spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	51a0cffd36	Post-process AuthenticationRequestFilter Fixes gh-8552	6 years ago
Josh Cummings	9241cd2892	Move TestRelyingPartyRegistrations Fixes gh-8551	6 years ago
Parikshit Dutta	1e211b6558	Add RequestCache setter in OAuth2AuthorizationCodeGrantFilter Fixes gh-8120	6 years ago
Joe Grandja	c1abc9b134	Polish gh-8501	6 years ago
Thomas Vitale	78fa859798	Add issuerUri to ClientRegistration.providerDetails - Add "issuerUri" attribute to ClientRegistration.providerDetails for OpenID Connect Discovery 1.0 or OAuth 2.0 Authorization Server Metadata. - Validate OidcIdToken "iss" claim against the OpenID Provider "issuerUri" value. - Update documentation for client registration: it includes issuer-uri property now. Fixes gh-8326	6 years ago
Eleftheria Stein	1aadbb2f4d	Remove "/path/**/other" patterns in tests Fixes gh-8513	6 years ago
Dávid Kovács	f2a2b469c4	Deprecate openID 2.0 support This commit adds deprecation notice to xml schema, parser of the schema and removes fixme comments. Fixes gh-7153	6 years ago
Rob Winch	d91b153cad	Explicitly set useSuffixPatternMatch for Tests Spring MVC changed their default behavior in https://github.com/spring-projects/spring-framework/issues/23915 This causes failures in some of Spring Security's tests. This explicitly sets useSuffixPatternMatch=true to ensure that Spring Security still works if users have modified their defaults. Closes gh-8493	6 years ago
Joe Grandja	86ca6b013c	Unlock dependencies This reverts commit `206960cf44`.	6 years ago
Joe Grandja	206960cf44	Lock dependencies for 5.4.0-M1	6 years ago
Dávid Kovács	339d44b5a1	Deprecate openID 2.0 support This commit puts deprecation notice on docs, sample applications and configurations (java and xml) Fixes gh-7153	6 years ago
Rob Winch	4a9fa0337a	Allow Configure RequestRjectedHandler in XML Issue gh-5007	6 years ago
Leonard Brünings	b826c798f7	Add RequestRejectedHandler Closes gh-5007	6 years ago
Dávid Kovács	8e8251ac5f	Add ROLE_INFRASTRUCTURE to infrastructure beans Closes gh-8407	6 years ago
Adam Millerchip	0f29bee1b0	Add authorize() DSL method that accepts HttpMethod Fixes: gh-8307	6 years ago
Adam Millerchip	16a7cbee4b	Use named arguments in Kotlin authorization rule	6 years ago
Adam Millerchip	401393d756	Extract pattern type in request matcher DSL	6 years ago
Antonin Arquey	5cd1ec7bb3	Add AuthoritiesMapper setter for reactive OAuth2Login Allow the configuration of a custom GrantedAuthorityMapper for reactive OAuth2Login - Add setter in OidcAuthorizationCodeReactiveAuthenticationManager and OAuth2LoginReactiveAuthenticationManager - Use an available GrantedAuthorityMapper bean to configure the default ReactiveAuthenticationManager Fixes gh-8324	6 years ago
Roberto Paolillo	2cccf223df	Add Flag to enable searching of LDAP groups on subtrees Closes gh-8939	6 years ago
Loïc Labagnara	146d9ba0bf	Add marker to make Kotlin DSL type safe. Fixes gh-8366	6 years ago
Evgeniy Cheban	a70d55552b	Resource Server Finds JwtAuthenticationConverter Beans Fixes gh-8185	6 years ago
Rob Winch	9a42a028e7	Logout defaults to use Global SecurityContextServerLogoutHandler Closes gh-8375	6 years ago
Josh Cummings	711954e016	Deprecate Saml2AuthenticationRequestFilter Constructor Removing the default usage of OpenSamlAuthenticationRequestFactory. Otherwise, the Open SAML dependency is required, even when Saml2AuthenticationRequestFactory is implemented without it. Fixes gh-8359	6 years ago
Eleftheria Stein	39e09e4ca5	Idiomatic Kotlin DSL for server HTTP security Issue: gh-5558	6 years ago
Eleftheria Stein	6017510fdd	Compile Kotlin tasks using JVM 1.8	6 years ago
hotire	6d45ec5d6b	Fix typo in Javadoc of ServerHttpSecurity#hasAuthority	6 years ago
Markus Engelbrecht	dc6b8ce470	Add addFilterAfter and addFilterBefore to Kotlin DSL Fixes gh-8316	6 years ago
Eleftheria Stein	1de0cf5057	Fix HttpSecurity Javadoc Fixes gh-4404	6 years ago
Rob Winch	91728ef53b	Fix HttpServlet3RequestFactory Logout Handlers Previously there was a problem with Servlet API logout integration when Servlet API was configured before log out. This ensures that logout handlers is a reference to the logout handlers vs copying the logout handlers. This ensures that the ordering does not matter. Closes gh-4760	6 years ago
Rob Winch	b055f8bb25	SpringTestContext returns ConfigurableWebApplicationContext Closes gh-8233	6 years ago
Joe Grandja	e27e548215	oauth2Login WebFlux does not auto-redirect for XHR request Fixes gh-8118	6 years ago
Eleftheria Stein	97085ef310	Fix rsocket test Request route that exists; add additional error message verification Fixes gh-8154	6 years ago
Josh Cummings	2d8c65db56	Support port=0 for LDAP Servers Fixes gh-8138	6 years ago
Josh Cummings	4d99ee2896	Allow port=0 in XSD Issue gh-8138	6 years ago
Josh Cummings	f438bdfbcf	Add spring-security-5.4.xsd Issue gh-8138	6 years ago
Erik van Paassen	ad9bb7f230	Fix typo in Javadoc of HttpSecurity#csrf() `HttpSecurity#csrf()` obviously returns a `CsrfConfigurer`, while the Javadoc states that it returns the `ServletApiConfigurer`.	6 years ago
Eleftheria Stein	40b15f5a46	Rename to SessionFixationDslTests	6 years ago
Josh Cummings	bfd36d9a54	Remove Redundant ConcurrentSessionFilter Refs Fixes gh-8105	6 years ago
Markus Engelbrecht	d81321bc29	Fix typo 'properites' in documentation Fixes gh-8095	6 years ago
Josh Cummings	6eadf7b140	Unlock dependencies for 5.3.0.RELEASE This reverts commit `147d7dadd7`.	6 years ago
Josh Cummings	147d7dadd7	Lock dependencies for 5.3.0.RELEASE	6 years ago
Josh Cummings	c729fee7bc	Malformed Bearer Token Returns 401 for WebFlux Fixes gh-7668	6 years ago
Joe Grandja	c111099640	Polish client-registration xsd attributes Issue gh-4557	6 years ago
Josh Cummings	e97396b9c7	Add Resource Server XML Support Fixes gh-5185	6 years ago
Josh Cummings	f1a2d69968	Add AuthenticationProvider List Configurability Issue gh-5185	6 years ago
Josh Cummings	34b40deb38	Add By-RequestMatcher Exception Handling Issue gh-5185	6 years ago
Josh Cummings	98a2ca3bbc	Add Csrf Ignore Configurability Issue gh-5185	6 years ago
Josh Cummings	19584884b3	Register Authentication Provider in Init Phase Fixes gh-8031	6 years ago
Filip Hanik	3257349045	Support POST binding for AuthNRequest Has been tested with - Keycloak - SSOCircle - Okta - SimpleSAMLPhp This PR extends (builds on previous commits and adds user configuration options) https://github.com/spring-projects/spring-security/pull/7758	6 years ago
Rob Winch	727fee1e12	Polish HeaderWriterSpec Assert.notNull(Object,Supplier) is for when then message passed in requires concatenation and avoids doing extra work. Since this does not require concatenation, we can use Assert.notNull(Object,String) Issue gh-7636	6 years ago

1 2 3 4 5 ...

1560 Commits (dc514b369e94d17edcaec51ce496f5fc35fc21fc)