spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Hert Da Coregio	2fbbcc4bd0	Polish Method Authorization Denied Handling - Renamed @AuthorizationDeniedHandler to @HandleAuthorizationDenied - Merged the post processor interface into MethodAuthorizationDeniedHandler , it now has two methods handleDeniedInvocation and handleDeniedInvocationResult - @HandleAuthorizationDenied now handles AuthorizationDeniedException thrown from the method Issue gh-14601	2 years ago
Steve Riesenberg	fd891d8fe3	Add proxyBeanMethods=false Addresses too early creation warning of a configuration imported by ReactiveOAuth2ClientConfiguration. Closes gh-14900	2 years ago
Marcus Hert Da Coregio	61eba00654	Move HaveIBeenPwnedRestApiPasswordChecker to spring-security-web Prior to this commit, the implementation was placed in spring-security-core, however we do not want to introduce a dependency on spring-web and spring-webflux for that module. Issue gh-7395	2 years ago
Marcus Hert Da Coregio	8d914ef145	Add @AuthorizationDeniedHandler for Method Authorization Denied Handling Issue gh-14601	2 years ago
DingHao	75197ca531	inject PasswordEncoder into DaoAuthenticationProvider constructor Closes gh-14691	2 years ago
Marcus Hert Da Coregio	472c9f8275	Avoid initializing raw bean during runtime in native-images Closes gh-14825	2 years ago
Steve Riesenberg	39dbd24dcb	Polish gh-14742	2 years ago
Josh Cummings	bb43174752	Fix Bean Name Issue gh-14480	2 years ago
Josh Cummings	3f7355abc6	Synthesize all annotation attributes Issue gh-14601	2 years ago
sheheryarumair	33ebd5405a	Removed dataSource null validation Fixed data source validation	2 years ago
Josh Cummings	6f07d63938	Support SpEL Returning AuthorizationDecision Closes gh-14598	2 years ago
Josh Cummings	0a9c482f62	Revert "Support SpEL Returning AuthorizationDecision" This reverts commit `77f2977c55`.	2 years ago
Josh Cummings	77f2977c55	Support SpEL Returning AuthorizationDecision Closes gh-14599	2 years ago
Marcus Hert Da Coregio	d85857f905	Add Authorization Denied Handlers for Method Security Closes gh-14601	2 years ago
Max Batischev	ff19f04fca	Add JwtValidators append to default Implemented simplified creation of default OAuth2TokenValidator with additional validators. Closes gh-14831	2 years ago
Marcus Hert Da Coregio	7d66525e23	Add Compromised Password Checker Closes gh-7395	2 years ago
Steve Riesenberg	614123e6f9	Update tests that fail on Windows Issue gh-14609	2 years ago
Josh Cummings	44033cd8b9	Make Internal Logout URI Configurable Closes gh-14609	2 years ago
Josh Cummings	e18ec48134	Fix Test Issue gh-14553	2 years ago
Josh Cummings	662cfed349	Make Internal Logout URI Configurable Closes gh-14609	2 years ago
Josh Cummings	c95f009b23	Fix Test Issue gh-14553	2 years ago
Josh Cummings	9898e0e993	Move AuthorizationAdvisorProxyFactory To prevent package tangles Issue gh-14596	2 years ago
Josh Cummings	795e44d11f	Add Value-Type Ignore Support Issue gh-14597	2 years ago
Josh Cummings	ce54a6db18	Add TestAuthentication convenience method Issue gh-14597	2 years ago
Josh Cummings	d169d5a835	Add AuthorizeReturnObject Closes gh-14597	2 years ago
Josh Cummings	c611b7e33b	Add AuthorizationProxyFactory Reactive Support Issue gh-14596	2 years ago
Josh Cummings	f541bce492	Polish AuthorizationAdvisorProxyFactory - Ensure Reasonable Defaults - Simplify Construction Issue gh-14596	2 years ago
Steve Riesenberg	77c30c431e	Polish tests Issue gh-11783 Issue gh-13763	2 years ago
Steve Riesenberg	80a8d3831a	Simplify reactive OAuth2 Client configuration Closes gh-13763	2 years ago
Josh Cummings	52dfbfb5b3	Add Authorization Proxy Support Closes gh-14596	2 years ago
Steve Riesenberg	d6382b83dc	Configure token-exchange via a bean Issue gh-5199 Issue gh-11783 Closes gh-14701	2 years ago
Josh Cummings	bade66e588	Fix Circular Dependency Closes gh-14674	2 years ago
Marcus Hert Da Coregio	f8ff056eb6	Update Max Sessions on WebFlux Delete WebSessionStoreReactiveSessionRegistry.java and gives the responsibility to remove the sessions from the WebSessionStore to the handler Issue gh-6192	2 years ago
Marcus Hert Da Coregio	a5ce8ae87f	Polish Max Sessions on WebFlux This commit changes the PreventLoginServerMaximumSessionsExceededHandler to invalidate the WebSession in addition to throwing the error, this is needed otherwise the session would still be saved with the security context. It also changes the SessionRegistryWebSession to first perform the operation on the delegate and then invoke the needed method on the ReactiveSessionRegistry Issue gh-6192	2 years ago
Josh Cummings	c639d0a514	Add AOP Integration Test Closes gh-14637	2 years ago
Josh Cummings	4d383023cb	Add meta-annotation parameter support Closes gh-14480	2 years ago
Josh Cummings	27cd9fa86c	Don't Use Deprecated Class Issue gh-14628	2 years ago
DingHao	45c37c4454	Remove duplicate setSecurityContextHolderStrategy Closes gh-14592	2 years ago
Rob Winch	750cb30ce4	Add AuthenticationTrustResolver.isAuthenticated	2 years ago
Josh Cummings	2702a64be7	Use Localhost for Internal Logout Endpoint Closes gh-14553	2 years ago
Josh Cummings	3ab323663a	Do Not Wire Default OidcSessionStrategy without OidcLogoutConfigurer Closes gh-14558	2 years ago
Marcus Hert Da Coregio	ccb2f06d0d	Partially revert `fc658d10` OpenIDAuthenticationFilter exists in versions < 6.0 Issue gh-14531	2 years ago
DingHao	fc658d10d3	fix security filter sort in javadoc Closes gh-14531	2 years ago
Marcus Hert Da Coregio	915d68e216	Remove includeExpiredSessions parameter The reactive implementation of max sessions does not keep track of expired sessions, therefore we do not need such parameter Issue gh-6192	2 years ago
Josh Cummings	7c3a6a567e	Fix Compilation Errors Issue gh-14525	2 years ago
Andreas Asplund	07e0b1dc37	Saml2 LogoutFilter Is Placed Before Common LogoutFilter Closes gh-14525	2 years ago
Josh Cummings	3a53422478	Fix Failing Test Closes gh-14467	2 years ago
Josh Cummings	27ebeefb14	Fix Failing Test Closes gh-14467	2 years ago
y-tomida	bdc0bd6b78	Add usernameParameter and passwordParameter to FormLoginDsl Closes gh-14474	2 years ago
DingHao	3f65f600de	Use AuthorizationEventPublisher Bean - For Jsr250MethodInterceptor and SecuredMethodInterceptor Closes gh-14401	2 years ago

1 2 3 4 5 ...

2601 Commits (d209e92dee8f884f6e99a899fef7ec4e414ddca3)