spring-security

Commit Graph

Author	SHA1	Message	Date
Eleftheria Stein	e3416640a7	Fix Resource Server clock skew default value in docs Closes gh-6611	5 years ago
Steve Riesenberg	10de63ce89	Access Token Response supports any data type Changed the converter used to convert a map into an OAuth2AccessTokenResponse to support any object as the value, including json numbers and nested objects. Also deprecated old classes/setters and added new classes/setters. Closes gh-9685	5 years ago
Steve Riesenberg	ac9b137cad	URL encode client credentials Closes gh-9610	5 years ago
Rob Winch	68f91edbb8	Make XsdDocumentedTests Parsing More Lenient Closes gh-9830	5 years ago
Rob Winch	8400b841e9	Improve XsdDocumentedTests Error Message This makes it easier to compare the expected and actual values. Closes gh-9829	5 years ago
Josh Cummings	65ecaa0c28	Polish postLogoutRedirectUri encoding Issue gh-9511	5 years ago
Hans Hosea Schaefer	b671a96073	Encode postLogoutRedirectUri query params Now encodes already encoded queryparameters in postLogoutRedirectUrl correctly Closes gh-9511	5 years ago
Marcus Hert da Coregio	2a7998d0fc	Adjust createNewSessionIfAllowed to prevent NPE Ensure that isTransientAuthentication reuses the same authentication object from saveContext Closes gh-8947	5 years ago
César Revert	cf74ad3a52	Anonymous in ExceptionTranslationWebFilter The ExceptionTranslationWebFilter does not support correctly when anonymous authentication is enabled. With this enabled provoked always the execution of the access denied handler, and with this fix it behaves like the ExceptionTranslationFilter (servlet), executing the access denied handler only if the principal is not empty and neither anonymous. Closes gh-9130	5 years ago
Craig Andrews	a7fbae8355	Add test for RequestedUrlRedirectInvalidSessionStrategy	5 years ago
Craig Andrews	0e6d47b082	Add guard around debug logging involving string concatenation	5 years ago
Craig Andrews	0af74ce134	Use ServletUriComponentsBuilder instead of UrlPathHelper	5 years ago
Craig Andrews	2bcd4627fa	Eliminate use of Optional	5 years ago
Craig Andrews	10a264c144	Add RequestedUrlRedirectInvalidSessionStrategy implemention of InvalidSessionStrategy Performs a redirect to the original request URL when an invalid requested session is detected. In effect, when a user's session times out, the user is redirected to URL they originally requested instead of some fixed URL.	5 years ago
Steve Riesenberg	36dcbe24d0	Handle custom status codes in error handler Fixes an issue where custom status codes in the error response cause an IllegalArgumentException to be thrown when resolving an HttpStatus. Closes gh-9741	5 years ago
Steve Riesenberg	18a2a4ace9	Handle encoded spaces in the root dn Fixes an issue where provider URLs passed to the constructor of the DefaultSpringSecurityContextSource can be URL encoded, resulting in an invalid base dn. Additionally adds support for list constructor to support spaces in base dn. Closes gh-9742	5 years ago
Marcus Hert da Coregio	2d61fda1af	Combine multiple OS builds into one Closes gh-9790	5 years ago
Marcus Hert da Coregio	fa7ba5e3db	Update Env Variables in Build Windows Job Closes gh-9761	5 years ago
Eleftheria Stein	488683f5a5	Polish DNS SRV lookup method with port Issue gh-9030	5 years ago
Kathryn Newbould	2af322c06d	Add method to return both IP and port for SRV DNS lookup requests Closes gh-9030	5 years ago
Eleftheria Stein	fa77f4c8ff	Deprecate feature-policy where not already deprecated Issue gh-9262	5 years ago
Eleftheria Stein	be903b8e25	Cleanup unused import	5 years ago
Eleftheria Stein	1728b06b30	Ensure Kotlin 1.3 compatibility Closes gh-9765	5 years ago
Josh Cummings	67e5c05a47	Polish AuthorizationManager Method Security - Removed consolidated pointcut advisor in favor of each interceptor being an advisor. This allows Spring AOP to do more of the heavy lifting of selecting the set of interceptors that applies - Created new method context for after interceptors instead of modifying existing one - Added documentation - Added XML support - Added AuthorizationInterceptorsOrder to simplify interceptor ordering - Adjusted annotation lookup to comply with JSR-250 spec - Adjusted annotation lookup to exhaustively search for duplicate annotations - Separated into three @Configuration classes, one for each set of authorization annotations Issue gh-9289	5 years ago
Evgeniy Cheban	84e2e80915	Consider AuthorizationManager for Method Security Closes gh-9289	5 years ago
Josh Cummings	f7f435d3f4	Include all configured branches in CI Closes gh-9775	5 years ago
Rob Winch	081e3301ad	Use GPG_PRIVATE_KEY directly Closes gh-9776	5 years ago
Rob Winch	1898446f68	core depends on crypto Issue gh-9767	5 years ago
Rob Winch	56b7c662e4	Remove spring-security-crypto from spring-core pom Instead of having api extend included configuration, we should use the *Classpath configurations. Closes gh-9767	5 years ago
Rob Winch	8a4ee8af43	Artifactory defaults to publish mavenJava Publication Closes gh-9772	5 years ago
Josh Cummings	d203235567	Update to Spring Security 5.6 Closes gh-9695	5 years ago
Josh Cummings	8c0248d0dc	Remove Temporary Module	5 years ago
Rob Winch	df4d0dc488	Ignore Invalid buildSrc Tests	5 years ago
Rob Winch	073f72277e	Next Development Version	5 years ago
Rob Winch	abd100122e	Fix SpringNexsPublishPlugin spacing in root	5 years ago
Rob Winch	39c5f3d955	Fix closeAndReleaseOssrhStagingRepository	5 years ago
Rob Winch	05dd69395d	Delay until PublishAllJavaComponentsPlugin	5 years ago
Rob Winch	03924951a2	Update GitHub Actions to use publishArtifacts	5 years ago
Rob Winch	4d251157b2	opensaml4MainCompile	5 years ago
Rob Winch	1491f2e0b6	Fix saml javadoc	5 years ago
Rob Winch	777a27523e	fix bom	5 years ago
Rob Winch	b750f3b86c	copyproperties for bom plugin	5 years ago
Rob Winch	b0f661f432	Revert "Map optional dependencies to Maven" This reverts commit `7dc34ccef7`.	5 years ago
Rob Winch	d8e4f6c866	Revert "Management no longer operates on optional/provided to spring-security-dependencies added as bom to poms" This reverts commit `c9bf98c887`.	5 years ago
Rob Winch	c9bf98c887	Management no longer operates on optional/provided to spring-security-dependencies added as bom to poms	5 years ago
Rob Winch	7dc34ccef7	Map optional dependencies to Maven	5 years ago
Rob Winch	5b74484d3d	Fix ManagementConfigurationPlugin Configurations - remove COMPILE_CONFIGURATION_NAME - remove TEST_COMPILE_CONFIGURATION_NAME This is because otherwise spring-security-depencencies appears as maven bom and it should be internal	5 years ago
Rob Winch	0158d2023e	Remove MavenBomTask	5 years ago
Rob Winch	3d4bc6ca9e	remove spring-pom.properties	5 years ago
Rob Winch	b2d14be18e	Revert "versionMapping" This reverts commit `834a1fca0d`.	5 years ago

1 2 3 4 5 ...

9455 Commits (e3416640a79a43fac08d3d7aafce4e72f7d3b194) All Branches Search

9455 Commits (e3416640a79a43fac08d3d7aafce4e72f7d3b194)

All Branches