Rob Winch
3c7fb977fe
WebTestClientHtmlUnitDriverBuilder uses WebTestClient for localhost
...
Fixes gh-4815
8 years ago
Joe Grandja
426c034c01
OidcUserService uses custom userNameAttributeName
...
Fixes gh-4812
8 years ago
Joe Grandja
3661cb58d6
Polish oauth2Login sample integration test
...
Fixes gh-4811
8 years ago
Joe Grandja
aa9e057ba8
Fix CNF exception if oauth2-jose dependency not included
...
Fixes gh-4753
8 years ago
Joe Grandja
6775d9fdd8
OAuth2AccessTokenResponse should account for expires_in <= 0
...
Fixes gh-4810
8 years ago
Joe Grandja
1dac191b19
Remove custom security config from oauth2Login sample
...
Fixes gh-4808
8 years ago
Joe Grandja
cd9e712117
Remove GlobalAuthenticationConfigurerAdapter from oauth2Login sample
...
Fixes gh-4665
8 years ago
Joe Grandja
9098d1a726
Update to Spring Boot 2.0.0.M6
...
Fixes gh-4809
8 years ago
Joe Grandja
63e2db72ea
Add tests to oauth2-jose
...
Fixes gh-4806
8 years ago
Joe Grandja
473ac0e37c
Add tests to oauth2-client
...
Fixes gh-4299
8 years ago
Rob Winch
f2ccc53549
Add UserDetailsMapFactoryBean
...
Fixes gh-4804
8 years ago
Johnny Lim
99df632f24
Add missing @Override annotations
...
This commit also adds MissingOverrideCheck module to Checkstyle configuration.
8 years ago
Rob Winch
be0c6cde3d
Update to Reactor-Bismuth-SNAPSHOT
...
This may fix the hanging webflux-form build
Issue: gh-4803
8 years ago
Rob Winch
f1245059ff
Consistent Thymeleaf Version in Boot Samples
...
Issue gh-4802
8 years ago
Rob Winch
9d7802d71f
Configure logback for webflux-form
...
Issue gh-4802
8 years ago
Rob Winch
1728e21804
Update Thymeleaf
...
We can remove PatchThymleeafReactiveView now that it is fixed and released
in Thymeleaf.
Issue gh-4802
8 years ago
Rob Winch
75e77292cf
webflux-form sample
...
Fixes gh-4802
8 years ago
Rob Winch
adec62cdf2
EnableWebFluxSecurity creates CsrfRequestDataValueProcessor
...
Fixes gh-4762
8 years ago
Rob Winch
676020321e
Add reactive CsrfRequestDataValueProcessor
...
Fixes gh-4762
8 years ago
Rob Winch
7622826b69
WebSessionServerCsrfTokenRepository saves on getToken
...
Fixes gh-4801
8 years ago
Rob Winch
776364d403
ServerCsrfTokenRepository.saveToken return Mono<CsrfToken>
...
Fixes gh-4800
8 years ago
Rob Winch
3f18881493
Remove additional attribute name from CsrfWebFilter
...
Fixes gh-4799
8 years ago
Rob Winch
91e27c1422
Add slf4jDependencies to hellowebflux
...
Fixes gh-4798
8 years ago
Rob Winch
c7c84e0996
Fix CustomLoginPage test
...
Fixes gh-4797
8 years ago
Rob Winch
1506dcd413
SpringTestContext.getContext()
...
Add accessor method for SpringTestContext.getContext()
Fixes gh-4796
8 years ago
Joe Grandja
db35dc6c03
Add tests to oauth2-core
...
Fixes gh-4298
8 years ago
Rob Winch
d9abd2e443
User.UserBuilder only encodes once
...
Fixes gh-4794
8 years ago
Rob Winch
21aec19d42
Add FormLoginBuilder.serverAuthenticationSuccessHandler
...
Fixes: gh-4786
8 years ago
Rob Winch
1d4c7da1e1
Fix WebTestClientWebConnection for redirects
8 years ago
Craig Walls
06c4bffc5f
Use id field instead of name field for GitHub and Facebook providers.
...
Fixes gh-4764
8 years ago
Greg Turnquist
881cd0befb
Fix UsernamePasswordAuthenticationTokenMixin to handle null credentials/details
...
Resolves #4698
8 years ago
Rob Winch
82adf744f5
Polish Docs
8 years ago
Rob Winch
35758fc61f
Next Development Version 5.0.0.BUILD-SNAPSHOT
8 years ago
Rob Winch
e7ab2a697d
Release 5.0.0.RC1
8 years ago
Rob Winch
e95430fa36
Polish Reactive Method Security reference
...
Issue gh-4757
8 years ago
Rob Winch
d664ff2e26
Lookup HandlerMappingIntrospector from Bean
8 years ago
Joe Grandja
ef9cd76607
Polish oauth2
...
Fixes gh-4758
8 years ago
Rob Winch
8e6c726fb2
Add WebFlux to What's New 5.0
...
Fixes gh-4757
8 years ago
Joe Grandja
d435f149eb
Polish spring-security-oauth2-jose
...
Fixes gh-4755
8 years ago
Joe Grandja
511d702ee0
Remove JwtDecoderRegistry
...
Fixes gh-4754
8 years ago
Joe Grandja
727098d6c0
Fix NPE when configuring oauth2Login.loginPage
...
Fixes gh-4752
8 years ago
Rob Winch
5280ac40e9
WebMvcConfigurerAdapter->WebMvcConfigurer
...
Fixes gh-4612
8 years ago
Gajendra kumar
ec723952d5
principals and sessionIds should be set using constructor so that can be shared across node in cluster
...
As principals and sessionIds are set in class itself so one can't share user session count across nodes(Cluster). Using constructor for setting principals and sessionIds we can pass Cache map to constructor which can enable common session count in cluster otherwise user would be allowed to logged in with multiple sessions. There is no point keeping principals and sessionIds completely internal.
8 years ago
Kazuki Shimizu
3d5989dea4
Change a default realm name
...
Change a default realm name of Basic Authentication for XML namespace to 'Realm'.
Fixes gh-4220
8 years ago
Frank Pavageau
35706ad60a
Deserialize the principal in a neutral way
...
When the principal of the Authentication is an object, it is not necessarily
an User: it could be another implementation of UserDetails, or even a
completely unrelated type. Since the type of the object is serialized as a
property and used by the deserialization anyway, there's no point in
enforcing a stricter type.
8 years ago
Frank Pavageau
6fd9ff254b
Map values directly from the JSON nodes
...
Not only is it more efficient without converting to an intermediate String,
using JsonNode.toString() may not even produce valid JSON according to its
Javadoc (ObjectMapper.writeValueAsString() should be used).
8 years ago
SignleMR
a1fdb7dcb3
Update AbstractRememberMeServices.java
...
this file`s file encode is unkown,maybe is "Eddu Melendez"
8 years ago
Rob Winch
4295461830
ServerHttpSecurity extracts WebFilter from OrderedWebFilter
...
Fixes gh-4736
8 years ago
Jeremy Waters
832f5c39c1
SEC-3190: Add support for colons in remember-me token values
...
We have an issue where token strings that contain a colon break
the existing decoding strategy, which tokenizes on colons. so this
change urlencodes the individual tokens when creating the cookie
string; and urldecodes them decoding the cookie and extracting the
tokens. This also eliminates the need for existing code to deal with
openid tokens which contain urls, and thus colons.
8 years ago
Trygve Aasjord
8d717c62af
Pass username as second parameter for search filter.
...
Allows the username only (without domain) to be used in custom search filter like "sAMAccountName={1}",
in eg. situations where the userPrincipalName has a different suffix than domain.
Thanks to contributors in issue.
fixes gh-2448
8 years ago