Josh Cummings
2702a64be7
Use Localhost for Internal Logout Endpoint
...
Closes gh-14553
2 years ago
Josh Cummings
3ab323663a
Do Not Wire Default OidcSessionStrategy without OidcLogoutConfigurer
...
Closes gh-14558
2 years ago
Marcus Hert Da Coregio
ccb2f06d0d
Partially revert fc658d10
...
OpenIDAuthenticationFilter exists in versions < 6.0
Issue gh-14531
2 years ago
DingHao
fc658d10d3
fix security filter sort in javadoc
...
Closes gh-14531
2 years ago
Marcus Hert Da Coregio
915d68e216
Remove includeExpiredSessions parameter
...
The reactive implementation of max sessions does not keep track of expired sessions, therefore we do not need such parameter
Issue gh-6192
2 years ago
Josh Cummings
7c3a6a567e
Fix Compilation Errors
...
Issue gh-14525
2 years ago
Andreas Asplund
07e0b1dc37
Saml2 LogoutFilter Is Placed Before Common LogoutFilter
...
Closes gh-14525
2 years ago
Josh Cummings
3a53422478
Fix Failing Test
...
Closes gh-14467
2 years ago
Josh Cummings
27ebeefb14
Fix Failing Test
...
Closes gh-14467
2 years ago
y-tomida
bdc0bd6b78
Add usernameParameter and passwordParameter to FormLoginDsl
...
Closes gh-14474
2 years ago
DingHao
3f65f600de
Use AuthorizationEventPublisher Bean
...
- For Jsr250MethodInterceptor and SecuredMethodInterceptor
Closes gh-14401
2 years ago
Marcus Hert Da Coregio
e2bab7b7ef
Add .serialized suffix and consider them as binary in Git
...
Issue gh-3737
2 years ago
Marcus Hert Da Coregio
4fb6a33d36
Verify Serializable Objects Are Deserializable Between Minor Versions
...
This commit introduces a test that verifies that Spring Security domain classes that implements Serializable and have the same serialVersionUID as SpringSecurityCoreVersion#SERIAL_VERSION_UID can be deserialized between minor versions.
This commit also introduces another test that should be used to generate the files containing the serialized content of the objects.
Closes gh-3737
2 years ago
Steve Riesenberg
16dc6be3c8
Update copyright year
...
Issue gh-14329
2 years ago
Geir Hedemark
c88aaedb48
Updated broken documentation link in javadocs
2 years ago
Marcus Hert Da Coregio
92af758f1f
Make springSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor passive
...
Instead of excluding the bean from AOT processing, we avoid redefining the beans if they are present or in the expected state.
Issue gh-14362
2 years ago
Marcus Hert Da Coregio
778a63a763
Revert "Exclude SpringSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor from AOT processing"
...
This reverts commit 8a93178da7 .
2 years ago
DingHao
7cd626fe25
Fix FilterChainProxy cannot be found when @EnableWebSecurity(debug = true)
...
Closes gh-14370
2 years ago
Marcus Hert Da Coregio
364bc10e78
Add hints for CompositeFilterChainProxy
...
Closes gh-14359
2 years ago
Marcus Hert Da Coregio
8a93178da7
Exclude SpringSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor from AOT processing
...
Closes gh-14362
2 years ago
Taehong Kim
ec02c22459
Add Request Path Extraction Support
...
Closes gh-13256
2 years ago
Yan Kardziyaka
99218db84a
Add order offset to @EnableMethodSecurity
...
Closes gh-13214
2 years ago
Josh Cummings
e058b559b8
Polish Method Security Eager-Loading
...
Issue gh-11596
2 years ago
Josh Cummings
9a5d991383
Address eager-loading of infrastructure beans
...
Closes gh-11596
2 years ago
Josh Cummings
33800c0124
Address eager-loading of infrastructure beans
...
Closes gh-11596
2 years ago
Josh Cummings
fc007aa373
Check OpenSAML Version in XML Support
...
Closes gh-12483
2 years ago
Josh Cummings
eaaa813ede
Fix header value typo
...
Closes gh-11948
2 years ago
Josh Cummings
8a34e32a24
Polish IpAddressAuthorizationManager
...
Closes gh-10577
2 years ago
brunodmartins
ea7c720ce7
Add hasIpAddress to Kotlin DSL
...
Closes gh-10577
2 years ago
Rob Winch
142b268a21
Use CompositeFilterChainProxy
...
By extending FilterChainProxy CompositeFilterChainProxy is more passive since
users often depend on the type of the springSecurityFilterChain Bean being
FilterChainProxy (even though it can already be other types - when debug is
enabled).
Issue gh-14128
2 years ago
Rob Winch
70dfb3d391
Add HandlerMappingIntrospector Caching
...
Closes gh-14128
2 years ago
Marcus Da Coregio
57ab15127a
Add Max Sessions on WebFlux
...
Closes gh-6192
2 years ago
DerChris173
e6bea1cfa1
Polish RoleHierarchy Bean Usage
...
Issue gh-12783
2 years ago
kandaguru17
b76f7c029d
Use available RoleHierachy Bean for MethodSecurity Config
...
Closes gh-12783
2 years ago
Josh Cummings
bb6b55aca3
Add Not Support
...
Closes gh-14058
2 years ago
Josh Cummings
d50698a269
Prepare for Spring Security 6.3
...
Closes gh-14210
2 years ago
Josh Cummings
c623303ca5
Add Logging
...
Now if the ServletRegistration API available message is shown, it will
also be accompanied with a startup warning in the logs.
Closes gh-14221
2 years ago
Josh Cummings
a98baa7522
Polish ServletRegistration API Deferral
...
Tomcat uses different ServletContext instances from startup- and request-time.
This commit ensures that if the programmatic API isn't available at startup-time,
then use the ServletContext attached to the HttpServletRequest at runtime.
Issue gh-13794
2 years ago
Josh Cummings
d961307044
Polish RequestMatcher Description
...
Issue gh-13794
2 years ago
Josh Cummings
4131a38f9e
Revert "Add forServletPattern"
...
This reverts commit 762319b6be .
2 years ago
Josh Cummings
4ca54683ae
Defer requestMatchers Validation to Runtime
...
Closes gh-13794
2 years ago
Marcus Hert Da Coregio
00da9c9092
Use assertj assertions
2 years ago
Marcus Hert Da Coregio
e3ab1c94d7
Use assertj assertions
2 years ago
Marcus Hert Da Coregio
a7da9491d9
Use assertj assertions
2 years ago
Josh Cummings
97516727a4
Add Coroutine Support
...
Closes gh-12080
2 years ago
Steve Riesenberg
77acaaa3b7
Use bean factory method
...
Closes gh-14094
2 years ago
Josh Cummings
ffd12ee3b9
Refine requestMatcher Validation Rules
...
Closes gh-14078
2 years ago
Steve Riesenberg
9db33f33c7
Revert unnecessary merges on 6.0.x
...
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:
- 5dce82c48b
2 years ago
Josh Cummings
96ebab324c
Remove Type Parameter
...
Closes gh-14012
2 years ago
Josh Cummings
8f829dd1d7
Refine requestMatcher Validation Rules
...
Closes gh-13850
2 years ago