spring-security

Commit Graph

Author	SHA1	Message	Date
Underground Hill	8b74bf9742	Updated reference to architecture page In the context of Servlet Authentication page, "Architecture" should probably link to "Servlet Authentication Architecture" page	3 years ago
he1ex-tG	568277f8bc	Mistake in Kotlin code representation is fixed	3 years ago
Josh Cummings	0f58620643	Add AspectJ AuthorizationManager Support Closes gh-11326	3 years ago
Rob Winch	89f8310d6c	Add Explicit SessionAuthenticationStrategy Option SessionAuthenticationFilter requires accessing the HttpSession to do its job. Previously, there was no way to just disable the SessionAuthenticationFilter despite the fact that SessionAuthenticationStrategy is invoked by the authentication filters directly. This commit adds an option to disable SessionManagmentFilter in favor of requiring explicit SessionAuthenticationStrategy invocation already performed by the authentication filters. Closes gh-11455	3 years ago
Rob Winch	5b64526ba9	Add CsrfFilter.csrfRequestAttributeName Previously the CsrfToken was set on the request attribute with the name equal to CsrfToken.getParameterName(). This didn't really make a lot of sense because the CsrfToken.getParameterName() is intended to be used as the HTTP parameter that the CSRF token was provided. What's more is it meant that the CsrfToken needed to be read for every request to place it as an HttpServletRequestAttribute. This causes unnecessary HttpSession access which can decrease performance for applications. This commit allows setting CsrfFilter.csrfReqeustAttributeName to remove the dual purposing of CsrfToken.parameterName and to allow deferal of reading the CsrfToken to prevent unnecessary HttpSession access. Issue gh-11699	3 years ago
Igor Bolic	efaee4e56b	Allow customization of redirect strategy The default redirect strategy will provide authorization redirect URI within HTTP 302 response Location header. Allowing the configuration of custom redirect strategy will provide an option for the clients to obtain the authorization URI from e.g. HTTP response body as JSON payload, without a need to handle automatic redirection initiated by the HTTP Location header. Closes gh-11373	3 years ago
Marcus Da Coregio	f45c4d4b8e	Add SHA256 as an algorithm option for Remember Me token hashing Closes gh-8549	3 years ago
Marcus Da Coregio	57d6ab7134	Improve docs on dispatcherTypeMatcher Closes gh-11467	3 years ago
Josh Cummings	624fdfa731	Add AuthorizationManager for protect-pointcut Closes gh-11323	3 years ago
Tim te Beek	ce67fb08fd	Clearly end sentence in note before next sentence	3 years ago
Tim te Beek	6e63278ab9	Use Collection<ConfigAttribute> in examples To match `org.springframework.security.access.ConfigAttribute`.	3 years ago
Josh Cummings	74a007dc91	Support AuthorizationManager for intercept-methods Element Closes gh-11328	4 years ago
Josh Cummings	74167d62b1	Add SecurityContextHolderStrategy XML Configuration for Messaging Issue gh-11061	4 years ago
Josh Cummings	9cd7c7b046	Add SecurityContextHolderStrategy XML Configuration for Method Security Issue gh-11061	4 years ago
Josh Cummings	2a70707c35	Add SecurityContextHolderStrategy XML Configuration for Defaults Issue gh-11061	4 years ago
sKai.fun	a3e996a66b	Fix title render issue of Digest Authentication document Closes gh-11272	4 years ago
sKai.fun	953b54f63d	Fix title render issue of Digest Authentication document Closes gh-11272	4 years ago
André Luis Gomes	aca3fc2412	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
André Luis Gomes	0c31cb21dc	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
André Luis Gomes	24701b547f	Update opaque-token.adoc Fixing yaml sample in Servlet and Reactive pages	4 years ago
Josh Cummings	9dbd1f3e25	Use AuthorizationManager in <http> Closes gh-11305	4 years ago
Josh Cummings	d7077b441a	Correct access(String) reference Closes gh-11280	4 years ago
Josh Cummings	292585080a	Correct access(String) reference Closes gh-11280	4 years ago
Josh Cummings	0abc54c7de	Correct access(String) reference Closes gh-11280	4 years ago
Josh Cummings	101f11ba94	Improve ContextConfiguration Docs Point to updated Spring Reference Issue gh-10934	4 years ago
Josh Cummings	18b903f6e3	Polish ExtendWith Docs Use spring-framework-reference-url placeholder Issue gh-10934	4 years ago
nor-ek	038266a94f	Update JUnit 5 annotations in documentation - replace Before with BeforeEach - replace RunWith with ExtendWith Closes gh-10934	4 years ago
Josh Cummings	8690accd57	Improve ContextConfiguration Docs Point to updated Spring Reference Issue gh-10934	4 years ago
Josh Cummings	e3c15260e7	Polish ExtendWith Docs Use spring-framework-reference-url placeholder Issue gh-10934	4 years ago
nor-ek	9625382b22	Update JUnit 5 annotations in documentation - replace Before with BeforeEach - replace RunWith with ExtendWith Closes gh-10934	4 years ago
Josh Cummings	dda026b5fc	Improve ContextConfiguration Docs Point to updated Spring Reference Issue gh-10934	4 years ago
Josh Cummings	2363dbb4e4	Polish ExtendWith Docs Use spring-framework-reference-url placeholder Issue gh-10934	4 years ago
nor-ek	23cc1eb32b	Update JUnit 5 annotations in documentation - replace Before with BeforeEach - replace RunWith with ExtendWith Closes gh-10934	4 years ago
Josh Cummings	8a03d1fcec	Add AuthorizationManager to Messaging Closes gh-11076	4 years ago
Josh Cummings	0e9228d10a	Prepare for Spring Security 5.8	4 years ago
Marcus Da Coregio	e94adedb94	Add shouldFilterAllDispatcherTypes to Kotlin DSL Closes gh-11153	4 years ago
Rob Winch	aaf78330b1	ForceEagerSessionCreationFilter Closes gh-11109	4 years ago
Marcus Da Coregio	7fea639a43	Add Option to Filter All Dispatcher Types Closes gh-11092	4 years ago
Rob Winch	39b0620a84	Add DisableUrlRewritingFilter Closes gh-11084	4 years ago
Pascal Verdage	b71d9bfdc2	Fix typo	4 years ago
Johannes Graf	4ee5800ec9	use okta as registration id looks like `ping` is some registration id used in the past. Closes gh-11034	4 years ago
Johannes Graf	d4931ecf2b	use okta as registration id looks like `ping` is some registration id used in the past.	4 years ago
Josh Cummings	04c483387e	Document Authorization Events Issue gh-9288	4 years ago
Eleftheria Stein	d4d6ddbaae	Fix formatting in reference docs	4 years ago
Steve Riesenberg	f0168c6c27	Add support for customizing claims in JWT Client Assertion Closes gh-9855	4 years ago
Joe Grandja	a2ffc88294	Allow configuring PKCE for confidential clients Closes gh-6548	4 years ago
Rob Winch	87ed31a99c	Add SecurityContextHolderFilter Closes gh-9635	4 years ago
Rob Winch	6e45a376cd	Remove "Hi ... there" From Docs Close gh-10963	4 years ago
Rob Winch	e4f1826622	Remove "Hi ... there" From Docs Close gh-10963	4 years ago
Rob Winch	b71b2f81e1	Add Persistence to documentation Closes gh-10962	4 years ago

1 2 3

111 Commits (ff6fd78d645cbb572e92e41c965eae421ca1022b)