0f92415395
Fix non-standard HTTP method for CsrfWebFilter
...
Closes gh-8149
6 years ago
6db514a4e2
Update AntPathRequestMatcher.java
...
Fixed typo in JavaDoc. Actually, In these two cases, we are calling the constructor with a `boolean caseSensitive` which is equal to true. This means case sensitive
6 years ago
0483b3e042
Polish RequestRejectedHandler
...
Issue gh-5007
6 years ago
b826c798f7
Add RequestRejectedHandler
...
Closes gh-5007
6 years ago
b7d3acc02c
Add constructors to AbstractAuthenticationProcessingFilter
...
Closes gh-8309
6 years ago
52ed597f4c
Fix example in javadoc of FilterChainProxy
...
Closes gh-8344
6 years ago
566c25aa10
Fix example in javadoc of FilterChainProxy
...
Closes gh-8344
6 years ago
6bdd5f710f
Fix example in javadoc of FilterChainProxy
6 years ago
615f9a3f05
Fix HttpServlet3RequestFactory Logout Handlers
...
Previously there was a problem with Servlet API logout integration
when Servlet API was configured before log out.
This ensures that logout handlers is a reference to the logout handlers
vs copying the logout handlers. This ensures that the ordering does not
matter.
Closes gh-4760
6 years ago
0e6e2b2a21
Fix HttpServlet3RequestFactory Logout Handlers
...
Previously there was a problem with Servlet API logout integration
when Servlet API was configured before log out.
This ensures that logout handlers is a reference to the logout handlers
vs copying the logout handlers. This ensures that the ordering does not
matter.
Closes gh-4760
6 years ago
91728ef53b
Fix HttpServlet3RequestFactory Logout Handlers
...
Previously there was a problem with Servlet API logout integration
when Servlet API was configured before log out.
This ensures that logout handlers is a reference to the logout handlers
vs copying the logout handlers. This ensures that the ordering does not
matter.
Closes gh-4760
6 years ago
258627eaee
SwitchUserFilter Defaults to POST
...
Fixes gh-4183
6 years ago
034c23d46c
SwitchUserFilter Defaults to POST
...
Fixes gh-4183
6 years ago
eed71243cb
SwitchUserFilter Defaults to POST
...
Fixes gh-4183
6 years ago
a49a325db2
Fix exception for empty basic auth header token
...
fixes spring-projectsgh-7976
6 years ago
dfa78804a8
Fix exception for empty basic auth header token
...
fixes spring-projectsgh-7976
6 years ago
935c547dde
Fix exception for empty basic auth header token
...
fixes spring-projectsgh-7976
6 years ago
47011eb9e2
Polish transfer session's max inactive interval
...
Issue: gh-2693
6 years ago
02b7d04027
Transfer session's max inactive interval
...
Fixes: gh-2693
6 years ago
b2ea0ba775
Polish SessionIdChangedEvent
...
Add AbstractSessionEvent; clean up license headers and Javadocs
Fixes: gh-5438
6 years ago
5fc6414377
SessionRegistryImpl is now aware of SessionIdChangedEvent
6 years ago
ae532c080c
Add server request cache that uses cookie
...
Fixes: gh-8033
6 years ago
38979b1b09
Add test for ServerRequestCacheWebFilter
6 years ago
96ff3a54a9
Fix typo in AntPathRequestMatcher contructor comment
6 years ago
2ce9eef95e
Fix typo in AntPathRequestMatcher contructor comment
6 years ago
82cd203791
Remove unnecessary mocking
...
Fixes gh-8012
6 years ago
bae50ecc05
AbstractSecurityWebApplicationInitializerTests groovy->java
...
Issue gh-4939
6 years ago
cb9fd09150
Change AuthenticationWebFilter's constructor
...
Fixes gh-7872
6 years ago
2dbedf7af5
Set charset of BasicAuthenticationFilter converter
...
Allow BasicAuthenticationFilter to pick up the given credentials charset.
Fixes: gh-7835
6 years ago
e62fb755e8
Set charset of BasicAuthenticationFilter converter
...
Allow BasicAuthenticationFilter to pick up the given credentials charset.
Fixes: gh-7835
6 years ago
1f6381d970
Set secure on cookie when logging out
...
Mark cookie secure flag to ensure cookie identity is the same
6 years ago
29182abb34
Fix HttpHeaderWriterWebFilterTests
...
Ensure setComplete() is subscribed to
6 years ago
ffccec953f
Fix HttpHeaderWriterWebFilterTests
...
Ensure setComplete() is subscribed to
6 years ago
2015f392ef
Set secure when cancelling remember-me cookie
...
AbstractRememberMeServices is setting remember-me cookie with checking request is secure or secure usage is independently set to a fixed flag.
But when cancelling a cookie, cookie is not being marked secure or not. It produces an inconsistency when using secure flag as a part to identity of cookie.
6 years ago
29eb8b9177
CompositeServerHttpHeadersWriter Executes Sequentially
...
Fixes gh-7731
6 years ago
a8331ba7ed
CompositeServerHttpHeadersWriter Executes Sequentially
...
Fixes gh-7731
6 years ago
64e063d948
switches web authentication principal resolver to use reactive context
...
gh #6598
Signed-off-by: David Herberth <github@dav1d.de>
6 years ago
bd6ff1f319
DelegatingServerAuthenticationSuccessHandler Executes Sequentially
...
Fixes gh-7728
6 years ago
8e53c3f269
DelegatingServerAuthenticationSuccessHandler Executes Sequentially
...
Fixes gh-7728
6 years ago
6db7b457b7
DelegatingServerLogoutHandler Executes Sequentially
...
Fixes gh-7723
6 years ago
73babc3314
DelegatingServerLogoutHandler Executes Sequentially
...
Fixes gh-7723
6 years ago
752d5f29aa
Display general error message when WebFlux oauth2Login() fails
...
Issue gh-5562 gh-6484
6 years ago
4d9cee116c
Display general error message when WebFlux oauth2Login() fails
...
Issue gh-5562 gh-6484
6 years ago
796859333f
Log full failed authentication exception in BasicAuthenticationFilter
6 years ago
5f17032ffd
Restore Removed Throws Clauses
...
In a recent clean-up, certain exceptions were removed from various
throws clauses.
This PR re-introduces throws clauses that are important for one of the
following reasons:
1. It's a method on a public interface
2. It's a method clearly designed for inheritance, for example, a
method stub, an abstract method, or indicated as such in the docs.
Fixes gh-7541
6 years ago
635f7e1edd
CsrfWebFilter supports multipart/form-data
...
Fixes gh-7576
6 years ago
b9f122230b
Align javadoc of continueFilterChainOnUnsuccessfulAuthentication with actual behaviour
6 years ago
d26f40f062
DefaultRedirectStrategy should redirect to root if the context-relative URL does not contain the context-path.
6 years ago
62c7de03c3
Add RequestMatcher to AbstractPreAuthenticatedProcessingFilter
...
Moved the existing auth check logic to the matcher.
Issue: gh-5928
6 years ago
264daec697
Test context relative URL with multiple schemes
6 years ago
Parikshit Dutta
Artyom Tarynin
Rob Winch
Leonard Brünings
Oh Myung Woon
Mustafa Ulu
Josh Cummings
Zeeshan Adnan
Eleftheria Stein
Venkata Jaswanth U
AmitB
Joe Grandja
Peter Keller
Onur Kağan Özcan
David Herberth
Filip Hrisafov
Michel Palourdio
Tadaya Tsuyukubo