spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	3469bcb822	Address Antora Warnings	3 years ago
Josh Cummings	e5fcf1ebcf	Revisit Request and Method Security Docs Issue gh-13088	3 years ago
Josh Cummings	76eba9bd0c	Add withIssuerLocation Closes gh-10309	3 years ago
Logan Kulinski	8ad91287d9	Fix Broken Link Closes gh-12824	3 years ago
Olivier Délèze	9535566f84	Update multitenancy.adoc The Java example at line 421 should use the injected `jwtValidator` and not from the current class referenced by `this. jwtValidator`.	3 years ago
Sellami	626e53d121	Fix: Replace tenantRepository with tenants	3 years ago
Rivaldi	01a37dd678	Fix typo (cherry picked from commit 20e89e3eca0823bfa329b5de80448bac1f5e0f30)	3 years ago
Ger Roza	8315545144	Update RP-Initiated Logout target URLs. The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs. Fixes: gh-12081	3 years ago
Marcus Da Coregio	ace8caa182	Remove mvcMatchers usage from docs Issue gh-11347	3 years ago
Steve Riesenberg	181ee7410b	Change default authority for oauth2Login() Previously, the default authority was ROLE_USER when using oauth2Login() for both OAuth2 and OIDC providers. * Default authority for OAuth2UserAuthority is now OAUTH2_USER * Default authority for OidcUserAuthority is now OIDC_USER Documentation has been updated to include this implementation detail. Closes gh-7856	3 years ago
Steve Riesenberg	355ef21117	Polish gh-11665	3 years ago
ch4mpy	1efb63387f	Add authentication converter for introspected tokens Adds configurable authentication converter for resource-servers with token introspection (something very similar to what JwtAuthenticationConverter does for resource-servers with JWT decoder). The new (Reactive)OpaqueTokenAuthenticationConverter is given responsibility for converting successful token introspection result into an Authentication instance (which is currently done by a private methods of OpaqueTokenAuthenticationProvider and OpaqueTokenReactiveAuthenticationManager). The default (Reactive)OpaqueTokenAuthenticationConverter, behave the same as current private convert(OAuth2AuthenticatedPrincipal principal, String token) methods: map authorities from scope attribute and build a BearerTokenAuthentication. Closes gh-11661	3 years ago
Rob Winch	a5069d7e35	Fix Add @Configuration to @Enable*Security Usage Issue gh-6613	3 years ago
Joshua Sattler	040111ae9e	Remove Configuration meta-annotation from Enable* annotations Before, Spring Security's @Enable* annotations were meta-annotated with @Configuration. While convenient, this is not consistent with the rest of the Spring projects and most notably Spring Framework's @Enable annotations. Additionally, the introduction of support for @Configuration(proxyBeanMethods=false) in Spring Framework provides a compelling reason to remove @Configuration meta-annotation from Spring Security's @Enable annotations and allow users to opt into their preferred configuration mode. Closes gh-6613 Signed-off-by: Joshua Sattler <joshua.sattler@mailbox.org>	3 years ago
André Luis Gomes	aca3fc2412	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
André Luis Gomes	0c31cb21dc	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
André Luis Gomes	24701b547f	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
André Luis Gomes	b9acdd5058	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
Pascal Verdage	b71d9bfdc2	Fix typo	4 years ago
Pascal Verdage	ed8887e0fc	Fix typo	4 years ago
Steve Riesenberg	f0168c6c27	Add support for customizing claims in JWT Client Assertion Closes gh-9855	4 years ago
Steve Riesenberg	428216b322	Add support for customizing claims in JWT Client Assertion Closes gh-9855	4 years ago
Joe Grandja	54b033078b	Allow configuring PKCE for confidential clients Closes gh-6548	4 years ago
Joe Grandja	a2ffc88294	Allow configuring PKCE for confidential clients Closes gh-6548	4 years ago
Yuriy Savchenko	f64181ab41	Update docs to use multi-tenancy Closes gh-10572	4 years ago
Yuriy Savchenko	77ba94e1db	Update docs to use multi-tenancy Closes gh-10572	4 years ago
Eleftheria Stein	4142f06259	Replace WebSecurityConfigurerAdapter with SecurityFilterChain in docs Closes gh-10003	4 years ago
Eleftheria Stein	4492e5b667	Replace WebSecurityConfigurerAdapter with SecurityFilterChain in docs Closes gh-10003	4 years ago
Joe Grandja	525f40490c	Allow Jwt assertion to be resolved Closes gh-9812	4 years ago
Joe Grandja	214cfe807e	Allow Jwt assertion to be resolved Closes gh-9812	4 years ago
Jeff Maxwell	32d79f3f4e	Fix setJWTClaimSetJWSKeySelector Typo Closes gh-10504	4 years ago
Jeff Maxwell	b7cc667d21	Fix setJWTClaimSetJWSKeySelector Typo Closes gh-10504	4 years ago
Jeff Maxwell	879b2d089f	Fix setJWTClaimSetJWSKeySelector Typo Closes gh-10504	4 years ago
Jeff Maxwell	088a24cf59	Fix jwtDecoder Documentation Usage Closes gh-10505	4 years ago
Jeff Maxwell	3fb1565cc0	Fix jwtDecoder Documentation Usage Closes gh-10505	4 years ago
Jeff Maxwell	5913501e1a	#10505 Fix jwtDecoder Fixed jwtDecoder(JWTProcessor jwtProcessor, OAuth2TokenValidator<Jwt> jwtValidator)	4 years ago
Steve Riesenberg	73e1506e5e	Consistency update for servlet docs	4 years ago
Steve Riesenberg	ab794bf67a	Consistency update for servlet docs	4 years ago
Josh Cummings	b60020a40c	Use authorizeHttpRequests in Docs Issue gh-8900	4 years ago
Josh Cummings	812d6f7b18	Use authorizeHttpRequests in Docs Issue gh-8900	4 years ago
Josh Cummings	7708418fae	Separate OAuth 2.0 Login Servlet Docs Issue gh-10367	4 years ago
Josh Cummings	82696918ae	Separate OAuth 2.0 Client Servlet Docs Issue gh-10367	4 years ago
Steve Riesenberg	e350c8a852	Document parameters converter in oauth2 client servlet docs Closes gh-10467	4 years ago
Steve Riesenberg	efa2fab061	Document authentication helper method in WebClient integration Closes gh-10120	4 years ago
Josh Cummings	76ebbb84f7	Separate Namespace Servlet Docs Issue gh-10367	4 years ago
Josh Cummings	3db13de1e2	Separate OAuth 2.0 Login Servlet Docs Issue gh-10367	4 years ago
Josh Cummings	8c508d6afa	Separate OAuth 2.0 Client Servlet Docs Issue gh-10367	4 years ago
Steve Riesenberg	b27c7e17f4	Document parameters converter in oauth2 client servlet docs Closes gh-10467	4 years ago
Steve Riesenberg	49f3c0ce53	Document authentication helper method in WebClient integration Closes gh-10120	4 years ago
Josh Cummings	869e379099	Separate Namespace Servlet Docs Issue gh-10367	4 years ago

1 2

72 Commits (e7fa34008b01b2ec56b08bb94c131d4bfbd313a1)