spring-security

Commit Graph

Author	SHA1	Message	Date
Yuanhang Guo	c69df9fba0	Fix javadoc typo in ReactiveAuthorizationManager Closes gh-12978	3 years ago
bist	094bf1b527	Validate hasRole Input There are no check for role prefix in AuthorizeHttpRequestsConfigurer#XXXrole methods. This PR adds check for the same. Now the configuration will fail if role/s start with prefix for hasRole and hasAnyRole methods. Closes #12581	3 years ago
Josh Cummings	14a48ea939	Fix formatting Issue gh-12143	3 years ago
Junsung Cho	709de43e89	Fix typo in JavaDoc Closes gh-12143	3 years ago
Marcus Da Coregio	b8b0661d73	Lock Dependencies for Release	4 years ago
Evgeniy Cheban	e01b1e7f38	Polish gh-11188	4 years ago
Evgeniy Cheban	89019fb340	Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager Closes gh-11188	4 years ago
Evgeniy Cheban	286e95893a	@EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy Removed proxy unwrapping in case of resolving Method Security annotations, this cause an issue when interfaces which are implemented by the proxy was skipped, resulting in a missing security checks on those methods. Closes gh-11175	4 years ago
Josh Cummings	057f4a86d5	Add default strategy constructor Closes gh-11059	4 years ago
Josh Cummings	061f69eb70	Polish Authorization Event Support - Added spring-security-config support - Renamed classes - Changed contracts to include the authenticated user and secured object - Added method security support Issue gh-9288	4 years ago
Parikshit Dutta	bd9434882f	Add authorization events Closes gh-9288	4 years ago
Norbert Nowak	ac9c29b2a0	Add UsernamePasswordAuthenticationToken factory methods - unauthenticated factory method - authenticated factory method - test for unauthenticated factory method - test for authenticated factory method - make existing constructor protected - use newly factory methods in rest of the project - update copyright dates Closes gh-10790	4 years ago
Josh Cummings	6c3d183a94	Polish Saml2 Jackson Support Issue gh-10905	4 years ago
Ulrich Grave	df84826c95	Add Jackson Support for Saml2 Module Closes gh-10905	4 years ago
Eleftheria Stein	c6b185465d	Add DEFAULT_USER_SCHEMA_DDL_LOCATION constant Closes gh-10837	4 years ago
Rob Winch	70fa8b1fdb	Add Support for @Transient SecurityContext Closes gh-9995	4 years ago
Rob Winch	58090c37ea	jsr250-api -> jakarta.annotation-api Issue gh-10501	4 years ago
Rob Winch	5902b46e9b	Remove jcl-over-slf4j Issue gh-10499 # Conflicts: # dependencies/spring-security-dependencies.gradle	4 years ago
Rob Winch	678c386834	jsr250-api -> jakarta.annotation-api Issue gh-10501	4 years ago
Rob Winch	f8e14683f6	Remove jcl-over-slf4j Issue gh-10499	4 years ago
Marcus Da Coregio	e1cb375fbf	Make source code compatible with JDK 8 Closes gh-10695	4 years ago
Marcus Da Coregio	60ed3602f6	Make source code compatible with JDK 8 Closes gh-10695	4 years ago
Eleftheria Stein	3389cf3ffc	Revert "Lock dependencies" This reverts commit `83bb4603f8`.	4 years ago
Marcus Da Coregio	cfbf28b8ba	Revert "Lock Dependencies for Release" This reverts commit `3d4e90ba2a`.	4 years ago
Eleftheria Stein	83bb4603f8	Lock dependencies	4 years ago
Marcus Da Coregio	3d4e90ba2a	Lock Dependencies for Release	4 years ago
Guirong Hu	86ed937a47	Fix the bug that the custom GrantedAuthority comparison fails Closes gh-10566	4 years ago
Guirong Hu	22379e79e7	Fix the bug that the custom GrantedAuthority comparison fails Closes gh-10566	4 years ago
Josh Cummings	a68411566e	Polish Memory Leak Mitigation Issue gh-9841	4 years ago
Hiroshi Shirosaki	2bc643d6c8	Address SecurityContextHolder memory leak To get current context without creating a new context. Creating a new context may cause ThreadLocal leak. Closes gh-9841	4 years ago
Eleftheria Stein	bbeca7cd65	Polish LDAP serialization Closes gh-9263	4 years ago
Markus Heiden	3c18278123	Start with LDAP Jackson2 mixins Issue gh-9263	4 years ago
Josh Cummings	7b15098570	Update Spring Security to 5.7 Closes gh-10509	4 years ago
Emil Sierżęga	e0821f2a99	DaoAuthenticationProviderTests#avg returns fraction	4 years ago
Rob Winch	e4a76b0ec9	Checkstyle Fixes - Javadoc tag ordering - Private constructors before inner classes Issue gh-10394	4 years ago
Steve Riesenberg	5e091b94a9	Deprecate RemoteAuthentication* for 5.6 Closes gh-10430	4 years ago
Emil Sierżęga	a188138715	Javadocs author tag doesn't work in methods	4 years ago
Rob Winch	f836897190	Checkstyle Fixes - Javadoc tag ordering - Private constructors before inner classes Issue gh-10394	4 years ago
Steve Riesenberg	0704c709dc	Revert "Lock Dependencies for Release" This reverts commit `03c2c49d66`.	4 years ago
Steve Riesenberg	03c2c49d66	Lock Dependencies for Release	4 years ago
Steve Riesenberg	c83bd075a2	Revert "Lock Dependencies for Release" This reverts commit `bedb569f0d`.	4 years ago
Steve Riesenberg	bedb569f0d	Lock Dependencies for Release	4 years ago
Joe Grandja	5c8cd23a2d	Revert "Lock dependencies" This reverts commit `fc53f81d2e`.	4 years ago
Marcus Da Coregio	7fa39c8807	Deprecate EhCache2 support Since EhCache 3 is fully JSR-107 compliant, we should remove EhCache2 support and provide JCache implementations Closes gh-10362	4 years ago
Eleftheria Stein	fc53f81d2e	Lock dependencies	4 years ago
Marcus Da Coregio	86c24da38b	Improve Method Security logging Closes gh-10247	4 years ago
Marcus Da Coregio	ef01124eb9	Add reasons to AuthorizationDecisions Closes gh-9287	4 years ago
Marcus Da Coregio	570092c467	Remove trace logs for PrePostAnnotationSecurityMetadataSource Those logs were producing too much noise on the console without adding much value. Issue gh-10247	4 years ago
Marcus Da Coregio	02b2fcc6f0	Restore ManagementConfigurationPlugin Issue gh-9615	4 years ago
Marcus Da Coregio	d2e5f2ae0d	Update Gradle to 7.2 Closes gh-9615	4 years ago

1 2 3 4 5 ...

2756 Commits (caa4093619626426bb883451dd2a563400a2977b)