spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	de10e08348	Make withRoles Check Only Roles This commit clarifies the semantics of withRoles, which is to check the role-based authorities in an authentication. Closes gh-17843	3 months ago
Josh Cummings	bd119ac411	Implement Equals and HashCode Internally, RequestMatcher is sometimes used as a key to a HashMap. Accordingly, each implementation should implement equals and hashCode. Closes gh-17842	3 months ago
Rob Winch	24ffda28d8	Fixes for webauthn tests after JSpecify Issue gh-17839	4 months ago
Rob Winch	6a84f96930	Enable Null checking in spring-security-test via JSpecify Closes gh-17840	4 months ago
Rob Winch	194be8ffb6	Checkstyle fixes for webauthn JSpecify Issue gh-17839	4 months ago
Rob Winch	47b4b155da	Add security-nullability to webauthn Issue gh-17839	4 months ago
Rob Winch	0a991a91ce	Enable Null checking in spring-security-webauthn via JSpecify Closes gh-17839	4 months ago
Josh Cummings	3dbcf266e9	Merge branch '6.5.x'	4 months ago
Josh Cummings	eeb67650ee	Deprecate RequiresChannelDsl Issue gh-16680	4 months ago
Josh Cummings	3534b74945	Replace InteractiveAuthenticationSuccessEvent 7.0.x Sample Given that `7e3bf9662c` changes the InteractiveAuthenticationSuccessEvent serialization sample, this commit syncs up the 7.0.x version to match. Closes gh-16276	4 months ago
Josh Cummings	dc0ab4c805	Merge branch '6.5.x'	4 months ago
Josh Cummings	c982753d46	Replace InteractiveAuthenticationSuccessEvent 6.5.x Sample Given that `7e3bf9662c` changes the InteractiveAuthenticationSuccessEvent serialization sample, this commit syncs up the 6.5.x version to match. Issue gh-16276	4 months ago
Fridolin Jackstadt	910df479be	Provider Default Timeouts For JWK Retrieval Issue gh-14269 Signed-off-by: Fridolin Jackstadt <fridolin.jackstadt@unic.com>	4 months ago
Rob Winch	9866435946	Fix security-nullability plugin in taglibs Issue gh-17828	4 months ago
Rob Winch	5370f1190f	Enable Null checking in spring-security-taglibs via JSpecify Closes gh-17828	4 months ago
Rob Winch	f13d8d5c75	Fix Nullability in WebInvocationPrivilegeEvaluator Issue gh-17535	4 months ago
Rob Winch	1216ee598f	Enable Null checking in spring-security-rsocket via JSpecify Closes gh-16882	4 months ago
Rob Winch	a4a4908d71	Enable Null checking in spring-security-cas via JSpecify Closes gh-16882	4 months ago
Josh Cummings	0ff9f10696	Merge branch '6.4.x' into 6.5.x	4 months ago
Josh Cummings	7e3bf9662c	Polish InteractiveAuthenticationSuccessEvent Sample The sample better matches a value that would be used in the constructor Issue gh-16276	4 months ago
Rob Winch	be64c67af5	Enable Null checking in spring-security-web via JSpecify Closes gh-16882	4 months ago
Rob Winch	a58f3282d9	Fix config/src/test/kotlin nullability for web Issue gh-17535	4 months ago
Rob Winch	c2ba662b91	Enable Null checking in spring-security-web via JSpecify Closes gh-17535	4 months ago
Rob Winch	49f308adb0	Use Supplier<? extends @Nullable Authentication> Previously Supplier<@Nullable Authentication> was used. This prevented Supplier<Authentication> from being used. The code now uses Supplier<? extends @Nullable Authentication> which allows for both Supplier<@Nullable Authentication> and Supplier<Authentication>. Closes gh-17814	4 months ago
Josh Cummings	4cbe8de7ea	Polish RSocket Anonymous Support Changed the DSL method name to anonymous to align with jwt. Since basicAuthenication is deprecated, we don't need to align with its naming convention. Also added a since attribute to the method. Issue gh-17132	4 months ago
Andrey Litvitski	559b73b39f	Add Disabling Anonymous Authentication in RSocketSecurity Closes: gh-17132 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com> 1 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com> 1 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	4 months ago
Andrey Litvitski	3278f3a410	Add discoverJwsAlgorithms() in NimbusJwtDecoder Closes: gh-17785 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	4 months ago
Josh Cummings	36f1de945f	Add OneTimeTokenAuthentication Closes gh-17799	4 months ago
Josh Cummings	6663eea65f	Polish OTT Tests Improve tests so that they do not rely on OneTimeTokenAuthenticationToken as the concrete type. Issue gh-17799	4 months ago
Josh Cummings	89b2f9cf54	Improve Test Runnability in IDE In some configurations, Configuration classes with static elements may cause a test to hang. This commit changes JeeConfigurerTests test configuration classes to use mock beans instead of referencing them as static fields.	4 months ago
Josh Cummings	0e39685b9c	Merge branch '6.5.x'	4 months ago
Josh Cummings	9d64880ea9	Merge branch '6.4.x' into 6.5.x	4 months ago
Josh Cummings	8b2a453301	Advise Favoring PostAuthorize on Reads Closes gh-17797	4 months ago
Josh Cummings	d1962201b5	Merge branch '6.5.x'	4 months ago
Josh Cummings	857ca9c412	Merge remote-tracking branch 'origin/6.4.x' into 6.5.x	4 months ago
Nikita Konev	894105aab5	Fix traceId discrepancy in case error in servlet web Signed-off-by: Nikita Konev <nikit.cpp@yandex.ru>	4 months ago
Rob Winch	f7f41ba6c4	Add missing @NullMarked to spring-data package-info Issue gh-17789	4 months ago
Rob Winch	f496ded4e5	AuthorizationManager allows null Authentication It is possible to have a null Authentication and so the AuthorizationManager APIs should allow for passing it in. Closes gh-17795	4 months ago
Josh Cummings	583e668c6b	Remove opensaml5Test Task Issue gh-17707	4 months ago
Rob Winch	d6a0e3bf78	Fix Nullability Imports Issue gh-17789	4 months ago
Rob Winch	29bb4919ca	Add Nullability to spring-security-data Closes gh-17789	4 months ago
Rob Winch	d9210c6596	Fix Nullability	4 months ago
Rob Winch	b8b1a92ad4	Revert "Apply Nullability to spring-security-data" This reverts commit `bbcdb23698`.	4 months ago
Rob Winch	bbcdb23698	Apply Nullability to spring-security-data	4 months ago
Rob Winch	9bbf837c7c	Merge branch '6.5.x'	4 months ago
Rob Winch	8a1e2a22f9	Merge branch 'gh-16226-servlet-test-method' into 6.5.x	4 months ago
Rob Winch	0404996f87	import Assertions.assertThat This adds a static import for assertThat in the Kotlin docs code	4 months ago
Rob Winch	0f63d98c84	Use @EnableMethodSecurity in docs tests Previously parameters were passed in unnecessarily. This removes the unnecessary paramaters.	4 months ago
Rob Winch	fbfbb1e571	Use 2004-present for Copyright Spring Security migrated the copyright to use -present to simplify the headers. This commit aligns the header.	4 months ago
Joe Kuhel	d002e68231	Update servlet test method docs to use include-code References gh-16226 Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	4 months ago

1 2 3 4 5 ...

19320 Commits (de10e08348444c2ba93a2bbb1639119d12d42f6a) All Branches Search

19320 Commits (de10e08348444c2ba93a2bbb1639119d12d42f6a)

All Branches