Josh Cummings
a7b58c2299
Polish SecurityContextHolderStrategy for Defaults
...
gh-11060
4 years ago
Marcus Da Coregio
a8c30f79e6
Add Core, MVC and MethodSecurity runtime hints
...
Closes gh-11431
4 years ago
Alonso Araya Calvo
7841827169
Adds the ability to set the CSRF Token cookie max age value
...
Closes gh-11432
4 years ago
Rob Winch
b6d43e58c0
SecurityContextHolder Deferred SecurityContext
...
Closes gh-10913
4 years ago
Rob Winch
d4a03dc2b1
Cache SecurityContextRepository.loadContext(HttpServletRequest) Result
...
Closes gh-11390
4 years ago
Josh Cummings
a31a99b591
Add SecurityContextHolderStrategy to Default Components
...
Issue gh-11060
4 years ago
j3graham
f3c96fa9cd
Remove dependency on commons-codec by using java.util.Base64
...
Closes gh-11318
4 years ago
Zhivko Delchev
1483a57018
Reverse content type check
...
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.
closes gh-11204
4 years ago
Josh Cummings
57fe5b8b5c
Fix Import Order Checkstyle Error
...
Issue gh-9667
4 years ago
Evgeniy Cheban
5540bbcf0b
createEvaluationContext should defer lookup of Authentication
...
- Added createEvaluationContext method that accepts Supplier<Authentication>
- Refactored classes that use EvaluationContext to use lazy initialization of Authentication
Closes gh-9667
4 years ago
Rob Winch
5b0dab5d3e
StrictHttpFirewall allows CJKV characters
...
Closes gh-11264
4 years ago
Rob Winch
472c25b5e8
AntRegexRequestMatcher Optimization
...
Closes gh-11234
4 years ago
Rob Winch
0df5ece758
Extract rejectNonPrintableAsciiCharactersInFieldName
...
Closes gh-11234
4 years ago
Josh Cummings
0814136ee8
Polish WebExpressionAuthorizationManager
...
- Add support for request variables
- Added additional tests
Issue gh-11105
4 years ago
Evgeniy Cheban
c4766e64fe
Add AuthorizationManager that uses ExpressionHandler
...
Closes gh-11105
4 years ago
Rob Winch
f34ea188e2
RequestRejectedException is 400 by Default
...
Closes gh-7568
4 years ago
Marcus Da Coregio
000b87f9aa
Revert "Use Spring Framework version 6.0.0-M3"
...
This reverts commit b803e845e7 .
4 years ago
Marcus Da Coregio
806e05855c
Replace removed context-related operators
...
Closes gh-11194
4 years ago
Marcus Da Coregio
b803e845e7
Use Spring Framework version 6.0.0-M3
...
Closes gh-11193
4 years ago
Marcus Da Coregio
195d767d98
Polish ServerWebExchangeDelegatingServerHttpHeadersWriter
...
Issue gh-11073
4 years ago
David Herberth
0e2fc51bad
Add DelegatingServerHttpHeadersWriter
...
Servlet Spring Security has DelegatingRequestMatcherHeaderWriter
the reactive world of Spring Security was missing a class to
conditionally write headers.
Closes gh-11073
4 years ago
Rob Winch
3c259b4be5
Fix WebSessionReactiveSecurityRepository Supports Cache
...
Fix the checkstyle for this feature
Closes gh-8422
4 years ago
Rob Winch
1ef738ba34
WebSessionReactiveSecurityRepository Supports Cache
4 years ago
Rob Winch
9a9a43a0c0
ForceEagerSessionCreationFilter
...
Closes gh-11109
4 years ago
Marcus Da Coregio
5367524030
Change the default of shouldFilterAllDispatchTypes to true
...
Closes gh-11107
4 years ago
Marcus Da Coregio
84b5c76a7b
Add Option to Filter All Dispatcher Types
...
Closes gh-11092
4 years ago
Rob Winch
0c2b9758fc
Deprecate loadContext(RequestResponseHolder)
...
Fix gh-11032
4 years ago
Marcus Da Coregio
50f8df6f07
Use HttpStatusCode
...
Closes gh-11091
4 years ago
Marcus Da Coregio
bc50146f60
Fix tests in AntPathRequestMatcherTests
...
Closes gh-11090
4 years ago
Rob Winch
7be32872e9
Add DisableUrlRewritingFilter
...
Closes gh-11084
4 years ago
Eleftheria Stein
c4e88415a5
Remove MessageSourceAware from ExceptionTranslationWebFilter
...
Closes gh-11057
4 years ago
Eleftheria Stein
ae8e77f9ff
Remove blocking call from ExceptionTranslationWebFilter
...
This also means that the exception message is no longer retrieved from a MessageSource. This is consistent with the other WebFilters.
Closes gh-10864
4 years ago
Josh Cummings
1edfa07d27
Use RequestMatcherEntry
...
Closes gh-11046
4 years ago
Josh Cummings
bdd5f86526
Polish Authorization Event Support
...
- Added spring-security-config support
- Renamed classes
- Changed contracts to include the authenticated user and secured
object
- Added method security support
Issue gh-9288
4 years ago
Parikshit Dutta
990831db85
Add authorization events
...
Closes gh-9288
4 years ago
Marcus Da Coregio
8c34af711e
Use ServletContext in AuthorizationManagerWebInvocationPrivilegeEvaluator
...
Closes gh-10908
4 years ago
Rob Winch
e176d764ba
Add SecurityContextRepository.loadContext(HttpServletRequest)
...
This allows loading the SecurityContext lazily, without the need for the
response, and does not attempt to automatically save the request when
the response is comitted.
Closes gh-11028
4 years ago
Rob Winch
1e3106f3a2
HttpSessionSecurityContextRepository support null HttpServletResponse
...
Closes gh-11029
4 years ago
Steve Riesenberg
8aa7029d07
Fix checkstyle errors
...
Issue gh-10989
4 years ago
Steve Riesenberg
946e24e1c2
Polish gh-10911
4 years ago
David Kirstein
2b6bc5dd0b
Use configurable charset in ServerHttpBasicAuthenticationConverter
...
Closes gh-10903
4 years ago
ShinDongHun1
90fe1b3a69
Polish UsernamePasswordAuthenticationFilter method
...
Closes gh-10970
4 years ago
Rob Winch
972039e65c
Add SecurityContextHolderFilter
...
Closes gh-9635
4 years ago
Rob Winch
cbba7ea4de
AbstractAuthenticationProcessingFilter.securityContextRepository
...
Issue gh-10953
4 years ago
Norbert Nowak
abd33389be
Add UsernamePasswordAuthenticationToken factory methods
...
- unauthenticated factory method
- authenticated factory method
- test for unauthenticated factory method
- test for authenticated factory method
- make existing constructor protected
- use newly factory methods in rest of the project
- update copyright dates
Closes gh-10790
4 years ago
Rob Winch
4462b73fd9
AbstractPreAuthenticatedProcessingFilter.securityContextRepository
...
Issue gh-10953
4 years ago
Rob Winch
ba7fb0cb14
DigestAuthenticationFilter.securityContextRepository
...
Issue gh-10953
4 years ago
Rob Winch
09e730734b
BasicAuthenticationFilter.setSecurityContextRepository
...
Issue gh-10953
4 years ago
Rob Winch
d909d3bc40
RememberMeAuthenticationFilter.securityContextRepository
...
Issue gh-10953
4 years ago
Rob Winch
7c5b939bbd
AuthenticationFilter.securityContextRepository
...
Issue gh-10953
4 years ago