spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	093e930c32	Merge branch '6.5.x'	3 months ago
Rob Winch	ab634d1099	Merge branch '6.4.x' into 6.5.x	3 months ago
Rob Winch	a79a2b031a	Remove MockWebServer from JwtIssuerAuthenticationManagerResolverTests This prevents timeouts on GitHub Windows runners due to overtaxed systems. Closes gh-17869	3 months ago
Josh Cummings	5da2121e2b	Merge remote-tracking branch 'origin/6.5.x'	3 months ago
Andrey Litvitski	eca821471f	A Root basePath No Longer Creates a Double-Slash Closes gh-17812 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	3 months ago
Josh Cummings	2b87e3c5e2	Use withRoles Issue gh-17843	3 months ago
Josh Cummings	ed344ece70	Use Fixed Clock This commit stabilizes time-sensitive tests that verify the behavior of DPoP iat validation. Issue gh-14915	3 months ago
Josh Cummings	6689798257	Merge remote-tracking branch 'jzheaux/authentication-builder' Issue gh-17861 Issue gh-17862	3 months ago
Josh Cummings	b09afb34cc	Document Authentication.Builder The commit documents the new Authentication Builder interface and its usage in the security filter chain. Closes gh-17861 Closes gh-17862	3 months ago
Josh Cummings	2476875990	Polish WebAuthn Authentication Builder Issue gh-17861	3 months ago
Josh Cummings	e97a335edc	Polish Web Authentication Builders Issue gh-17861	3 months ago
Josh Cummings	e7281a71c6	Polish SAML 2.0 Authentication Builder Issue gh-17861	3 months ago
Josh Cummings	69ee8d9aec	Polish OAuth 2.0 Authentication Builders Issue gh-17861	3 months ago
Josh Cummings	c66a028332	Polish Core Authentication Builders Issue gh-17861	3 months ago
Josh Cummings	18fbf88993	Polish CAS Authentication Builder Issue gh-17861	3 months ago
Josh Cummings	dd50dc0c40	Remove Generic Typing From Authentication.Builder It would be better to introduce parameter types for principal and credentials into Authentication.Builder at the same time as doing so for Authentication Issue gh-17861	3 months ago
Josh Cummings	4744752a1b	Add Internal Authentication Implementations This commit allows a default implementation of Authentication.Builder that performs the builder operations. In this way, authorities and other previous authentication material can still be effectively be propagated in the event a custom authentication does not implement the method. Issue gh-17861	3 months ago
Josh Cummings	3f774548d2	Move Authority Propagation Into Filters Given that the filters are the level at which the SecurityContextHolder is consulted, this commit moves the operation that ProviderManager was doing into each authentication filter. Issue gh-17862	3 months ago
Josh Cummings	a0fe6a5fee	Polish Builders - Added remaining properties - Removed apply method since Spring Security isn't using it right now - Made builders extensible since the authentications are extensible Issue gh-17861	3 months ago
Josh Cummings	44fef786aa	Pick Up SecurityContextHolderStrategy Bean This commit provides the SecurityContextHolderStrategy bean to ProviderManager instances that the HttpSecurity DSL constructs. Issue gh-17862	3 months ago
Josh Cummings	8468c6a805	Propagate Previous Factor to Next One This commit allows looking up the current authentication and applying it to the latest authentication. This is specifically handy when collecting authorities gained from each authentication factor. Issue gh-17862	3 months ago
Josh Cummings	a201a2b862	Add Authentication.Builder This commit adds a new default method to Authentication for the purposes of creating a Builder based on the current authentication, allowing other authentications to be applied to it as a composite. It also adds Builders for each one of the authentication result classes. Issue gh-17861	3 months ago
Steve Riesenberg	eeb4574bb3	Add AuthorizationManagerFactory Signed-off-by: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com>	3 months ago
dependabot[bot]	3d25473ee6	Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) from 1.14.10 to 1.14.11. - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.10...v1.14.11) --- updated-dependencies: - dependency-name: io.micrometer:micrometer-observation dependency-version: 1.14.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	cc30c901c7	Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.11 Bumps [io.micrometer:micrometer-observation](https://github.com/micrometer-metrics/micrometer) from 1.14.9 to 1.14.11. - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.14.9...v1.14.11) --- updated-dependencies: - dependency-name: io.micrometer:micrometer-observation dependency-version: 1.14.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	35f09461ef	Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9 Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom) from 2024.1.8 to 2024.1.9. - [Release notes](https://github.com/spring-projects/spring-data-bom/releases) - [Commits](https://github.com/spring-projects/spring-data-bom/compare/2024.1.8...2024.1.9) --- updated-dependencies: - dependency-name: org.springframework.data:spring-data-bom dependency-version: 2024.1.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	8f75b4c350	Bump com.webauthn4j:webauthn4j-core Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.29.5.RELEASE to 0.29.6.RELEASE. - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml) - [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.5.RELEASE...0.29.6.RELEASE) --- updated-dependencies: - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.29.6.RELEASE dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	84bc892997	Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.28.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.26.Final to 6.6.28.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.28/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.26...6.6.28) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.28.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
dependabot[bot]	dd986b0932	Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.28.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.23.Final to 6.6.28.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.28/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.23...6.6.28) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.28.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
blake_bauman	a4f813ab29	Support Multiple ServerLogoutHandlers This commit adds support to ServerHttpSecurity for registering multiple ServerLogoutHandlers. This is handy so that an application does not need to re-supply any handlers already configured by the DSL. Signed-off-by: blake_bauman <blake_bauman@apple.com>	4 months ago
Rob Winch	686f8398dd	Merge branch '6.5.x'	4 months ago
Rob Winch	653f22d4a1	Merge branch '6.4.x' into 6.5.x	4 months ago
Rob Winch	f54c293078	Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9	4 months ago
Rob Winch	34fccf45c2	Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE	4 months ago
Rob Winch	f840ee06eb	Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.28.Final	4 months ago
Rob Winch	8429c23108	Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10	4 months ago
Rob Winch	97f3567702	Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.28.Final	4 months ago
dependabot[bot]	2cfdcb9d95	Bump org-opensaml5 from 5.1.5 to 5.1.6 Bumps `org-opensaml5` from 5.1.5 to 5.1.6. Updates `org.opensaml:opensaml-saml-api` from 5.1.5 to 5.1.6 Updates `org.opensaml:opensaml-saml-impl` from 5.1.5 to 5.1.6 --- updated-dependencies: - dependency-name: org.opensaml:opensaml-saml-api dependency-version: 5.1.6 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.opensaml:opensaml-saml-impl dependency-version: 5.1.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	3c344ff491	Bump com.webauthn4j:webauthn4j-core Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.29.5.RELEASE to 0.29.6.RELEASE. - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml) - [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.5.RELEASE...0.29.6.RELEASE) --- updated-dependencies: - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.29.6.RELEASE dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Josh Cummings	f30cc9c5a9	Update to PropertySourcesPlaceholderConfigurer This commit replaces deprecated usage of PropertyPlaceholderConfigurer in favor of PropertySourcesPlaceholderConfigurer	4 months ago
Josh Cummings	c64b086878	Add SecurityAssertions This commit introduces a simple, internal test API for verifying aspects of an Authentication, like its name and authorities. Closes gh-17844	4 months ago
Josh Cummings	de10e08348	Make withRoles Check Only Roles This commit clarifies the semantics of withRoles, which is to check the role-based authorities in an authentication. Closes gh-17843	4 months ago
Josh Cummings	bd119ac411	Implement Equals and HashCode Internally, RequestMatcher is sometimes used as a key to a HashMap. Accordingly, each implementation should implement equals and hashCode. Closes gh-17842	4 months ago
Rob Winch	24ffda28d8	Fixes for webauthn tests after JSpecify Issue gh-17839	4 months ago
Rob Winch	6a84f96930	Enable Null checking in spring-security-test via JSpecify Closes gh-17840	4 months ago
Rob Winch	194be8ffb6	Checkstyle fixes for webauthn JSpecify Issue gh-17839	4 months ago
Rob Winch	47b4b155da	Add security-nullability to webauthn Issue gh-17839	4 months ago
Rob Winch	0a991a91ce	Enable Null checking in spring-security-webauthn via JSpecify Closes gh-17839	4 months ago
dependabot[bot]	d2e934ca54	Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.28.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.26.Final to 6.6.28.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.28/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.26...6.6.28) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.28.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	fee4d08de3	Bump com.webauthn4j:webauthn4j-core Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.29.5.RELEASE to 0.29.6.RELEASE. - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml) - [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.5.RELEASE...0.29.6.RELEASE) --- updated-dependencies: - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.29.6.RELEASE dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago

... 10 11 12 13 14 ...

19916 Commits (c2bc6fafe21167abb3340e9fdea633324b7141d6) All Branches Search

19916 Commits (c2bc6fafe21167abb3340e9fdea633324b7141d6)

All Branches