spring-security

Commit Graph

Author	SHA1	Message	Date
Steve Riesenberg	07b884a2cb	Add Set-Cookie header value for XSRF-TOKEN This commit fixes an issue where using HttpServletResponse#setHeader causes previous header values to be overwritten. Closes gh-13075	3 years ago
Marcus Da Coregio	2d52fb8e4b	Clear Repository on Logout	3 years ago
Marcus Da Coregio	01d1e20dc3	Deprecate shouldFilterAllDispatcherTypes Closes gh-12138	3 years ago
Josh Cummings	02345b97ff	Polish Observation Event Names Issue gh-12811	3 years ago
bvn13	59ba7f5388	Shorten Observation Event Names Closes gh-12811	3 years ago
Christian Marck	442faccb5f	Avoid NPE in FilterInvocation Handle unknown headers in dummy request wrapper. Closes gh-12998	3 years ago
Josh Cummings	6db2b0dcd0	Align Filter Chain Observability Lineage Closes gh-12849	3 years ago
Christian Schuster	6791f3208e	Add factory class for RequestMatcher composition Closes gh-12751	3 years ago
Marcus Da Coregio	8d664bc4c2	DelegatingSecurityContextRepository should call loadContext Closes gh-12314	3 years ago
Josh Cummings	3fbb64db96	Fix javax package	3 years ago
twosom	3d7e22a4e9	Add test to SimpleUrlAuthenticationSuccessHandlerTests	3 years ago
twosom	abd51f7b63	Polished DefaultLoginPageGeneratingFilterTests Validation Closes gh-12694	3 years ago
Josh Cummings	9bba1a1c6b	Propagate Variables in And and OrRequestMatcher Closes gh-12847	3 years ago
Marcus Da Coregio	84cca81edf	Use HttpSessionSecurityContextRepository by default in SwitchUserFilter Closes gh-12834	3 years ago
Josh Cummings	c06e604278	Address Observability Thread Safety Closes gh-12829	3 years ago
twosom	28d353d731	Extract errorMessage from generateLoginPageHtml	3 years ago
twosom	ae23e3f5f4	Use instanceof pattern matching in initAuthFilter	3 years ago
twosom	99eacf2f0b	Change private static method to private methods	3 years ago
Josh Cummings	8ca726f4fa	Specify query string Issue gh-12665	3 years ago
Josh Cummings	0d4c619648	Include continue in query string Closes gh-12665	3 years ago
twosom	073dab3bf6	Refactor SavedCookie for Cookie's deprecated method Closes gh-12454	3 years ago
twosom	a855b33535	fix typo in RememberMeAuthenticationFilter	3 years ago
Steve Riesenberg	c306df9b46	Add XorCsrfChannelInterceptor Issue gh-12378	3 years ago
Josh Cummings	879770a0f6	Polish AbstractAuthenticationTargetUrlHandler Issue gh-12344	3 years ago
Dayan Kodippily	6b8a778da8	Rework determineTargetUrl for Readability Closes gh-12344	3 years ago
Dayan Kodippily	58e948a781	Test AbstractAuthenticationTargetUrlRequestHandler Issue gh-12344	3 years ago
Steve Riesenberg	62b58d2c92	Polish gh-12530	3 years ago
Onur Kagan Ozcan	c77c76e722	Relax final modifiers on AbstractRememberMeServices methods Closes gh-12145	3 years ago
Josh Cummings	4d2dab9b6b	Lookup Parent Observation Closes gh-12524	3 years ago
Steve Riesenberg	4e80338a9b	Polish gh-12466	3 years ago
Wellington Domiciano	2c8854bb7f	Adjusts setRequestHandler javadoc in CsrfFilter Adjusts setRequestHandler method javadoc in CsrfFilter class to reflect changes in 6.0. In 6.0, the default CsrfTokenRequestHandler changed to XorCsrfTokenRequestAttributeHandler, however, the javadoc for the setRequestHandler method still said it was CsrfTokenRequestAttributeHandler. This change adjusts the information to make it more accurate, because, although XorCsrfTokenRequestAttributeHandler is a subclass of CsrfTokenRequestAttributeHandler, the behavior is quite different. Closes gh-12464	3 years ago
Marcus Da Coregio	ffdb397830	Save the SecurityContext when switching user Closes gh-12504	3 years ago
Josh Cummings	c308e4665a	Polish Event Name Provide a name with no spaces separate from the human-friendly one with spaces. Closes gh-12490	3 years ago
Wellington Domiciano	27b3f4d403	Adjusts setRequestHandler javadoc in CsrfWebFilter Adjusts setRequestHandler method javadoc in CsrfWebFilter class to reflect changes in 6.0. In 6.0, the default ServerCsrfTokenRequestHandler changed to XorServerCsrfTokenRequestAttributeHandler, however, the javadoc for the setRequestHandler method still said it was ServerCsrfTokenRequestAttributeHandler. This change adjusts the information to make it more accurate, because, although XorServerCsrfTokenRequestAttributeHandler is a subclass of ServerCsrfTokenRequestAttributeHandler, the behavior is quite different. Closes gh-12465	3 years ago
Marcus Da Coregio	99d6d21554	Apply SecurityContextHolderFilter to all dispatcher types Closes gh-11962	3 years ago
Josh Cummings	886d1ffec2	Remove Deprecated Usage Issue gh-12086	3 years ago
Josh Cummings	8ef2fc3837	Format Issue gh-12086	3 years ago
Alex Montoya	8717b7544a	Perform JUnit 5 clean up tasks - For CookieCsrfTokenRepositoryTests and CookieServerCsrfTokenRepositoryTests Issue gh-12086	3 years ago
Alex Montoya	b79ba89eeb	Add setCookieCustomizer to csrf token repository - Mark setCookieHttpOnly, setCookieDomain, setCookieMaxAge and setSecure as deprecated. - Add the method setCookieCustomizer which allows to set properties to the ResponseCookieBuilder without having to add new setter methods. Closes gh-12086	3 years ago
Josh Cummings	701f754e37	Cast FilterChainObservationContext Safely Closes gh-12268	3 years ago
Steve Riesenberg	fd547321e8	Default to XorCsrfTokenRequestAttributeHandler As of gh-11960, Xor CSRF tokens are the default in 6.0. This commit makes CsrfAuthenticationStrategy consistent with CsrfFilter. Issue gh-11960 Closes gh-12235	3 years ago
Steve Riesenberg	2ed7cff643	Check for existing token before clearing Closes gh-12236	3 years ago
Josh Cummings	24860d9fb0	Observe Filter Start and Stop Issue gh-11911	3 years ago
Josh Cummings	e08ed89403	Polish Span and Meter Names Closes gh-12156	3 years ago
Marcus Da Coregio	063f06e7bf	Register FilterChainProxy for all dispatcher types Closes gh-12180	3 years ago
Steve Riesenberg	57b163bb78	Polish gh-12141	3 years ago
Marcus Da Coregio	2a261e0583	Add Jakarta WebSocket 2.1 test dependency to spring-security-web Issue gh-12148	3 years ago
Marcus Da Coregio	3b5d19c8a4	Adapt to Servlet API 6 changes and support Jakarta WebSocket 2.1 Closes gh-12146 Closes gh-12148	3 years ago
Steve Riesenberg	6b0ed0205b	Re-generate tokens in CookieCsrfTokenRepository Fixes support for re-generating tokens within a request such as when CsrfAuthenticationStrategy removes a null token and saves an empty cookie value on the response. Closes gh-12141	3 years ago
Marcus Da Coregio	1f481aafff	Fix AuthorizationFilter incorrectly extending OncePerRequestFilter Closes gh-12102	3 years ago

1 2 3 4 5 ...

1569 Commits (e5fcf1ebcf53e9be4385f04438694648c00bbd5e)