. Closes gh-10482	4 years ago
Guirong Hu	43317c5a61	Support IP whitelist for Spring Security Webflux Closes gh-7765	4 years ago
« Christophe	4318a51971	Fix CsrfConfigurer default AccessDeniedHandler consistency Fix when AccessDeniedHandler is specified per RequestMatcher on ExceptionHandlingConfigurer. This introduces evolutions on : - CsrfConfigurer#getDefaultAccessDeniedHandler, to retrieve an AccessDeniedHandler similar to the one used by ExceptionHandlingConfigurer. - OAuth2ResourceServerConfigurer#accessDeniedHandler, to continue to handle CsrfException with the default AccessDeniedHandler implementation Fixes: gh-6511	4 years ago
Stephane Nicoll	61ee4e5a76	Avoid using SpEL to change the meaning of the injection point This commit removes the use of SpEL expression and replaces it with an explicit call to the underlying method.	4 years ago
Onur Kagan Ozcan	aa0f788f59	Add RedirectStrategy customization to ChannelSecurityConfigurer for RetryWith classes	4 years ago
Josh Cummings	7b15098570	Update Spring Security to 5.7 Closes gh-10509	4 years ago
Josh Cummings	76ebbb84f7	Separate Namespace Servlet Docs Issue gh-10367	5 years ago
Marcus Da Coregio	2f1638ec57	Fix javadoc Closes gh-10382	5 years ago
Emil Sierżęga	cb70b6a39b	Fixed invalid usage of & tag in Javadocs	5 years ago
Emil Sierżęga	04b47c5928	Fixed various broken links in Javadocs	5 years ago
Emil Sierżęga	a188138715	Javadocs author tag doesn't work in methods	5 years ago
Emil Sierżęga	6b26032ce7	Fixed invalid usege of > tag in Javadocs	5 years ago
Rob Winch	f836897190	Checkstyle Fixes - Javadoc tag ordering - Private constructors before inner classes Issue gh-10394	5 years ago
Philipp Neuschwander	6db58cbf8a	Conditionally resolve bearer token from request parameters Before this commit, the DefaultBearerTokenResolver unconditionally resolved the request parameters to check whether multiple tokens are present in the request and reject those requests as invalid. This commit changes this behaviour to resolve the request parameters only if parameter token is supported for the specific request according to spec (RFC 6750). Closes gh-10326	5 years ago
Gaurav Tiwari	33708e61fb	Add postProcess support to Saml2LogoutConfigurer Closes gh-10311	5 years ago
Josh Cummings	fbb7691be4	Polish SecurityNamespaceHandler Tests Issue gh-8974	5 years ago
Emil Sierżęga	8daa6ec1fd	SecurityNamespaceHandler: update schema version to 5.6 Closes gh-8974	5 years ago
Eleftheria Stein	ba8844a67e	Deprecate Kotlin methods that don't use reified types Closes gh-10365	5 years ago
Marcus Da Coregio	02b2fcc6f0	Restore ManagementConfigurationPlugin Issue gh-9615	5 years ago
Marcus Da Coregio	d2e5f2ae0d	Update Gradle to 7.2 Closes gh-9615	5 years ago
Marcus Da Coregio	7112ee3eaa	Allow SAML 2.0 loginProcessingURL without registrationId Closes gh-10176	5 years ago

1 2 3 4 5 ...

1842 Commits (bebd615507fef94f929f5d706e07c6703c40af2f)