spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	c2ba662b91	Enable Null checking in spring-security-web via JSpecify Closes gh-17535	5 months ago
Rob Winch	49f308adb0	Use Supplier<? extends @Nullable Authentication> Previously Supplier<@Nullable Authentication> was used. This prevented Supplier<Authentication> from being used. The code now uses Supplier<? extends @Nullable Authentication> which allows for both Supplier<@Nullable Authentication> and Supplier<Authentication>. Closes gh-17814	5 months ago
Josh Cummings	4cbe8de7ea	Polish RSocket Anonymous Support Changed the DSL method name to anonymous to align with jwt. Since basicAuthenication is deprecated, we don't need to align with its naming convention. Also added a since attribute to the method. Issue gh-17132	5 months ago
Andrey Litvitski	559b73b39f	Add Disabling Anonymous Authentication in RSocketSecurity Closes: gh-17132 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com> 1 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com> 1 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	5 months ago
Andrey Litvitski	3278f3a410	Add discoverJwsAlgorithms() in NimbusJwtDecoder Closes: gh-17785 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	5 months ago
Josh Cummings	36f1de945f	Add OneTimeTokenAuthentication Closes gh-17799	6 months ago
Josh Cummings	6663eea65f	Polish OTT Tests Improve tests so that they do not rely on OneTimeTokenAuthenticationToken as the concrete type. Issue gh-17799	6 months ago
Josh Cummings	89b2f9cf54	Improve Test Runnability in IDE In some configurations, Configuration classes with static elements may cause a test to hang. This commit changes JeeConfigurerTests test configuration classes to use mock beans instead of referencing them as static fields.	6 months ago
Josh Cummings	0e39685b9c	Merge branch '6.5.x'	6 months ago
Josh Cummings	9d64880ea9	Merge branch '6.4.x' into 6.5.x	6 months ago
Josh Cummings	8b2a453301	Advise Favoring PostAuthorize on Reads Closes gh-17797	6 months ago
Josh Cummings	d1962201b5	Merge branch '6.5.x'	6 months ago
Josh Cummings	857ca9c412	Merge remote-tracking branch 'origin/6.4.x' into 6.5.x	6 months ago
Nikita Konev	894105aab5	Fix traceId discrepancy in case error in servlet web Signed-off-by: Nikita Konev <nikit.cpp@yandex.ru>	6 months ago
Rob Winch	f7f41ba6c4	Add missing @NullMarked to spring-data package-info Issue gh-17789	6 months ago
Rob Winch	f496ded4e5	AuthorizationManager allows null Authentication It is possible to have a null Authentication and so the AuthorizationManager APIs should allow for passing it in. Closes gh-17795	6 months ago
Josh Cummings	583e668c6b	Remove opensaml5Test Task Issue gh-17707	6 months ago
Rob Winch	d6a0e3bf78	Fix Nullability Imports Issue gh-17789	6 months ago
Rob Winch	29bb4919ca	Add Nullability to spring-security-data Closes gh-17789	6 months ago
Rob Winch	d9210c6596	Fix Nullability	6 months ago
Rob Winch	b8b1a92ad4	Revert "Apply Nullability to spring-security-data" This reverts commit `bbcdb23698`.	6 months ago
Rob Winch	bbcdb23698	Apply Nullability to spring-security-data	6 months ago
Rob Winch	9bbf837c7c	Merge branch '6.5.x'	6 months ago
Rob Winch	8a1e2a22f9	Merge branch 'gh-16226-servlet-test-method' into 6.5.x	6 months ago
Rob Winch	0404996f87	import Assertions.assertThat This adds a static import for assertThat in the Kotlin docs code	6 months ago
Rob Winch	0f63d98c84	Use @EnableMethodSecurity in docs tests Previously parameters were passed in unnecessarily. This removes the unnecessary paramaters.	6 months ago
Rob Winch	fbfbb1e571	Use 2004-present for Copyright Spring Security migrated the copyright to use -present to simplify the headers. This commit aligns the header.	6 months ago
Joe Kuhel	d002e68231	Update servlet test method docs to use include-code References gh-16226 Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	6 months ago
Yanming Zhou	41162aa7e3	Polish WebFluxSecurityConfiguration Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	6 months ago
Yanming Zhou	d86f2c957d	Change @Bean method signature to return RsaKeyConversionServicePostProcessor instead of BeanFactoryPostProcessor It's friendly for Spring Boot's `@ConditionalOnMissingBean`, and: >> When defining a Spring `@Bean` method, it is generally recommended to declare the most specific type possible as the method's return type. This means returning the concrete class of the bean, or the most specific interface that the bean implements and through which it will be referenced in the application. Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	6 months ago
Rob Winch	62b5b1a77c	import Assertions.assertThat This adds a static import for assertThat in the Kotlin docs code	6 months ago
Rob Winch	523222c24d	Use @EnableMethodSecurity in docs tests Previously parameters were passed in unnecessarily. This removes the unnecessary paramaters.	6 months ago
Rob Winch	69f38d4933	Use 2004-present for Copyright Spring Security migrated the copyright to use -present to simplify the headers. This commit aligns the header.	6 months ago
Joe Kuhel	0179a811c7	Update servlet test method docs to use include-code References gh-16226 Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	6 months ago
Rob Winch	7ce2bdd701	Merge branch '6.5.x'	6 months ago
Rob Winch	de4ceffc4f	Merge branch '6.4.x' into 6.5.x	6 months ago
Rob Winch	8c920a7ee7	Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9	6 months ago
Rob Winch	b9653346a1	Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final	6 months ago
Rob Winch	9e6bcbd1d0	Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10	6 months ago
dependabot[bot]	8d888edc71	Bump io.spring.nullability:io.spring.nullability.gradle.plugin Bumps [io.spring.nullability:io.spring.nullability.gradle.plugin](https://github.com/spring-gradle-plugins/nullability-plugin) from 0.0.3 to 0.0.4. - [Release notes](https://github.com/spring-gradle-plugins/nullability-plugin/releases) - [Commits](https://github.com/spring-gradle-plugins/nullability-plugin/compare/v0.0.3...v0.0.4) --- updated-dependencies: - dependency-name: io.spring.nullability:io.spring.nullability.gradle.plugin dependency-version: 0.0.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
Rob Winch	f82fe9c8c6	Remove stray modular from the documentation Issue gh-16258	6 months ago
Rob Winch	a8f045eb50	Add Modular Spring Security Configuration Closes gh-16258	6 months ago
Rob Winch	5c5efc9092	SpringTestContext registers WebTestClient Bean Closes gh-17780	6 months ago
dependabot[bot]	5453224377	Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10 Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) from 1.14.9 to 1.14.10. - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.9...v1.14.10) --- updated-dependencies: - dependency-name: io.micrometer:micrometer-observation dependency-version: 1.14.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
dependabot[bot]	a14ad770ab	Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.23.Final to 6.6.26.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.26/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.23...6.6.26) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.26.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
Jaehwan Lee	806297da23	Fix misleading variable name in authentication filter Rename DEFAULT_ANT_PATH_REQUEST_MATCHER to DEFAULT_PATH_REQUEST_MATCHER to reflect PathPatternRequestMatcher usage instead of legacy Ant pattern terminology. Signed-off-by: Jaehwan Lee <jhrick0129@gmail.com>	6 months ago
dependabot[bot]	8846b44b81	Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9 Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom) from 2024.1.8 to 2024.1.9. - [Release notes](https://github.com/spring-projects/spring-data-bom/releases) - [Commits](https://github.com/spring-projects/spring-data-bom/compare/2024.1.8...2024.1.9) --- updated-dependencies: - dependency-name: org.springframework.data:spring-data-bom dependency-version: 2024.1.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
Rob Winch	7f103b2d0a	Merge branch '6.5.x'	6 months ago
dependabot[bot]	c06ff59747	Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.26.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.23.Final to 6.6.26.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.26/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.23...6.6.26) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.26.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
dependabot[bot]	f1194de45e	Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.3 to 3.27.4. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.3...assertj-build-3.27.4) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago

1 2 3 4 5 ...

19298 Commits (c2ba662b914aa308d689138e27de63c3fa390410) All Branches Search

19298 Commits (c2ba662b914aa308d689138e27de63c3fa390410)

All Branches