spring-security

Commit Graph

Author	SHA1	Message	Date
Filip Hrisafov	b9f122230b	Align javadoc of continueFilterChainOnUnsuccessfulAuthentication with actual behaviour	6 years ago
Michel Palourdio	d26f40f062	DefaultRedirectStrategy should redirect to root if the context-relative URL does not contain the context-path.	6 years ago
Tadaya Tsuyukubo	62c7de03c3	Add RequestMatcher to AbstractPreAuthenticatedProcessingFilter Moved the existing auth check logic to the matcher. Issue: gh-5928	6 years ago
Eleftheria Stein	264daec697	Test context relative URL with multiple schemes	6 years ago
Josh Cummings	b764af6b9b	CookieServerCsrfTokenRepositoryTests Leading Dot ResponseCookie removed support for having a leading dot in the cookie domain. Fixes gh-7500	6 years ago
Josh Cummings	7949dd492a	Move DelegatingServerAuthenticationSuccessHandlerTests Moved from src/test/groovy to src/test/java Issue gh-5332	6 years ago
Josh Cummings	5f905232cb	Polish CurrentSecurityContextArgumentResolvers Fixes gh-7487	6 years ago
Onur Kagan Ozcan	034b5e9e93	Introduce LogoutSuccessEvent LogoutSuccessEvent is a simple AbstractAuthenticationEvent implementation which indicates successful logout. By default, LogoutConfigurer will add a new LogoutHandler called LogoutSuccessEventPublishingLogoutHandler to publish this event. This PR will also fix ConcurrentSessionFilter's composite logoutHandler, now will get LogoutHandler instances from LogoutConfigurer for consistency. Fixes gh-2900	6 years ago
Josh Cummings	7576dc44d7	AuthenticationFilter Session Fixation Protection Fixes gh-7446	6 years ago
Josh Cummings	496a2cdc60	Make AuthenticationFilter methods private Fixes gh-7447	6 years ago
Josh Cummings	aa12748c9b	Add Request-level CSRF Skip Fixes gh-7367	6 years ago
Eleftheria Stein	9f0986a093	Fix javadoc typo for invalid session strategy	6 years ago
Filip Hanik	e9a44bc0ce	HttpSecurity.saml2login() - MVP Core Code Implements minimal SAML 2.0 login/authentication functionality with the following feature set: - Supports IDP initiated login at the default url of /login/saml2/sso/{registrationId} - Supports SP initiated login at the default url of /saml2/authenticate/{registrationId} - Supports basic java-configuration via DSL - Provides an integration sample using Spring Boot Not implemented with this MVP - Single Logout - Dynamic Service Provider Metadata Fixes gh-6019	6 years ago
Rob Winch	2a1f3f6aa7	Remove Package Tangle in HeaderWriterFilter Fixes gh-7380	6 years ago
Josh Cummings	39e84013f7	ClearSiteDataHeaderWriter Directives Fixes gh-7347	6 years ago
Eleftheria Stein	ad0d3e9702	Polish remember me username check	6 years ago
Scott Murphy	26ae590c68	Check that userdetails for username exists. #7251	6 years ago
kostya05983	f6c650db47	Replace Streams with Loops First version of replacing streams fix wwwAuthenticate and codestyle fix errors in implementation to pass tests Fix review notes Remove uneccessary final to align with cb Short circuit way to authorize Simplify error message, make code readably Return error while duplicate key found Delete check for duplicate, checkstyle issues Return duplicate error Fixes gh-7154	7 years ago
Lars Grefer	95511331fa	fix checkstyle	7 years ago
watsta	2c2e8e5f24	Remove internal Optional usage in favor of null checks Issue gh-7155	7 years ago
Lars Grefer	34dd5fea30	Remove redundant throws clauses Removes exceptions that are declared in a method's signature but never thrown by the method itself or its implementations/derivatives.	7 years ago
Daniel Wegener	1a233a58c7	Add OnCommittedResponseWrapper.setContentLengthLong Add setContentLengthLong tracking to OnCommittedResponseWrapper in order to detect commits on servlets that use setContentLengthLong to announce the entity size they are about to write (as used in the Apache Tomcat's DefaultServlet). Fixes gh-7261	7 years ago
Eleftheria Stein	4bc231872f	Expire as many sessions as exceed maximum allowed Fixes: gh-7166	7 years ago
Josh Cummings	9735a718cc	Remove MultiTenantAuthenticationManagerResolver Fixes gh-7259	7 years ago
Lars Grefer	ec6ca97226	Fix tests	7 years ago
Lars Grefer	ff1070df36	remove redundant modifiers found by checkstyle	7 years ago
Lars Grefer	38de737663	Java 8: Statement lambda can be replaced with expression lambda	7 years ago
Lars Grefer	7b2a7847e5	Java 8: Single Map method can be used	7 years ago
Lars Grefer	25c06be1eb	Java 7: Identical 'catch' branches in 'try' statement	7 years ago
Lars Grefer	578d628774	'Collection.toArray()' call style	7 years ago
Lars Grefer	b388976ac8	fix checkstyle	7 years ago
Lars Grefer	35bdf1f009	Unnecessary semicolon	7 years ago
Lars Grefer	d9c1f03b84	Unnecessary interface modifier	7 years ago
Lars Grefer	40bee457f9	Unnecessary enum modifier	7 years ago
Lars Grefer	8d0ca14e55	Unnecessary conversion to String	7 years ago
Lars Grefer	fb39d9c255	Anonymous type can be replaced with lambda	7 years ago
Lars Grefer	05f42a4995	Remove unused imports	7 years ago
Lars Grefer	2056834432	Cleanup unnecessary unboxing Unboxing is unnecessary under Java 5 and newer, and can be safely removed.	7 years ago
Lars Grefer	2306d987e9	Cleanup unnecessary boxing	7 years ago
Filip Hanik	2055466ad7	Add Javadoc	7 years ago
Filip Hanik	ddf68821cb	Add RequestMatcher.matcher(HttpServletRequest) Step 3 - Usage of RequestVariablesExtractor or types that are assigned to AntPathRequestMatcher should be replaced with the new method. [closes #7148]	7 years ago
Eddú Meléndez	496579dde2	Add match result for servlet requests Fixes gh-7148	7 years ago
Josh Cummings	774a2e669c	Polish setAllowedHostnames Added JavaDoc to method, including @since attribute Issue gh-4310	7 years ago
Eddú Meléndez	f712c5598c	Add support for allowedHostnames in StrictHttpFirewall Introduce a new method `setAllowedHostnames` which perform the validation against untrusted hostnames. Fixes gh-4310	7 years ago
Khy	a5cfd9fdb9	Downgrade AuthenticationFilter modifier Fixes gh-7177	7 years ago
Lars Grefer	776a4c3760	Use org.mockito.ArgumentMatchers in favor of org.mockito.Matchers	7 years ago
Rob Winch	ad2f999c25	Polish BasicAuthenticationConverter This reverts to the old behavior from BasicAuthenticationFilter. Specifically, if a token has an empty password, it still parses a username and an empty String password. Issue gh-7025	7 years ago
Josh Cummings	d157125c8e	Polish AuthenticationFilter Updated member variable references to be prefixed with "this.". Fixed typo in authentication manager resolver error message. Issue: gh-6506	7 years ago
Eddú Meléndez	50adb6abcb	Fix javadoc	7 years ago
Eleftheria Stein	0b4502b2c5	Remove exceptions from lambda security configuration Fixes: gh-7128	7 years ago

1 2 3 4 5 ...

960 Commits (de7cbc82b5af286d3763438ef656d72b1f50e744)