Josh Cummings
ed02ef9773
Add Test for Malformed Scope
...
Fixes gh-7563
6 years ago
Rob Winch
badb0a08c6
Fix exploits indendation
...
Issue gh-2567
6 years ago
Rob Winch
2827af15e0
Document Reactive CSRF Support
...
Fixes gh-6487
6 years ago
Rob Winch
635f7e1edd
CsrfWebFilter supports multipart/form-data
...
Fixes gh-7576
6 years ago
Josh Cummings
387f765595
Catch Malformed BearerTokenError Descriptions
...
Fixes gh-7549
6 years ago
Vitalii Mahas
0ac5f5456f
Fix typo 'is' -> 'if' in javadoc
6 years ago
Filip Hanik
4489163163
Use Spring Boot configuration for saml2Login()
...
Fixes gh-7521
https://github.com/spring-projects/spring-security/issues/7521
6 years ago
Filip Hanik
5345aecd7f
Align RSocket sample with new Spring Boot configuration
6 years ago
Filip Hanik
bcaa8bc7e9
Upgrade to Spring Boot 2.2.0.RELEASE
6 years ago
Rob Winch
9b4c170af0
Create Exploits Section for Reactive
...
Issue gh-2567
6 years ago
Rob Winch
bbda755a07
Fix Servlet exploits leveloffset
...
Fixes gh-2567
6 years ago
Rob Winch
08fb9c960b
Fix invalid ids
...
Issue gh-2567
6 years ago
Rob Winch
55a98b9969
CSRF Documentation
...
Issue gh-2567
6 years ago
Rob Winch
02aaba37cd
Documentation TOC on the left
...
This better aligns with other documentation
Issue gh-2567
6 years ago
Eleftheria Stein
de7cbc82b5
Clarify in Javadoc that expressionHandler should not be null
...
Fixes: gh-2665
6 years ago
Filip Hrisafov
b9f122230b
Align javadoc of continueFilterChainOnUnsuccessfulAuthentication with actual behaviour
6 years ago
Phil Clay
8584b12c8d
Make saveAuthorizedClient save the authorized client
...
Previously, saveAuthorizedClient never actually saved the authorized
client, because it ignored the Mono<Void> returned from
authorizedClientRepository.saveAuthorizedClient.
Now, it does not ignore the Mono<Void> returned from
authorizedClientRepository.saveAuthorizedClient, and includes it in
the stream, and therefore it will properly save the authorized client.
Fixes gh-7546
6 years ago
Michel Palourdio
d26f40f062
DefaultRedirectStrategy should redirect to root if the context-relative URL does not contain the context-path.
6 years ago
Joe Grandja
1c53a7859b
Fix access token expiry check with clock skew
...
Fixes gh-7511
6 years ago
Tadaya Tsuyukubo
62c7de03c3
Add RequestMatcher to AbstractPreAuthenticatedProcessingFilter
...
Moved the existing auth check logic to the matcher.
Issue: gh-5928
6 years ago
Giovanni Lovato
63607ee213
Add configurable mapping function to map authorities
6 years ago
Eleftheria Stein
2d26be9446
Remove redundant public modifier
7 years ago
Markus Öllinger
2cc05550fc
rename comparison method to isGranted and add test
7 years ago
Markus Öllinger
a4ea989e9c
remove trailing whitespace
7 years ago
Markus Öllinger
a449d6c316
extract permission mask comparison for subclasses to override
7 years ago
Everett Irwin
6ad328f909
Add Clock Skew Tests
...
Fixes gh-7511
Co-authored-by: Isaac Cummings <josh.cummings+zac@gmail.com>
7 years ago
Eleftheria Stein
264daec697
Test context relative URL with multiple schemes
7 years ago
Isaac Cummings
1081066d60
Polish AuthorityUtils
...
Changed parameter name to authorities
Added JavaDoc
Fixes gh-4805
Co-authored-by: Everett Irwin <everettirwin77@gmail.com>
7 years ago
Ramon Pires da Silva
0387723334
fix webflux samples documentation path
...
The documentation of webflux integration sample projects was pointing to the `javaconfig` instead of `boot` folder.
7 years ago
Roland Weisleder
f4b9abdbb1
Fix typo in Javadoc
7 years ago
Brendt Lucas
8ebfba3019
Support configuration of protocol binding for authentication requests
7 years ago
Filip Hanik
971ae346c5
Update to Spring Data Moore-RELEASE
7 years ago
Rob Winch
0feaf9bf6f
Disable force milestone repository
...
We will be using spring boot release for our next release, so we
do not need to force milestones now.
7 years ago
Rob Winch
b8beee97a8
Next development version
7 years ago
Rob Winch
b7d97ca077
Release 5.2.0.RELEASE
7 years ago
Rob Winch
0d088b581b
Allow milestone for Boot version
7 years ago
Filip Hanik
4113e79aa3
Upgrade Spring Boot to 2.2.0.M6
7 years ago
Filip Hanik
8c4252681e
Upgrade rsocket to 1.0.0-RC5 without BOM
7 years ago
Filip Hanik
cdeeb27b51
Upgrade Spring Data to Lovelace-SR11
7 years ago
Filip Hanik
9393017e3f
Upgrade Project Reactor to Dysprosium-RELEASE
7 years ago
Filip Hanik
09c29d286a
Upgrade Spring Framework to 5.2.0.RELEASE
7 years ago
Rob Winch
b29106ea31
Use deamon thread for Schedulers.newParallel
...
Fixes gh-7492
7 years ago
Rob Winch
1bf0e70bd0
Revert "Dispose default Scheduler"
...
This reverts commit 39600b901f .
7 years ago
Filip Hanik
8bc3ad16ef
SAML 2 Login - Documentation
...
Fixes gh-7472
https://github.com/spring-projects/spring-security/issues/7472
7 years ago
Rob Winch
fc8a0184b0
Polish Dispose default Scheduler
7 years ago
Rob Winch
e0414e5cbe
Merge pull request #7493 from robotmrv/gh-7492
...
Dispose default Scheduler
7 years ago
Rob Winch
3051a79188
Merge Add hasAnyAuthority method in AuthorizePayloadsSpec.Access
7 years ago
Rob Winch
a911f3d52f
Merge Add hasAnyRole method in AuthorizePayloadsSpec.Access
7 years ago
Rob Winch
3854afad61
Merge Add denyAll method in AuthorizePayloadsSpec.Access
7 years ago
Rob Winch
03e2efacf4
Add Hello RSocket Sample
...
Fixes gh-7504
7 years ago