DingHao
68d814e042
Polish ExpressionTemplateSecurityAnnotationScanner
2 years ago
Jonny Coddington
b90851d968
Improve Error Messages for PasswordEncoder
...
Closes gh-14880
Signed-off-by: Jonny Coddington <bottlerocketjonny@protonmail.com>
2 years ago
Josh Cummings
1760e7fac8
Cache Annotation Lookups
...
Closes gh-15799
2 years ago
Josh Cummings
d194724a04
Skip Proxying If Already Proxied
...
Issue gh-15709
2 years ago
Josh Cummings
6f5e103dec
Use AnnotationTemplateExpressionDefaults in Reactive
...
Issue gh-15097
2 years ago
Marcus Hert Da Coregio
0618d4e03f
Provide Runtime Hints for Beans used in Pre/PostAuthorize Expressions
...
Closes gh-14652
2 years ago
Josh Cummings
fd5d03d384
Add AuthorizeReturnObject Hints
...
Closes gh-15709
2 years ago
Josh Cummings
da38b13a17
Add SecurityHintsRegistrar
...
An interface for registering hints based on Security infrastructure
beans.
Closes gh-15772
2 years ago
Josh Cummings
927de0d3b8
Use AuthorizationProxy Interface for Class Proxying
...
Issue gh-15747
2 years ago
Marcus Hert Da Coregio
2ff29dc229
Throw AuthorizationDeniedException when AuthorizationResult is available
...
Closes gh-15706
2 years ago
Josh Cummings
fce2eb1531
Add AuthorizationProxy Interface
...
Closes gh-15747
2 years ago
Marcus Hert Da Coregio
a0e6c17512
Do not log exception if CasJackson2Module is not present
...
Closes gh-15749
2 years ago
DingHao
5c20505b0e
Support Class Attributes in Annotation Template Processing
...
Closes gh-15721
2 years ago
Josh Cummings
c53ee19a83
Polish Abstract Deserializer
2 years ago
hyunmin0317
fee79ccb51
Abstract Jackson2 Set and List Deserializers
2 years ago
Niels Basjes
2dc787a573
Fix adding more implied roles in the RoleHierarchy Builder.
...
Closes gh-15717
Signed-off-by: Niels Basjes <niels@basjes.nl>
2 years ago
Marcus Hert Da Coregio
00e4a8fb54
Add support for One-Time Token Login
...
Closes gh-15114
2 years ago
DingHao
fd05c5ad76
Remove Advised Methods from Authorization Proxy Objects
...
Closes gh-15561
2 years ago
Josh Cummings
626610a975
Polish Annotation API
...
Rename to a class that isn't focused on the synthesis implementation detail.
Also add Security to the front of the name to clarify that it is only intended
for security annotations, reminiscent of SecurityMetadataSource.
Refine method signatures to better articulate supported use cases.
Issue gh-15286
2 years ago
Josh Cummings
cc6de8fa5d
Hide MergedAnnotation Implementation Details
...
Issue gh-15286
2 years ago
DingHao
84fc5a70ee
Fix variable targetClassToUse not used
...
Closes gh-15567
2 years ago
Josh Cummings
1118b0ec63
Defer Sorting AuthorizationAdvisors in addAdvisor
...
Issue gh-15658
2 years ago
Josh Cummings
0cab7c8f15
Defer Sorting AuthorizationAdvisors
...
Invoking AnnotationAwareOrderComparator#sort while the
AuthorizationAdvisors are still being computed causes those
advisors to be eagerly instantiated, making components
like ObservationRegistry ineligible for post processing.
This commit defers the sorting of the advisors until
after they are all fully instantiated and available in
the application context.
Closes gh-15658
2 years ago
Josh Cummings
f398be793d
Simplify AuthorizationAdvisorProxyFactory Configuration
...
Closes gh-15497
2 years ago
Daniel Garnier-Moiroux
79fb0113c8
Bump io-spring-javaformat from 0.0.42 to 0.0.43
...
Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43)
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43)
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
---
Manual updates:
- Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST
be used together
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Daniel Garnier-Moiroux
2caf1fb6b4
Bump io-spring-javaformat from 0.0.42 to 0.0.43
...
Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43.
Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43)
Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43
- [Release notes](https://github.com/spring-io/spring-javaformat/releases )
- [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43)
---
updated-dependencies:
- dependency-name: io.spring.javaformat:spring-javaformat-checkstyle
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin
dependency-type: direct:production
update-type: version-update:semver-patch
...
---
Manual updates:
- Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST
be used together
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Rob Winch
13125d0745
Add AuthorizationDeniedException(String)
...
Closes gh-15607
2 years ago
Josh Cummings
59ec1f6480
Revert "Polish AuthorizationAdvisorProxyFactory advisor configuration"
...
This commit had some unintended consequences when the advisor
interceptor was published in a Spring Boot application. As such,
15497 will be reopened to investigate. In the meantime, this commit
reverts the previous change so as to allow the build to pass.
Issue gh-15497
2 years ago
Josh Cummings
08b8b09066
Update Copyright
...
Issue gh-15286
2 years ago
Josh Cummings
e40c98e6d7
Deprecate PrePostTemplateDefaults
...
Since there is nothing specific to configuring pre/post
annotations, there is no need for the extra class.
If a need like this does arise in the future,
either AnnotationTemplateExpressionDefaults can be sub-
classed, or it can have introduced a Map field holding
custom properties.
Issue gh-15286
2 years ago
MrJovanovic13
6d657ea3da
InMemoryUserDetailsManager preserve user type
...
Closes gh-3192
2 years ago
MrJovanovic13
503d653cea
Add InMemoryUserDetailsManager tests
...
Tests added:
createUserWhenUserAlreadyExistsThenException
updateUserWhenUserDoesNotExistThenException
loadUserByUsernameWhenUserNullThenException
Issue gh-3192
2 years ago
Josh Cummings
34d964eb08
Default Handler Resolution to Reflection-Based
...
Closes gh-15496
2 years ago
Josh Cummings
de77e054fd
Default Handler Resolution to Reflection-Based
...
Closes gh-15496
2 years ago
Josh Cummings
02cca6f737
Polish AuthorizationAdvisorProxyFactory advisor configuration
...
Closes gh-15497
2 years ago
Josh Cummings
37a2812d1a
Mimic Annotation Fallback Logic
...
For backward compatibility, this commit changes the annotation traversal
logic to match what is found in PrePostAnnotationSecurityMetadataSource.
This reverts gh-13783 which is a feature that unfortunately regressess
pre-existing behavior like that found in gh-15352. As such, that
functionality has been removed.
Issue gh-15352
2 years ago
Josh Cummings
77bce14462
Polish Annotation Test
...
This new arrangement of the test better matches the class
hierarchy described by the original ticket.
Issue gh-13234
2 years ago
Josh Cummings
90335bd0a6
Polish Annotation Test
...
This test was made more effective by having it focus on the real
scenario of resolving annotations from the standpoint of a bean
2 years ago
Josh Cummings
f20ae1a71c
Revert gh-13783
...
This feature unfortunately regresses pre-existing behavior
like that found in gh-15352. As such, this functionality
has been removed.
Closes gh-15352
2 years ago
KyeongHoon Lee
4036e910c7
Add @FunctionalInterface to AuthenticationManager
2 years ago
Josh Cummings
c736e075c1
Add AnnotationSythesizer API
...
Closes gh-13234
Closes gh-13490
Closes gh-15097
2 years ago
Josh Cummings
e3438aa36a
Support AliasFor
...
Closes gh-15436
2 years ago
Josh Cummings
03bcc6776a
Correct Authorization Tests
...
Issue gh-9289
2 years ago
Josh Cummings
56c93afc66
Correct Tests About Conflicting Annotations
...
Issue gh-9289
2 years ago
Juliana Hachmann
9a714424d5
Adds missing translated messages for PT-BR
...
Partially fix #spring-projectsgh-9315
Adds Brazilian Portuguese translation missing for following messages in messages_pt_BR.properties;
- ExceptionTranslationFilter.insufficientAuthentication
- LdapAuthenticationProvider.badLdapConnection
- PersistentTokenBasedRememberMeServices.cookieStolen
2 years ago
Josh Cummings
aa9bf83c6d
Polish Exception Handling
...
Issue gh-15093
2 years ago
Blagoja Stamatovski
63f48167bd
Add Kotlin support to PreFilter and PostFilter annotations
...
Closes gh-15093
2 years ago
Hyeon Sung
742c95b1fc
Use instanceof Pattern Matching
2 years ago
MrJovanovic13
e932387714
fix docs error
...
Closes gh-14978
2 years ago
Marcus Hert Da Coregio
08f11f06ab
Revert unnecessary commits from main
...
Issue gh-15016
2 years ago