spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	e535e61c8b	Move toBuilder to BuildableAuthentication Closes gh-18052	2 months ago
Rob Winch	78701f94ee	Document RequiredFactor Valid Duration Issue gh-17997	2 months ago
Rob Winch	702878acae	Create AuthorizationManagerFactories.multiFactor Closes gh-18032	2 months ago
Rob Winch	d18431a78d	Move FACTOR_ constants to FactorGrantedAuthority Previously GrantedAuthorities had an implicit package tangle because it was located in ~.core and FactorGrantedAuthority is in ~.core.authority and FactorGrantedAuthority's authority property was implicitly expected to be constants found in `GrantedAuthorities`. This commit moves the constants to the FactorGrantedAuthority which resolves this tangle. It wasn't initially done because FactorGrantedAuthority did not exist at that time. Closes gh-18030	2 months ago
Rob Winch	e290c98e97	Document Multi-Factor Simple to Complex This reworks the Multi-Factor documentation to start with the simplest scenario and work to progressively more complex requirements. Closes gh-18029	2 months ago
dependabot[bot]	d5c5bb234c	Bump antora from 3.2.0-alpha.9 to 3.2.0-alpha.10 in /docs Bumps [antora](https://gitlab.com/antora/antora) from 3.2.0-alpha.9 to 3.2.0-alpha.10. - [Changelog](https://gitlab.com/antora/antora/blob/main/CHANGELOG.adoc) - [Commits](https://gitlab.com/antora/antora/compare/v3.2.0-alpha.9...v3.2.0-alpha.10) --- updated-dependencies: - dependency-name: antora dependency-version: 3.2.0-alpha.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Rob Winch	2473378fcd	Use RequiredFactorErrors Closes gh-18002	3 months ago
Rohan Naik	8c65dc93f2	Enable PKCE by default Closes gh-17507 Signed-off-by: Rohan Naik <rohan.nn1203@gmail.com>	3 months ago
Joe Grandja	681e166be8	Remove default HttpSecurity.securityMatcher() for authorization server Closes gh-17965	3 months ago
Rob Winch	7f10897de3	SecurityMockMvcResultMatchers.withAuthorities(String...) Closes gh-17974	3 months ago
Rob Winch	667cd4aa7c	Remove unnecessary throws Exception from spring-security-config Closes gh-17957	3 months ago
Josh Cummings	ad6fe4fdc3	Polish MFA Samples This commit removes unneeded AuthorizationManagerFactory implementations, simplifies the custom AuthorizationManagerFactory example, and updates usage of hasAllAuthorities. Issue gh-17934	3 months ago
Rob Winch	f652920bb3	Add @EnableGlobalMultiFactorAuthentication Closes gh-17954	3 months ago
Rob Winch	e33e4d80a9	Fix Antora Warnings in servlet/authentication/adaptive.adoc Issue gh-2603	3 months ago
Rob Winch	b2d76dfe66	Add GrantedAuthorities.FACTOR_*_AUTHORITY Closes gh-17952	3 months ago
Josh Cummings	bbba2930e9	Add Initial Documentation Issue gh-17934	3 months ago
Rob Winch	4ef16b14d2	Update terminology to HTTP Service Clients Closes gh-17947	3 months ago
Josh Cummings	765bdf1ed0	SpEL Expressions Support Returning AuthorizationManager Closes gh-17936	3 months ago
Josh Cummings	1e1cb0097a	Document Authentication Factors Issue gh-17933	3 months ago
Rob Winch	9eaadcc70d	Add hasAll(Roles\|Authorities) to SecurityExpressionRoot This adds support for hasAllRoles and hasAllAuthorities to method security expressions. Issue gh-17932	3 months ago
Rob Winch	675835e525	Add AuthorizationManagerFactory.hasAll(Authorities\|Roles) Closes gh-17932	3 months ago
Rob Winch	bb6b8ae3f3	Add AllAuthoritiesReactiveAuthorizationManager Issue gh-17916	3 months ago
Rob Winch	d0372efadd	Use include-code for password4j docs This follows the new convention of using include-code going forward to ensure that the documentation compiles and is tested. This also corrected a few errors in custom params for Ballooning and PBKDF2 examples. Issue gh-17706	3 months ago
Rob Winch	9f839384e9	Use non-redundant ids in password4j docs Documentation ids no longer need to be globally unique, so they do not need to include the path. This makes the ids less verbose and integrates with include-code extension better. Issue gh-17706	3 months ago
Rob Winch	11bec09ffc	Escape attribute failures in Password4j docs Issue gh-17706	3 months ago
Rob Winch	c18aff7f5f	Password4j docs 1 sentence per line The Antora documentation convention is to use a single sentence per line as this helps with diffing and merging changes. Issue gh-17706	3 months ago
dependabot[bot]	1a99ab5bdf	Bump @antora/atlas-extension in /docs --- updated-dependencies: - dependency-name: "@antora/atlas-extension" dependency-version: 1.0.0-alpha.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	3 months ago
M.Bozorgmehr	b2d4c52c53	Add documentation for Password4j-based password encoders for Argon2, BCrypt, Scrypt, PBKDF2, and Balloon hashing Closes gh-17706 Signed-off-by: M.Bozorgmehr <mehrdad.bozorgmehr@gmail.com>	3 months ago
Rob Winch	a0fe04c4aa	Document @ClientRegistrationId on types Issue gh-17806	3 months ago
Bernard Budano	02a948da81	Address reviewer requested changes Closes gh-17806 Signed-off-by: Bernard Budano <bbudano@gmail.com>	3 months ago
Joe Grandja	7ef25cc101	Add HttpSecurity.oauth2AuthorizationServer() Issue gh-17880	3 months ago
Joe Grandja	e99ea033c5	Integrate Spring Authorization Server ref docs Issue gh-17880	3 months ago
Joe Grandja	93742a4db3	Manual move of spring-projects/spring-authorization-server docs Issue gh-17880	3 months ago
Rob Winch	cf0ade86fe	Update Kerberos Sample Copyright Issue gh-17879	3 months ago
Rob Winch	1b263cfafb	Fix Keberos Docs http:// Issue gh-17879	3 months ago
Rob Winch	f5fb127c8c	Add Spring Security Kerberos Move the Spring Security Kerberos Extension into Spring Security Closes gh-17879	3 months ago
Josh Cummings	b87d63cb71	Document spring-security-access Closes gh-17847	3 months ago
Yanming Zhou	5ec7ae6b74	Remove redundant code in document Signed-off-by: Yanming Zhou <zhouyanming@gmail.com>	3 months ago
Josh Cummings	b09afb34cc	Document Authentication.Builder The commit documents the new Authentication Builder interface and its usage in the security filter chain. Closes gh-17861 Closes gh-17862	3 months ago
Steve Riesenberg	eeb4574bb3	Add AuthorizationManagerFactory Signed-off-by: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com>	3 months ago
Josh Cummings	8b2a453301	Advise Favoring PostAuthorize on Reads Closes gh-17797	4 months ago
Rob Winch	d9210c6596	Fix Nullability	4 months ago
Rob Winch	0404996f87	import Assertions.assertThat This adds a static import for assertThat in the Kotlin docs code	4 months ago
Rob Winch	0f63d98c84	Use @EnableMethodSecurity in docs tests Previously parameters were passed in unnecessarily. This removes the unnecessary paramaters.	4 months ago
Rob Winch	fbfbb1e571	Use 2004-present for Copyright Spring Security migrated the copyright to use -present to simplify the headers. This commit aligns the header.	4 months ago
Joe Kuhel	d002e68231	Update servlet test method docs to use include-code References gh-16226 Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	4 months ago
Rob Winch	62b5b1a77c	import Assertions.assertThat This adds a static import for assertThat in the Kotlin docs code	4 months ago
Rob Winch	523222c24d	Use @EnableMethodSecurity in docs tests Previously parameters were passed in unnecessarily. This removes the unnecessary paramaters.	4 months ago
Rob Winch	69f38d4933	Use 2004-present for Copyright Spring Security migrated the copyright to use -present to simplify the headers. This commit aligns the header.	4 months ago
Joe Kuhel	0179a811c7	Update servlet test method docs to use include-code References gh-16226 Signed-off-by: Joe Kuhel <4983938+jkuhel@users.noreply.github.com>	4 months ago

1 2 3 4 5 ...

2674 Commits (f5d33457dcf8b8faf0ccc240fff6cb80fcfab5c3)