spring-security

Commit Graph

Author	SHA1	Message	Date
Steve Riesenberg	eeb4574bb3	Add AuthorizationManagerFactory Signed-off-by: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com>	6 months ago
blake_bauman	a4f813ab29	Support Multiple ServerLogoutHandlers This commit adds support to ServerHttpSecurity for registering multiple ServerLogoutHandlers. This is handy so that an application does not need to re-supply any handlers already configured by the DSL. Signed-off-by: blake_bauman <blake_bauman@apple.com>	6 months ago
Rob Winch	686f8398dd	Merge branch '6.5.x'	6 months ago
Rob Winch	653f22d4a1	Merge branch '6.4.x' into 6.5.x	6 months ago
Rob Winch	f54c293078	Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.9	6 months ago
Rob Winch	34fccf45c2	Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE	6 months ago
Rob Winch	f840ee06eb	Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.28.Final	6 months ago
Rob Winch	8429c23108	Bump io.micrometer:micrometer-observation from 1.14.9 to 1.14.10	6 months ago
Rob Winch	97f3567702	Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.28.Final	6 months ago
dependabot[bot]	2cfdcb9d95	Bump org-opensaml5 from 5.1.5 to 5.1.6 Bumps `org-opensaml5` from 5.1.5 to 5.1.6. Updates `org.opensaml:opensaml-saml-api` from 5.1.5 to 5.1.6 Updates `org.opensaml:opensaml-saml-impl` from 5.1.5 to 5.1.6 --- updated-dependencies: - dependency-name: org.opensaml:opensaml-saml-api dependency-version: 5.1.6 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: org.opensaml:opensaml-saml-impl dependency-version: 5.1.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
dependabot[bot]	3c344ff491	Bump com.webauthn4j:webauthn4j-core Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.29.5.RELEASE to 0.29.6.RELEASE. - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml) - [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.5.RELEASE...0.29.6.RELEASE) --- updated-dependencies: - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.29.6.RELEASE dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	6 months ago
Josh Cummings	f30cc9c5a9	Update to PropertySourcesPlaceholderConfigurer This commit replaces deprecated usage of PropertyPlaceholderConfigurer in favor of PropertySourcesPlaceholderConfigurer	6 months ago
Josh Cummings	c64b086878	Add SecurityAssertions This commit introduces a simple, internal test API for verifying aspects of an Authentication, like its name and authorities. Closes gh-17844	7 months ago
Josh Cummings	de10e08348	Make withRoles Check Only Roles This commit clarifies the semantics of withRoles, which is to check the role-based authorities in an authentication. Closes gh-17843	7 months ago
Josh Cummings	bd119ac411	Implement Equals and HashCode Internally, RequestMatcher is sometimes used as a key to a HashMap. Accordingly, each implementation should implement equals and hashCode. Closes gh-17842	7 months ago
Rob Winch	24ffda28d8	Fixes for webauthn tests after JSpecify Issue gh-17839	7 months ago
Rob Winch	6a84f96930	Enable Null checking in spring-security-test via JSpecify Closes gh-17840	7 months ago
Rob Winch	194be8ffb6	Checkstyle fixes for webauthn JSpecify Issue gh-17839	7 months ago
Rob Winch	47b4b155da	Add security-nullability to webauthn Issue gh-17839	7 months ago
Rob Winch	0a991a91ce	Enable Null checking in spring-security-webauthn via JSpecify Closes gh-17839	7 months ago
dependabot[bot]	d2e934ca54	Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.28.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.26.Final to 6.6.28.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.28/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.26...6.6.28) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.28.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	7 months ago
dependabot[bot]	fee4d08de3	Bump com.webauthn4j:webauthn4j-core Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.29.5.RELEASE to 0.29.6.RELEASE. - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml) - [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.5.RELEASE...0.29.6.RELEASE) --- updated-dependencies: - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.29.6.RELEASE dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	7 months ago
Josh Cummings	3dbcf266e9	Merge branch '6.5.x'	7 months ago
Josh Cummings	eeb67650ee	Deprecate RequiresChannelDsl Issue gh-16680	7 months ago
dependabot[bot]	b4fc01194f	Bump org.hibernate.orm:hibernate-core from 6.6.23.Final to 6.6.28.Final Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.23.Final to 6.6.28.Final. - [Release notes](https://github.com/hibernate/hibernate-orm/releases) - [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.28/changelog.txt) - [Commits](https://github.com/hibernate/hibernate-orm/compare/6.6.23...6.6.28) --- updated-dependencies: - dependency-name: org.hibernate.orm:hibernate-core dependency-version: 6.6.28.Final dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	7 months ago
Josh Cummings	3534b74945	Replace InteractiveAuthenticationSuccessEvent 7.0.x Sample Given that `7e3bf9662c` changes the InteractiveAuthenticationSuccessEvent serialization sample, this commit syncs up the 7.0.x version to match. Closes gh-16276	7 months ago
Josh Cummings	dc0ab4c805	Merge branch '6.5.x'	7 months ago
Josh Cummings	c982753d46	Replace InteractiveAuthenticationSuccessEvent 6.5.x Sample Given that `7e3bf9662c` changes the InteractiveAuthenticationSuccessEvent serialization sample, this commit syncs up the 6.5.x version to match. Issue gh-16276	7 months ago
Fridolin Jackstadt	910df479be	Provider Default Timeouts For JWK Retrieval Issue gh-14269 Signed-off-by: Fridolin Jackstadt <fridolin.jackstadt@unic.com>	7 months ago
Rob Winch	9866435946	Fix security-nullability plugin in taglibs Issue gh-17828	7 months ago
Rob Winch	5370f1190f	Enable Null checking in spring-security-taglibs via JSpecify Closes gh-17828	7 months ago
Rob Winch	f13d8d5c75	Fix Nullability in WebInvocationPrivilegeEvaluator Issue gh-17535	7 months ago
Rob Winch	1216ee598f	Enable Null checking in spring-security-rsocket via JSpecify Closes gh-16882	7 months ago
Rob Winch	a4a4908d71	Enable Null checking in spring-security-cas via JSpecify Closes gh-16882	7 months ago
Josh Cummings	0ff9f10696	Merge branch '6.4.x' into 6.5.x	7 months ago
Josh Cummings	7e3bf9662c	Polish InteractiveAuthenticationSuccessEvent Sample The sample better matches a value that would be used in the constructor Issue gh-16276	7 months ago
Rob Winch	be64c67af5	Enable Null checking in spring-security-web via JSpecify Closes gh-16882	7 months ago
Rob Winch	a58f3282d9	Fix config/src/test/kotlin nullability for web Issue gh-17535	7 months ago
Rob Winch	c2ba662b91	Enable Null checking in spring-security-web via JSpecify Closes gh-17535	7 months ago
Rob Winch	49f308adb0	Use Supplier<? extends @Nullable Authentication> Previously Supplier<@Nullable Authentication> was used. This prevented Supplier<Authentication> from being used. The code now uses Supplier<? extends @Nullable Authentication> which allows for both Supplier<@Nullable Authentication> and Supplier<Authentication>. Closes gh-17814	7 months ago
Josh Cummings	4cbe8de7ea	Polish RSocket Anonymous Support Changed the DSL method name to anonymous to align with jwt. Since basicAuthenication is deprecated, we don't need to align with its naming convention. Also added a since attribute to the method. Issue gh-17132	7 months ago
Andrey Litvitski	559b73b39f	Add Disabling Anonymous Authentication in RSocketSecurity Closes: gh-17132 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com> 1 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com> 1 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	7 months ago
Andrey Litvitski	3278f3a410	Add discoverJwsAlgorithms() in NimbusJwtDecoder Closes: gh-17785 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	7 months ago
Josh Cummings	36f1de945f	Add OneTimeTokenAuthentication Closes gh-17799	7 months ago
Josh Cummings	6663eea65f	Polish OTT Tests Improve tests so that they do not rely on OneTimeTokenAuthenticationToken as the concrete type. Issue gh-17799	7 months ago
Josh Cummings	89b2f9cf54	Improve Test Runnability in IDE In some configurations, Configuration classes with static elements may cause a test to hang. This commit changes JeeConfigurerTests test configuration classes to use mock beans instead of referencing them as static fields.	7 months ago
Josh Cummings	0e39685b9c	Merge branch '6.5.x'	7 months ago
Josh Cummings	9d64880ea9	Merge branch '6.4.x' into 6.5.x	7 months ago
Josh Cummings	8b2a453301	Advise Favoring PostAuthorize on Reads Closes gh-17797	7 months ago
Josh Cummings	d1962201b5	Merge branch '6.5.x'	7 months ago

1 2 3 4 5 ...

19338 Commits (eeb4574bb3489ed9bbc64aab4ac55e68b28e4a2b) All Branches Search

19338 Commits (eeb4574bb3489ed9bbc64aab4ac55e68b28e4a2b)

All Branches