Eleftheria Stein
de7cbc82b5
Clarify in Javadoc that expressionHandler should not be null
...
Fixes: gh-2665
6 years ago
Filip Hrisafov
b9f122230b
Align javadoc of continueFilterChainOnUnsuccessfulAuthentication with actual behaviour
6 years ago
Phil Clay
8584b12c8d
Make saveAuthorizedClient save the authorized client
...
Previously, saveAuthorizedClient never actually saved the authorized
client, because it ignored the Mono<Void> returned from
authorizedClientRepository.saveAuthorizedClient.
Now, it does not ignore the Mono<Void> returned from
authorizedClientRepository.saveAuthorizedClient, and includes it in
the stream, and therefore it will properly save the authorized client.
Fixes gh-7546
6 years ago
Michel Palourdio
d26f40f062
DefaultRedirectStrategy should redirect to root if the context-relative URL does not contain the context-path.
6 years ago
Joe Grandja
1c53a7859b
Fix access token expiry check with clock skew
...
Fixes gh-7511
6 years ago
Tadaya Tsuyukubo
62c7de03c3
Add RequestMatcher to AbstractPreAuthenticatedProcessingFilter
...
Moved the existing auth check logic to the matcher.
Issue: gh-5928
6 years ago
Giovanni Lovato
63607ee213
Add configurable mapping function to map authorities
6 years ago
Eleftheria Stein
2d26be9446
Remove redundant public modifier
6 years ago
Markus Öllinger
2cc05550fc
rename comparison method to isGranted and add test
6 years ago
Markus Öllinger
a4ea989e9c
remove trailing whitespace
6 years ago
Markus Öllinger
a449d6c316
extract permission mask comparison for subclasses to override
6 years ago
Everett Irwin
6ad328f909
Add Clock Skew Tests
...
Fixes gh-7511
Co-authored-by: Isaac Cummings <josh.cummings+zac@gmail.com>
6 years ago
Eleftheria Stein
264daec697
Test context relative URL with multiple schemes
6 years ago
Isaac Cummings
1081066d60
Polish AuthorityUtils
...
Changed parameter name to authorities
Added JavaDoc
Fixes gh-4805
Co-authored-by: Everett Irwin <everettirwin77@gmail.com>
6 years ago
Ramon Pires da Silva
0387723334
fix webflux samples documentation path
...
The documentation of webflux integration sample projects was pointing to the `javaconfig` instead of `boot` folder.
6 years ago
Roland Weisleder
f4b9abdbb1
Fix typo in Javadoc
6 years ago
Brendt Lucas
8ebfba3019
Support configuration of protocol binding for authentication requests
6 years ago
Filip Hanik
971ae346c5
Update to Spring Data Moore-RELEASE
6 years ago
Rob Winch
0feaf9bf6f
Disable force milestone repository
...
We will be using spring boot release for our next release, so we
do not need to force milestones now.
6 years ago
Rob Winch
b8beee97a8
Next development version
6 years ago
Rob Winch
b7d97ca077
Release 5.2.0.RELEASE
6 years ago
Rob Winch
0d088b581b
Allow milestone for Boot version
6 years ago
Filip Hanik
4113e79aa3
Upgrade Spring Boot to 2.2.0.M6
6 years ago
Filip Hanik
8c4252681e
Upgrade rsocket to 1.0.0-RC5 without BOM
6 years ago
Filip Hanik
cdeeb27b51
Upgrade Spring Data to Lovelace-SR11
6 years ago
Filip Hanik
9393017e3f
Upgrade Project Reactor to Dysprosium-RELEASE
6 years ago
Filip Hanik
09c29d286a
Upgrade Spring Framework to 5.2.0.RELEASE
6 years ago
Rob Winch
b29106ea31
Use deamon thread for Schedulers.newParallel
...
Fixes gh-7492
6 years ago
Rob Winch
1bf0e70bd0
Revert "Dispose default Scheduler"
...
This reverts commit 39600b901f .
6 years ago
Filip Hanik
8bc3ad16ef
SAML 2 Login - Documentation
...
Fixes gh-7472
https://github.com/spring-projects/spring-security/issues/7472
6 years ago
Rob Winch
fc8a0184b0
Polish Dispose default Scheduler
6 years ago
Rob Winch
e0414e5cbe
Merge pull request #7493 from robotmrv/gh-7492
...
Dispose default Scheduler
6 years ago
Rob Winch
3051a79188
Merge Add hasAnyAuthority method in AuthorizePayloadsSpec.Access
6 years ago
Rob Winch
a911f3d52f
Merge Add hasAnyRole method in AuthorizePayloadsSpec.Access
6 years ago
Rob Winch
3854afad61
Merge Add denyAll method in AuthorizePayloadsSpec.Access
6 years ago
Rob Winch
03e2efacf4
Add Hello RSocket Sample
...
Fixes gh-7504
6 years ago
Filip Hanik
83b5f5c7ae
Improve the Saml2AuthenticationRequest object
...
- introduce the AssertionConsumerServiceURL attribute
- add javadoc
- align property name with SAML XML for AuthNRequest
6 years ago
Filip Hanik
9731386de5
Correctly set "Destination" in AuthNRequest message
...
Fixes gh-7494
https://github.com/spring-projects/spring-security/issues/7494
6 years ago
Filip Hanik
69eacac514
Fix javadoc for RelyingPartyRegistrationRepository
6 years ago
Filip Hanik
7adb4da3ef
Always require signature on either response or assertion
...
Fixes gh-7490
https://github.com/spring-projects/spring-security/issues/7490
6 years ago
Rob Winch
d83aa34dde
Add RSocket Reference
...
Fixes gh-7502
6 years ago
Josh Cummings
b764af6b9b
CookieServerCsrfTokenRepositoryTests Leading Dot
...
ResponseCookie removed support for having a leading dot in the cookie
domain.
Fixes gh-7500
6 years ago
Josh Cummings
71bbc9849e
URL Cleanup
...
Issue gh-2567
6 years ago
Josh Cummings
35797f9a74
Add Resource Server to Modules Section
...
Fixes gh-7498
6 years ago
Josh Cummings
8421594397
Replace Servlet Guides w/ Hello World Samples
...
Issue gh-2567
Co-authored-by: Jay Bryant <jbryant@pivotal.io>
Co-authored-by: Rob Winch <rwinch@users.noreply.github.com>
6 years ago
Josh Cummings
25b5f48884
Rewrite Preface
...
Issue gh-2567
Co-authored-by: Jay Bryant <jbryant@pivotal.io>
Co-authored-by: Rob Winch <rwinch@users.noreply.github.com>
6 years ago
Filip Hanik
f832d08814
Upgrade Jackson JSON library to 2.10.0
6 years ago
Joe Grandja
aecebeac69
Polish ref doc for oauth2Login
6 years ago
Joe Grandja
7754913a74
Document OidcClientInitiatedLogoutSuccessHandler
...
Fixes gh-7401
6 years ago
Roman Matiushchenko
39600b901f
Dispose default Scheduler
...
AbstractUserDetailsReactiveAuthenticationManager creates parallel
Scheduler with daemon=false Threads. It is recommended to dispose such
Schedulers to be able exit the VM
Fixes gh-7492
6 years ago