spring-security

Commit Graph

Author	SHA1	Message	Date
Sola	2980f96b55	Allow PrincipalExtractor to be customized. Signed-off-by: Sola <dev@sola.love>	8 years ago
Josh Cummings	932ea245fb	AuthenticationManager for OAuth2ResourceServerSpec This makes the AuthenticationManager used by the OAuth2 Resource Server configurable, focusing at this point on the Jwt use case. Fixes: gh-5750	8 years ago
Joe Grandja	dfd572a4d2	Polish	8 years ago
Joe Grandja	3b480a3a05	Provide RestOperations in CustomUserTypesOAuth2UserService Fixes gh-5602	8 years ago
Joe Grandja	4a8c95a3e8	Provide RestOperations in DefaultOAuth2UserService Fixes gh-5600	8 years ago
Josh Cummings	25d1f49d84	Remove Resource Server's Session Policy Config Resource Server doesn't need to set the session policy for the application to STATELESS since it can rely on the SessionManagementFilter ignoring token's annotated with @Transient, which a JwtAuthenticationToken is. Fixes: gh-5759	8 years ago
Johnny Lim	5141dacd95	Upgrade to Gradle Wrapper 4.10 Closes gh-5748	8 years ago
Rob Winch	5dd55d4936	Ensure NamingException.resolvedObj is Serializable Fixes: gh-5378	8 years ago
Josh Cummings	8510e9a285	Reactive Resource Server insufficient_scope This introduces an implementation of ServerAccessDeniedHandler that is compliant with the OAuth 2.0 spec for insufficent_scope errors. Fixes: gh-5705	8 years ago
Josh Cummings	1c74706232	Delegating ServerAccessDeniedHandler by exchange Fixes: gh-5747	8 years ago
Joe Grandja	8e615d0fee	Re-factor DefaultClientCredentialsTokenResponseClient Fixes gh-5735	8 years ago
Rob Winch	713e1e3356	BearerTokenServerAuthenticationEntryPoint waits for subscriber Fixes: gh-5742	8 years ago
Vedran Pavic	362c2ef1f2	Force snapshot repo in snapshot stage build	8 years ago
Joe Grandja	229b69dd35	Add DefaultAuthorizationCodeTokenResponseClient Fixes gh-5547	8 years ago
Vedran Pavic	f7cb53e9bd	Upgrade spring-build-conventions to 0.0.18.RELEASE	8 years ago
Vedran Pavic	cb0ba58b58	Fix WhitespaceAfterCheck Checkstyle check	8 years ago
Jason Zhekov	439538477a	Add missing space in namespace.adoc	8 years ago
Johnny Lim	88181c31f1	Polish ActiveDirectoryLdapAuthenticationProviderTests This commit polishes ActiveDirectoryLdapAuthenticationProviderTests.contextEnvironmentPropertiesUsed() by: - Adding fail() to prevent from going through an unexpected path. - Asserting that the root cause is an instance of ClassNotFoundException as the current code doesn't seem to right.	8 years ago
Rob Winch	f5ad4ba0fa	ServletOAuth2AuthorizedClientExchangeFilterFunction support client_credentials Fixes: gh-5639	8 years ago
Rob Winch	2d497c7b0f	Remove OAuth2ExchangeFilterFunctions Fixes: gh-5734	8 years ago
Rob Winch	1640a1f462	Polish ServerAuthenticationConverter Fix package tangles Issue: gh-5338	8 years ago
Josh Cummings	68d836d508	Reactive Resource Server Csrf Bypass This makes requests identified as bearer token requests skip the csrf filter. Fixes: gh-5710	8 years ago
Rob Winch	820fb7d828	Polish formatting ServerHttpSecurity JwtSpec Fixes: gh-5728	8 years ago
Josh Cummings	cba2444e1a	ServerHttpSecurity ReactiveJwtDecoder discovery This makes so that WebFlux OAuth 2.0 Resource Server configuration will pick up a ReactiveJwtDecoder exposed as a bean. Fixes: gh-5720	8 years ago
Josh Cummings	0fdc081ab5	Add unit tests Added some unit tests around some untested parts of the code that I will be touching for this issue. Issue: gh-5720	8 years ago
Rob Winch	7c14c6e48f	Update to Spring Boot 2.1.0.M2 Fixes: gh-5727	8 years ago
Josh Cummings	416a276436	Expose Default Reactive CsrfProtectionMatcher Make so that users can augment the default protection logic with their own. Fixes: gh-5725	8 years ago
Rob Winch	4ddaac3b8e	Fix settings.gradle on Windows Fixes: gh-5724	8 years ago
Joe Grandja	d7bd5c0acc	Remove spring.factories from oauth2login-webflux sample Fixes gh-5723	8 years ago
Joe Grandja	ff6e1232c8	Flatten HttpSecurity.oauth2() Fixes gh-5715	8 years ago
Joe Grandja	0f89e59707	Simplified oauth2().client() DSL Fixes gh-5662	8 years ago
Rob Winch	d7dde707a2	Jenkinsfile uses Spring 5.1.0.BUILD-SNAPSHOT Previously 5.+ was used. This caused problems because Spring Framework does not use semantic versioning for milestone and rc snapshots. For example, Spring uses 5.1.0.BUILD-SNAPSHOT, 5.1.0.M1, and then goes back to 5.1.0.BUILD-SNAPSHOT. Fixes: gh-5721	8 years ago
Rob Winch	0dc80aed40	Flatten ServerHttpSecurity.oauth2() Fixes: gh-5712	8 years ago
Josh Cummings	59cdfc7d6e	ReactiveJwtDecoder via OIDC Provider Configuration A reactive static builder for constructing and configuring a ReactiveJwtDecoder via an issuer that supports the OIDC Provider Configuration spec. Fixes: gh-5649	8 years ago
Josh Cummings	01443e35b4	Reactive Jwt Validation This allows a user to customize the Jwt validation steps that NimbusReactiveJwtDecoder will take for each Jwt. Fixes: gh-5650	8 years ago
Rob Winch	53652584b2	ResourceServerSpec->OAuth2ResourceServerSpec Fixes: gh-5713	8 years ago
Joe Grandja	c3e19e29b5	Remove authorizationEndpoint.baseUri in OAuth2ClientConfigurer Fixes gh-5661	8 years ago
Josh Cummings	b11e9ed317	Fix Javadoc Typo NimbusReactiveJwtDecoder incorrectly referred in its class-level doc as being an implementation of JwtDecoder. This has been corrected to say ReactiveJwtDecoder. Fixes: gh-5711	8 years ago
Rob Winch	ec01657625	Polish ActiveDirectoryLdapAuthenticationProvider custom environment Fixes: gh-5674	8 years ago
Yuri Konotopov	669b0ba583	ActiveDirectoryLdapAuthenticationProvider custom environment This change allows to inject custom environment properties for directory context initialization. Fixes: gh-2312	8 years ago
Rob Winch	f5701b5fe0	Fix OptimizeAntPathRequestMatcher Previously the logic for determining if the pathInfo should be appended was inverted. This correctly concatenates url + pathInfo if url is a non empty String. Fixes: gh-5473	8 years ago
Christoph Dreis	4ccd2f7ebd	Optimize AntPathRequestMatcher.getRequestPath()	8 years ago
Rob Winch	a08fa22b27	Update to oauth2-oidc-sdk:5.64.4 Fixes: gh-5704	8 years ago
Rob Winch	f38c3bfc94	Next Developement Version	8 years ago
Rob Winch	a5acf9b834	Release 5.1.0.RC2	8 years ago
Josh Cummings	3cd0ebedc9	Polish ClientRegistrations Class is now final Issue: gh-5647	8 years ago
Vedran Pavic	f382b69507	Add reactive support for Referrer-Policy security header	8 years ago
Vedran Pavic	10621a0f2c	Add reactive support for Content-Security-Policy security header	8 years ago
Vedran Pavic	29cfc3dd1d	Add reactive support for Feature-Policy security header Closes gh-5672	8 years ago
Rob Winch	eecb01abb2	Update to Spring Data Lovelace RC2 Fixes: gh-5700	8 years ago

... 7 8 9 10 11 ...

7615 Commits (f977a2594de455e0db4a1210b2fa25f4ccd9af0a) All Branches Search

7615 Commits (f977a2594de455e0db4a1210b2fa25f4ccd9af0a)

All Branches