spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	9a9a43a0c0	ForceEagerSessionCreationFilter Closes gh-11109	4 years ago
Marcus Da Coregio	5367524030	Change the default of shouldFilterAllDispatchTypes to true Closes gh-11107	4 years ago
Marcus Da Coregio	84b5c76a7b	Add Option to Filter All Dispatcher Types Closes gh-11092	4 years ago
Rob Winch	0c2b9758fc	Deprecate loadContext(RequestResponseHolder) Fix gh-11032	4 years ago
Marcus Da Coregio	50f8df6f07	Use HttpStatusCode Closes gh-11091	4 years ago
Marcus Da Coregio	bc50146f60	Fix tests in AntPathRequestMatcherTests Closes gh-11090	4 years ago
Rob Winch	7be32872e9	Add DisableUrlRewritingFilter Closes gh-11084	4 years ago
Eleftheria Stein	c4e88415a5	Remove MessageSourceAware from ExceptionTranslationWebFilter Closes gh-11057	4 years ago
Eleftheria Stein	ae8e77f9ff	Remove blocking call from ExceptionTranslationWebFilter This also means that the exception message is no longer retrieved from a MessageSource. This is consistent with the other WebFilters. Closes gh-10864	4 years ago
Josh Cummings	1edfa07d27	Use RequestMatcherEntry Closes gh-11046	4 years ago
Josh Cummings	bdd5f86526	Polish Authorization Event Support - Added spring-security-config support - Renamed classes - Changed contracts to include the authenticated user and secured object - Added method security support Issue gh-9288	4 years ago
Parikshit Dutta	990831db85	Add authorization events Closes gh-9288	4 years ago
Marcus Da Coregio	8c34af711e	Use ServletContext in AuthorizationManagerWebInvocationPrivilegeEvaluator Closes gh-10908	4 years ago
Rob Winch	e176d764ba	Add SecurityContextRepository.loadContext(HttpServletRequest) This allows loading the SecurityContext lazily, without the need for the response, and does not attempt to automatically save the request when the response is comitted. Closes gh-11028	4 years ago
Rob Winch	1e3106f3a2	HttpSessionSecurityContextRepository support null HttpServletResponse Closes gh-11029	4 years ago
Steve Riesenberg	8aa7029d07	Fix checkstyle errors Issue gh-10989	4 years ago
Steve Riesenberg	946e24e1c2	Polish gh-10911	4 years ago
David Kirstein	2b6bc5dd0b	Use configurable charset in ServerHttpBasicAuthenticationConverter Closes gh-10903	4 years ago
ShinDongHun1	90fe1b3a69	Polish UsernamePasswordAuthenticationFilter method Closes gh-10970	4 years ago
Rob Winch	972039e65c	Add SecurityContextHolderFilter Closes gh-9635	4 years ago
Rob Winch	cbba7ea4de	AbstractAuthenticationProcessingFilter.securityContextRepository Issue gh-10953	4 years ago
Norbert Nowak	abd33389be	Add UsernamePasswordAuthenticationToken factory methods - unauthenticated factory method - authenticated factory method - test for unauthenticated factory method - test for authenticated factory method - make existing constructor protected - use newly factory methods in rest of the project - update copyright dates Closes gh-10790	4 years ago
Rob Winch	4462b73fd9	AbstractPreAuthenticatedProcessingFilter.securityContextRepository Issue gh-10953	4 years ago
Rob Winch	ba7fb0cb14	DigestAuthenticationFilter.securityContextRepository Issue gh-10953	4 years ago
Rob Winch	09e730734b	BasicAuthenticationFilter.setSecurityContextRepository Issue gh-10953	4 years ago
Rob Winch	d909d3bc40	RememberMeAuthenticationFilter.securityContextRepository Issue gh-10953	4 years ago
Rob Winch	7c5b939bbd	AuthenticationFilter.securityContextRepository Issue gh-10953	4 years ago
Marcus Da Coregio	8c94c2e15a	AuthorizationManagerWebInvocationPrivilegeEvaluator grant access when AuthorizationManager abstains Closes gh-10950	4 years ago
Rob Winch	2abeff2089	HttpSessionSecurityContextRepository saves with original response Previously, the HttpSessionSecurityContextRepository unnecessarily required the HttpServletResponse from the HttpReqeustResponseHolder passed into loadContext. This meant code that wanted to save a SecurityContext had to have a reference to the original HttpRequestResponseHolder. Often that implied that the code that saves the SecurityContext must also load the SecurityContext. This change allows any request / response to be used to save the SecurityContext which means any code can save the SecurityContext not just the code that loaded it. This sets up the code to be permit requiring explicit saves. Using the request/response from the HttpRequestResponseHolder is only necessary for implicit saves. Closes gh-10947	4 years ago
Rob Winch	bab5d252a2	Add RequestAttributeSecurityContextRepository Closes gh-10918	4 years ago
Josh Cummings	20d21f8eeb	Invert Log Messages Closes gh-10909	4 years ago
Josh Cummings	a99a04f050	Update JavaDoc Issue gh-10564	4 years ago
Yuriy Savchenko	d6cbacb27a	Make WebAuthenticationDetails constructor public Closes gh-10564	4 years ago
Josh Cummings	84616543a3	Polish ignoring() log messaging - Public API remains unchanged Issue gh-9334	4 years ago
Manuel Jordan	6ae651bd67	Print ignore message DefaultSecurityFilterChain When either `web.ignoring().mvcMatchers(...)` or `web.ignoring().antMatchers(...)` methods are used, for all their variations, the DefaultSecurityFilterChain class now indicates correctly through its ouput what paths are ignored according the `ignoring()` settings. Closes gh-9334	4 years ago
Rob Winch	6f0029fc44	Add Support for @Transient SecurityContext Closes gh-9995	4 years ago
Marcus Da Coregio	0048805c2a	RequestMatcherDelegatingWebInvocationPrivilegeEvaluator doesn't provided access to the ServletContext Closes gh-10779	4 years ago
Josh Cummings	08821369a3	Add Request-based AuthenticationManagerResolvers Closes gh-6762	4 years ago
Rob Winch	f94090a59b	Remove spring-security-openid Closes gh-10773	4 years ago
Juan Carlos	2624150052	Add serialVersionUID to DefaultSavedRequest and SavedCookie Closes gh-10594	4 years ago
Josh Cummings	feff747669	Polish multiple RequestRejectedHandlers support Issue gh-10603	4 years ago
Adam Ostrožlík	27cfb9c89d	Support multiple RequestRejectedHandler beans Closes gh-10603	4 years ago
Josh Cummings	b2fe9149cf	Use noNullElements Collection#contains(null) does not work for all collection types Issue gh-10703	4 years ago
heowc	6c5fd38a3f	Fix typo	4 years ago
Marcus Da Coregio	750dcafbd2	Fix @since tag Issue gh-10590, gh-10554	4 years ago
Marcus Da Coregio	d884d9a461	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Marcus Da Coregio	51b4bd67c9	Add RequestMatcherEntry	4 years ago
Marcus Da Coregio	eda346863d	Introduce AuthorizationManagerWebInvocationPrivilegeEvaluator Closes gh-10590	4 years ago
Eleftheria Stein	c68a75bcde	Correct imports to jakarta Issue gh-9385, gh-10118	4 years ago
Marcus Da Coregio	0beb725259	Add Cross Origin Policies headers Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers Closes gh-9385, gh-10118	4 years ago

1 2 3 4 5 ...

1211 Commits (dec0d97ef062ca9942f58c8c7d33a8cd06cdc37d)