Filip Hanik
eef440e989
Upgrade io.projectreactor.tools:blockhound to 1.0.0.RC1
7 years ago
Filip Hanik
00e3d6b85e
Upgrade httpclient to 4.5.10
7 years ago
Filip Hanik
8ba405b478
Upgrade gretty to 2.3.1
7 years ago
Filip Hanik
5f3e7d3a54
Upgrade hibernate-entitymanager to 5.4.5.Final
7 years ago
Filip Hanik
19891f1fa5
Upgrade slf4j to 1.7.28
7 years ago
Filip Hanik
6582b776ed
Upgrade BouncyCastle to 1.6.3
7 years ago
Joe Grandja
d3b7a47ef8
Polish gh-4442
7 years ago
Mark Heckler
da9f027fa4
Add nonce to OIDC Authentication Request
...
Fixes gh-4442
7 years ago
Filip Hanik
adde18b873
Revert "Merge pull request #7432 from fhanik/feature/propagate_saml_authentication_exception"
...
This reverts commit e9619fb0e7 , reversing
changes made to 45a1490d5d .
7 years ago
Filip Hanik
e9619fb0e7
Merge pull request #7432 from fhanik/feature/propagate_saml_authentication_exception
...
Propagate saml authentication exception #7375
Fixes gh-7375
7 years ago
Filip Hanik
d472e99528
SAML Assertion validation should propagate errors: #7375 and #7375
...
Fixes gh-7377
Fixes gh-7375
https://github.com/spring-projects/spring-security/issues/7377
https://github.com/spring-projects/spring-security/issues/7375
7 years ago
Filip Hanik
20033ffd4a
OpenSAML expects type `long` representing millis for response time validation skew
...
Fixes gh-7448
https://github.com/spring-projects/spring-security/issues/7448
7 years ago
Rob Winch
45a1490d5d
Fix ClassCastException for JDK 9+
...
AuthenticationPrincipalArgumentResolverTests failed in JDK 9+ due to
its improved generic support and a ClassCastException.
Issue gh-7363
7 years ago
Jesús Ascama
ceab56f764
Fix AuthorizationPayloadInterceptor order using PayloadInterceptorOrder.AUTHORIZATION
...
Fixes gh-7434
7 years ago
Rob Winch
b09e9f1896
Add Reactive Messaging AuthenticationPrincipalArgumentResolver
...
Fixes gh-7363
7 years ago
Joe Grandja
9f18c2e21a
OAuth2AuthorizationCodeGrantWebFilter matches on registered redirect-uri
...
Fixes gh-7036
7 years ago
evfool
6f6f5a12da
Fixed typo in comment
7 years ago
Eleftheria Stein
98e75eb51a
Fix Javadoc for anonymous
7 years ago
Josh Cummings
4fa1d08e20
Restructure Docs
...
Issue gh-5935
7 years ago
Joe Grandja
c5fd646afc
Update ref doc for OAuth2AuthorizationRequestResolver
...
Fixes gh-7405
7 years ago
Joe Grandja
324e066717
Polish ref doc for RegisteredOAuth2AuthorizedClient
7 years ago
Joe Grandja
076692ceef
Polish ref doc for oauth2-client
7 years ago
Joe Grandja
52f0e5287b
Update ref doc for oauth2-client WebClient integration
...
Fixes gh-7404
7 years ago
Josh Cummings
38e87568a6
Document Clear Site Data
...
Fixes gh-7463
7 years ago
Josh Cummings
124d9964d7
Document Bearer Token Propagation
...
Fixes gh-7461
7 years ago
Josh Cummings
3a9ee46719
Document RFC 8414 Support
...
Fixes gh-7462
7 years ago
Josh Cummings
b91668a34d
Break Out Resource Server Documentation
...
Issue gh-5935
7 years ago
Josh Cummings
f22fdf1bc0
Align OAuth Reactive/Servlet Resource Server Docs
...
Fixes gh-7430
Fixes gh-7425
Fixes gh-7460
7 years ago
Joe Grandja
c1ae997adc
Update ref doc for OAuth2AuthorizedClientManager
...
Issue gh-7403
7 years ago
Rob Winch
ff54eb878a
Use Schedulers.boundedElastic()
...
Fixes gh-7457
7 years ago
Rob Winch
cb5c58eeaa
AbstractUserDetailsReactiveAuthenticationManager uses newParallel
...
It is recommended to use newParallel to avoid impacting the timed
operations which all use parallel()
Fixes gh-7456
7 years ago
Joe Grandja
eeb0f56bac
Add ref doc for password grant
...
Fixes gh-7397
7 years ago
Rob Winch
00f8991fac
Merge Remove Redudant Throws
...
Fixes gh-7301
7 years ago
Joe Grandja
3425db6d16
Fix typo
7 years ago
Joe Grandja
e8d98a54b7
Add ref doc for refresh_token grant
...
Fixes gh-7398
7 years ago
Onur Kagan Ozcan
034b5e9e93
Introduce LogoutSuccessEvent
...
LogoutSuccessEvent is a simple AbstractAuthenticationEvent implementation which indicates successful logout.
By default, LogoutConfigurer will add a new LogoutHandler called LogoutSuccessEventPublishingLogoutHandler to publish this event.
This PR will also fix ConcurrentSessionFilter's composite logoutHandler, now will get LogoutHandler instances from LogoutConfigurer for consistency.
Fixes gh-2900
7 years ago
Josh Cummings
7576dc44d7
AuthenticationFilter Session Fixation Protection
...
Fixes gh-7446
7 years ago
Josh Cummings
496a2cdc60
Make AuthenticationFilter methods private
...
Fixes gh-7447
7 years ago
Josh Cummings
05caf3d8fb
Use Jwt.Builder
...
Fixes gh-7443
7 years ago
Josh Cummings
40901fe072
Jwt.Builder#notBefore Value Is Instant
...
Fixes gh-7442
7 years ago
Josh Cummings
1176d0cfdb
Polish DefaultFilters,Issue55Tests
...
Formatted HttpSecurity and WebSecurity configuration stacks
Removed unnecessary code
Issue gh-4939
7 years ago
kostya05983
950e6422a1
Migrate DefaultFilters,Issue55Tests groovy->java
...
Issue gh-4939
7 years ago
Joe Grandja
5aa37722b9
Add ref doc for client_credentials grant
...
Fixes gh-6206
7 years ago
Joe Grandja
8aa55fe81b
Update auth_code ref doc for oauth2-client
7 years ago
Josh Cummings
338b637ab5
Document Mock Jwt Testing
...
Fixes gh-7242
7 years ago
Josh Cummings
bdaf530511
Remove Stray @MockBean
...
Issue gh-7170
7 years ago
Andreas Falk
a085a12c99
Fix wrong java runtime version mentioned in reference doc
...
The reference documentation still referred to Java 5.0 as minimum
runtime version which is wrong.
This commit changes this to the correct
Java 8 runtime version as required minimum version.
In addition it corrects a fuzzy wording regarding stripping down the
`spring-security-core` jar.
Fixes gh-7440
7 years ago
Joe Grandja
1c257afa79
Update ref doc for oauth2-client
7 years ago
Josh Cummings
b55b2914c2
Mock Jwt Disables CSRF
...
Fixes gh-7170
7 years ago
Josh Cummings
aa12748c9b
Add Request-level CSRF Skip
...
Fixes gh-7367
7 years ago