Eleftheria Stein
c5b36664ce
Polish PrincipalSid
...
Remove reduntant UserDetails check and add tests
6 years ago
杨博 (Yang Bo)
ea148d5fee
Avoid toString in favor of getName for extract sid
...
There are some more sophisticated implementations of `getName` in `AbstractAuthenticationToken` and other `Authentication` classes.
6 years ago
Rob Winch
b3d177fc7e
Extract HTTPS Documentation
...
Fixes gh-7626
6 years ago
Josh Cummings
7cbd1665a6
Isolate Jwt Test Support
...
Isolating Jwt test support inside JwtRequestPostProcessor and
JwtMutator.
Fixes gh-7641
6 years ago
Eleftheria Stein
8a95e5798d
Update @MessageMapping to match input/output cardinality
6 years ago
Pim Moerenhout
cd0bec48de
Fix typo in log message.
6 years ago
Paul Pazderski
0d35194b47
Add sessionFixation Javadoc
6 years ago
Josh Cummings
22ae3eb765
Polish Error-handling Tests
...
Tests should assert the error message content that Spring Security
controls.
Fixes gh-7647
6 years ago
Adrian Pena
ca8877c8c5
Updates javadoc for InitializeUserDetailsBeanManagerConfigurer
6 years ago
Josh Cummings
bc2aedac69
Update to nimbus-jose-jwt 7.8.1
...
Fixes gh-7570
6 years ago
Rafiullah Hamedy
58ca81d500
Make jwks_uri optional for RFC 8414 and Required for OpenID Connect
...
OpenID Connect Discovery 1.0 expects the OpenId Provider Metadata
response is expected to return a valid jwks_uri, however, this field is
optional in the Authorization Server Metadata response as per RFC 8414
specification.
Fixes gh-7512
6 years ago
Rob Winch
e1fad001d9
Extract HTTP Response Headers Documentation
...
Fixes gh-7625
6 years ago
Eleftheria Stein
1188a3bb5f
Polish RememberMeConfigurer
...
Issue: gh-4140
6 years ago
邓超
b13f750646
Retrieve remember-me key from service as fallback
...
Fixes: gh-4140
6 years ago
LeeHainie
4b4c6e612b
Remove unnecessary instantiation in root
...
Fixes: gh-7635
6 years ago
Kristine Jetzke
97fd3d7c84
Clarify usage of hasAnyRole and hasAnyAuthority
6 years ago
Yanming Zhou
9f6a36444a
Add missing schemas
6 years ago
Eddú Meléndez
27aa61b02f
Use LocalRSocketServerPort annotation
6 years ago
Drummond Dawson
4f82be7e68
Support URI vars in formLogin and logout MockMvc requests
6 years ago
Rob Winch
8722a4b0d0
Revert "Update to AspectJ 1.9.4"
...
This reverts commit 90c475e6b8 .
6 years ago
Josh Cummings
925bf48ec0
Polish OAuth2ResourceServerConfigurerTests
...
To confirm that resource server only produces SCOPE_<scope>
authorities by default.
Issue gh-7596
6 years ago
Rob Winch
2d9e4d6c0b
Next Development Version
6 years ago
Rob Winch
5b8369b7c3
Release 5.2.1.RELEASE
6 years ago
Josh Cummings
63647e9546
Add Resource Server Multi-tenancy Docs
...
Fixes: gh-7532
6 years ago
Rob Winch
bd4f2057ca
Update to blockound 1.0.1.RELEASE
...
Fixes gh-7613
6 years ago
Rob Winch
0310cc112e
Update to hibernate-validator 6.1.0.Final
...
Fixes gh-7612
6 years ago
Rob Winch
6c23d567b9
Update to hibernate-entitymanager 5.4.8.Final
...
Fixes gh-7611
6 years ago
Rob Winch
dfefaa94b5
Update to Unbounded 4.0.12
...
Fixes gh-7610
6 years ago
Rob Winch
9558fbdaf1
Update to powermock 2.0.4
...
Fixes gh-7609
6 years ago
Rob Winch
a8db3eb0f2
Update to Bouncy Castle 1.64
...
Fixes gh-7608
6 years ago
Rob Winch
2608bc0bd2
Update to Reactor Dysprosium-SR1
...
Fixes gh-7607
6 years ago
Rob Winch
b57ec7d066
Update to GAE 1.9.76
...
Fixes gh-7606
6 years ago
Rob Winch
90c475e6b8
Update to AspectJ 1.9.4
...
Fixes gh-7605
6 years ago
Rob Winch
34daf4eeba
Update to Spring Data Moore-SR1
...
Fixes gh-7604
6 years ago
Rob Winch
f5704a8960
Update to Spring 5.2.1.RELEASE
...
Fixes gh-7603
6 years ago
Filip Hanik
0cafcf37e2
Make the loginProcessingUrl configurable for saml2Login()
...
Fixes gh-7565
https://github.com/spring-projects/spring-security/issues/7565
6 years ago
Josh Cummings
5f17032ffd
Restore Removed Throws Clauses
...
In a recent clean-up, certain exceptions were removed from various
throws clauses.
This PR re-introduces throws clauses that are important for one of the
following reasons:
1. It's a method on a public interface
2. It's a method clearly designed for inheritance, for example, a
method stub, an abstract method, or indicated as such in the docs.
Fixes gh-7541
6 years ago
Mike Truso
a4430aa21b
Fix variable reference in sample code
6 years ago
Filip Hanik
0f14844acf
We will not validate IP addresses as part of assertion validation
...
Fixes gh-7514
https://github.com/spring-projects/spring-security/issues/7514
6 years ago
Josh Cummings
ed02ef9773
Add Test for Malformed Scope
...
Fixes gh-7563
6 years ago
Rob Winch
badb0a08c6
Fix exploits indendation
...
Issue gh-2567
6 years ago
Rob Winch
2827af15e0
Document Reactive CSRF Support
...
Fixes gh-6487
6 years ago
Rob Winch
635f7e1edd
CsrfWebFilter supports multipart/form-data
...
Fixes gh-7576
6 years ago
Josh Cummings
387f765595
Catch Malformed BearerTokenError Descriptions
...
Fixes gh-7549
6 years ago
Vitalii Mahas
0ac5f5456f
Fix typo 'is' -> 'if' in javadoc
7 years ago
Filip Hanik
4489163163
Use Spring Boot configuration for saml2Login()
...
Fixes gh-7521
https://github.com/spring-projects/spring-security/issues/7521
7 years ago
Filip Hanik
5345aecd7f
Align RSocket sample with new Spring Boot configuration
7 years ago
Filip Hanik
bcaa8bc7e9
Upgrade to Spring Boot 2.2.0.RELEASE
7 years ago
Rob Winch
9b4c170af0
Create Exploits Section for Reactive
...
Issue gh-2567
7 years ago
Rob Winch
bbda755a07
Fix Servlet exploits leveloffset
...
Fixes gh-2567
7 years ago