spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	0f58620643	Add AspectJ AuthorizationManager Support Closes gh-11326	3 years ago
Josh Cummings	e990174c89	Polish ReactiveMethodSecurity Support - Changed annotation property to useAuthorizationManager to match related XML support - Moved support found in bean post-processors back into interceptors directly. This reduces the number of components to maintain and simplifies ongoing support - Added @Deprecated annotation to indicate that applications should use AuthorizationManagerBeforeReactiveMethodInterceptor and AuthorizationManagerAfterReactiveMethodInterceptor instead. While true that the new support does not support coroutines, the existing coroutine support is problematic since it cannot be reliably paired with other method interceptors - Moved expression handler configuration to the constructors - Constrain all method security interceptors to require publisher types - Use ReactiveAdapter to check for single-value types as well Issue gh-9401 Polish	3 years ago
Josh Cummings	6fd23d2567	Add MockMethodInvocation Constructor Issue gh-9401	3 years ago
Evgeniy Cheban	cbb4f40f0c	ReactiveAuthorizationManager + Reactive Method Security Closes gh-9401	3 years ago
Rob Winch	2fb625db84	Remove mockito deprecations Issue gh-11748	3 years ago
Marcus Da Coregio	38c05ad31c	Add native hints for basic @PostAuthorize usage Closes gh-11737	3 years ago
Marcus Da Coregio	bd5a05dcdd	Polish CoreSecurityRuntimeHints	3 years ago
Evgeniy Cheban	c4b0e9bd74	Add remaining methods from ExpressionUrlAuthorizationConfigurer to AuthorizeHttpRequestsConfigurer - Added fullyAuthenticated - Added rememberMe - Added anonymous Closes gh-11360	4 years ago
Evgeniy Cheban	400cd60368	Add remaining methods from ExpressionUrlAuthorizationConfigurer to AuthorizeHttpRequestsConfigurer - Added fullyAuthenticated - Added rememberMe - Added anonymous Closes gh-11360	4 years ago
Josh Cummings	20def5e25d	Consolidate ExpressionAuthorizationDecision Issue gh-11493	4 years ago
Josh Cummings	8d0084842b	Add MethodExpressionAuthorizationManager Closes gh-11493	4 years ago
Josh Cummings	9b43316f4d	Polish InterceptMethodsBeanDefinitionDecorator Issue gh-11328	4 years ago
Josh Cummings	db25a37320	Consolidate ExpressionAuthorizationDecision Issue gh-11493	4 years ago
Josh Cummings	281814a955	Add MethodExpressionAuthorizationManager Closes gh-11493	4 years ago
Josh Cummings	51475e2583	Polish InterceptMethodsBeanDefinitionDecorator Issue gh-11328	4 years ago
Marcus Da Coregio	7abea4a964	Add RuntimeHints suffix for RuntimeHintsRegistrar Closes gh-11497	4 years ago
Joe Grandja	177baba8c9	RuntimeHintsPredicates moved to predicate package	4 years ago
Rob Winch	4a5c0ac904	Fix Formatting Issue gh-11474	4 years ago
Rob Winch	03cd9920aa	DelegatingSecurityContextTaskScheduler implements new Methods Closes gh-11474	4 years ago
Marcus Da Coregio	a87f7aa2e1	Polish CoreSecurityHintsTests Use ParameterizedTest to simplify repetitive test setup Issue gh-11431	4 years ago
Josh Cummings	459003e1b3	Use SecurityContextHolderStrategy for Context Propagation Issue gh-11060	4 years ago
Josh Cummings	38cb6c3172	Use SecurityContextHolderStrategy for Context Propagation Issue gh-11060	4 years ago
Josh Cummings	b316a3217b	Add SecurityContextHolderStrategy for Jaas Issue gh-11060 Issue gh-11061	4 years ago
Josh Cummings	ee66850aed	Add SecurityContextHolderStrategy for Jaas Issue gh-11060 Issue gh-11061	4 years ago
Josh Cummings	ec1bfa12f0	Use SecurityContextHolderStrategy for Database Support Issue gh-11060	4 years ago
Josh Cummings	52d8e10ace	Use SecurityContextHolderStrategy for Database Support Issue gh-11060	4 years ago
Josh Cummings	7a9c873d7d	Add SecurityContextHolderStrategy to Method Security Issue gh-11060	4 years ago
Josh Cummings	25c74896d1	Add SecurityContextHolderStrategy to Method Security Issue gh-11060	4 years ago
Marcus Da Coregio	a8c30f79e6	Add Core, MVC and MethodSecurity runtime hints Closes gh-11431	4 years ago
Rob Winch	d32f74d19d	SecurityContextHolder Deferred SecurityContext Closes gh-10913	4 years ago
Rob Winch	b6d43e58c0	SecurityContextHolder Deferred SecurityContext Closes gh-10913	4 years ago
Josh Cummings	a31a99b591	Add SecurityContextHolderStrategy to Default Components Issue gh-11060	4 years ago
Josh Cummings	31e25b115e	Add SecurityContextHolderStrategy to Default Components Issue gh-11060	4 years ago
Marcus Da Coregio	4c2401a576	Revert "Make source code compatible with JDK 8" This reverts commit `60ed3602f6`.	4 years ago
Evgeniy Cheban	5eadcba7d1	Add RoleHierarchy to AuthorityAuthorizationManager Added roleHierarchy field to AuthorityAuthorizationManager that defaults to NullRoleHierarchy along with setter method to override. Closes gh-11304	4 years ago
Evgeniy Cheban	d557d2d0eb	Add RoleHierarchy to AuthorityAuthorizationManager Added roleHierarchy field to AuthorityAuthorizationManager that defaults to NullRoleHierarchy along with setter method to override. Closes gh-11304	4 years ago
James	d124fa2858	Fix typo in comment for changePassword method	4 years ago
Evgeniy Cheban	5540bbcf0b	createEvaluationContext should defer lookup of Authentication - Added createEvaluationContext method that accepts Supplier<Authentication> - Refactored classes that use EvaluationContext to use lazy initialization of Authentication Closes gh-9667	4 years ago
Evgeniy Cheban	362f15534e	createEvaluationContext should defer lookup of Authentication - Added createEvaluationContext method that accepts Supplier<Authentication> - Refactored classes that use EvaluationContext to use lazy initialization of Authentication Closes gh-9667	4 years ago
Evgeniy Cheban	2b4794475e	Polish gh-11188	4 years ago
Evgeniy Cheban	3f861f7f20	Polish gh-11188	4 years ago
Evgeniy Cheban	e01b1e7f38	Polish gh-11188	4 years ago
Marcus Da Coregio	806e05855c	Replace removed context-related operators Closes gh-11194	4 years ago
Evgeniy Cheban	dbd96a9e3f	Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager Closes gh-11188	4 years ago
Evgeniy Cheban	9f669c5e3c	Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager Closes gh-11188	4 years ago
Evgeniy Cheban	89019fb340	Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager Closes gh-11188	4 years ago
Evgeniy Cheban	286e95893a	@EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy Removed proxy unwrapping in case of resolving Method Security annotations, this cause an issue when interfaces which are implemented by the proxy was skipped, resulting in a missing security checks on those methods. Closes gh-11175	4 years ago
Evgeniy Cheban	66bbfc7a50	@EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy Removed proxy unwrapping in case of resolving Method Security annotations, this cause an issue when interfaces which are implemented by the proxy was skipped, resulting in a missing security checks on those methods. Closes gh-11175	4 years ago
Evgeniy Cheban	9193e46800	@EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy Removed proxy unwrapping in case of resolving Method Security annotations, this cause an issue when interfaces which are implemented by the proxy was skipped, resulting in a missing security checks on those methods. Closes gh-11175	4 years ago
Josh Cummings	0e9228d10a	Prepare for Spring Security 5.8	4 years ago

1 2 3 4 5 ...

2586 Commits (e8184d1b763e7d76770d4dc04b8a3d013f60cb8d)