spring-security

Commit Graph

Author	SHA1	Message	Date
Krzysztof Krason	9b603b99ab	Using modern Java features	3 years ago
Kevin Yue	b09a228eaf	Make class `OidcClientInitiatedLogoutSuccessHandler` extensible	3 years ago
Josh Cummings	5f26daedcb	Error On Unsupported Client Authentication Methods Closes gh-13144	3 years ago
Josh Cummings	c1002ff745	Improve Error Handling Closes gh-13143	3 years ago
Josh Cummings	7bd6deccc3	Revert "Disable Some R2dbc Tests" This reverts commit `813179931a`. Closes gh-12339	3 years ago
Josh Cummings	813179931a	Disable Some R2dbc Tests Issue gh-12339	3 years ago
이경욱	52c7141aac	Save Request Before Response Is Committed Specifically important for cookie-based authorization request repositories. Closes gh-11602	3 years ago
Steve Riesenberg	bb3d92e33a	Update r2dbc-h2 to 1.0.0.RELEASE Closes gh-12251	3 years ago
Steve Riesenberg	4e88623873	Polish gh-12087 in 6.0	3 years ago
Michael Sosa	52888d6206	Warn when AuthorizationGrantType does not match Log a warning when AuthorizationGrantType does not exactly match a pre-defined constant. Closes gh-11905	3 years ago
Steve Riesenberg	fde26e003a	Request user info when AS returns no scopes Closes gh-12144	3 years ago
Ger Roza	8315545144	Update RP-Initiated Logout target URLs. The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs. Fixes: gh-12081	3 years ago
Steve Riesenberg	75004587a4	Fix scope mapping Issue gh-12101	3 years ago
Josh Cummings	14584b0562	Add SecurityContextHolderStrategy to OAuth2 Issue gh-11060	3 years ago
Marcus Da Coregio	7f0140278e	Add native hint for OAuth2 Client's schemas Closes gh-11920	3 years ago
Steve Riesenberg	181ee7410b	Change default authority for oauth2Login() Previously, the default authority was ROLE_USER when using oauth2Login() for both OAuth2 and OIDC providers. * Default authority for OAuth2UserAuthority is now OAUTH2_USER * Default authority for OidcUserAuthority is now OIDC_USER Documentation has been updated to include this implementation detail. Closes gh-7856	3 years ago
Steve Riesenberg	bbac85e20b	Reduce severity of invalid registrationId to warn This prevents filling the log file with error messages when routine scans are being performed. Closes gh-11344	3 years ago
Daniel Garnier-Moiroux	bea7761a1c	ClientRegistrations#rest defines 30s connect and read timeouts	3 years ago
Rob Winch	f84f08c4b9	Default HttpSessionRequestCache.matchingRequestParameterName=continue Closes gh-11757	3 years ago
Rob Winch	32dbaceec5	Fix mockito 4.7.0 merge Issue gh-11748	3 years ago
Rob Winch	2fb625db84	Remove mockito deprecations Issue gh-11748	3 years ago
Igor Bolic	2e66b9f6cc	Allow customization of redirect strategy The default redirect strategy will provide authorization redirect URI within HTTP 302 response Location header. Allowing the configuration of custom redirect strategy will provide an option for the clients to obtain the authorization URI from e.g. HTTP response body as JSON payload, without a need to handle automatic redirection initiated by the HTTP Location header. Closes gh-11373	3 years ago
Igor Bolic	efaee4e56b	Allow customization of redirect strategy The default redirect strategy will provide authorization redirect URI within HTTP 302 response Location header. Allowing the configuration of custom redirect strategy will provide an option for the clients to obtain the authorization URI from e.g. HTTP response body as JSON payload, without a need to handle automatic redirection initiated by the HTTP Location header. Closes gh-11373	3 years ago
Joe Grandja	b5b3ddd6b4	Deprecate Resource Owner Password Credentials grant Closes gh-11590	3 years ago
Joe Grandja	95155ddb0c	Deprecate Resource Owner Password Credentials grant Closes gh-11590	3 years ago
Joe Grandja	6ee1643bae	Remove deprecations in ServerOAuth2AuthorizedClientExchangeFilterFunction Closes gh-11589	3 years ago
Joe Grandja	054791c26c	Remove deprecations in ServletOAuth2AuthorizedClientExchangeFilterFunction Closes gh-11588	3 years ago
Joe Grandja	0859da5590	Remove deprecations in OAuth2AuthorizedClientArgumentResolver Closes gh-11584	3 years ago
Joe Grandja	743b6a5bfe	Remove deprecations in OidcClientInitiatedLogoutSuccessHandler Closes gh-11565	3 years ago
Joe Grandja	cae22867b2	Remove deprecated allowMultipleAuthorizationRequests Closes gh-11564	3 years ago
Joe Grandja	0e291a3295	Remove deprecations in AuthorizationRequestRepository Closes gh-11519	3 years ago
Joe Grandja	e12823095f	Remove deprecations in ClientRegistration Closes gh-11518	3 years ago
Joe Grandja	61b034bf69	Remove deprecations in AbstractOAuth2AuthorizationGrantRequest Closes gh-11517	3 years ago
Joe Grandja	be58e2ac49	Remove deprecations in ClientAuthenticationMethod Closes gh-11516	3 years ago
Joe Grandja	746d27eab1	Remove deprecated NimbusAuthorizationCodeTokenResponseClient Closes gh-11512	3 years ago
Joe Grandja	42683693c0	Remove deprecated CustomUserTypesOAuth2UserService Closes gh-11511	3 years ago
Joe Grandja	67b27a41c3	Remove deprecated UnAuthenticatedServerOAuth2AuthorizedClientRepository Closes gh-11508	3 years ago
Joe Grandja	a3326fc0ee	Remove deprecated implicit authorization grant type Closes gh-11506	3 years ago
Marcus Da Coregio	ecbfa84b39	Revert "Disable failing tests until r2dbc-h2 is upgraded" This reverts commit `614065bb3b`.	3 years ago
Marcus Da Coregio	8776f66fb9	Update io.r2dbc:r2dbc-h2 to 1.0.0.RC1 Closes gh-11479	3 years ago
Steve Riesenberg	614065bb3b	Disable failing tests until r2dbc-h2 is upgraded Issue gh-11479	4 years ago
Josh Cummings	1d72a05c32	Add SecurityContextHolderStrategy to OAuth2 Issue gh-11060	4 years ago
Josh Cummings	539a11d0a4	Encode postLogoutRedirectUri query params Closes gh-11379	4 years ago
Josh Cummings	f035c30edb	Encode postLogoutRedirectUri query params Closes gh-11379	4 years ago
Josh Cummings	01513ab17e	Add placeholders to reactive post_logout_redirect_uri Now also supports baseScheme, baseHost, basePort, and basePath Issue gh-11229	4 years ago
Josh Cummings	6f69d85fcb	Reactive OAuth 2.0 logout handler resolves registrationId Closes gh-11378	4 years ago
Josh Cummings	3f30de388a	Encode postLogoutRedirectUri query params Closes gh-11379	4 years ago
Michael	e4505ed6c8	Add placeholders to post_logout_redirect_uri Now supports baseScheme, baseHost, basePort, and basePath in addition to extant baseUrl. Closes gh-11229	4 years ago
Josh Cummings	a8ab432aea	Add placeholders to reactive post_logout_redirect_uri Now also supports baseScheme, baseHost, basePort, and basePath Issue gh-11229	4 years ago
Josh Cummings	ebb5746f6e	Reactive OAuth 2.0 logout handler resolves registrationId Closes gh-11378	4 years ago

1 2 3 4 5 ...

760 Commits (fa2bc745f72fec43dc125d5959fc74f9c363736c)