spring-security

Commit Graph

Author	SHA1	Message	Date
Joe Grandja	9a2b71d931	Release 5.2.2.RELEASE	6 years ago
Josh Cummings	c4ccc96655	Polish Error Messages for OpaqueTokenIntrospectors	6 years ago
Joe Grandja	6c310213a8	Update to Spring Boot 2.2.4 Fixes gh-7909	6 years ago
Joe Grandja	a5b6b9a398	Update to org.slf4j 1.7.30 Fixes gh-7908	6 years ago
Joe Grandja	9e6910273c	Update to org.powermock 2.0.5 Fixes gh-7907	6 years ago
Joe Grandja	ea809b01a6	Update to hibernate-validator 6.1.2.Final Fixes gh-7906	6 years ago
Joe Grandja	8054239a12	Update to hibernate-entitymanager 5.4.10.Final Fixes gh-7905	6 years ago
Joe Grandja	46486194c2	Update to org.aspectj 1.9.5 Fixes gh-7904	6 years ago
Joe Grandja	00b08bc725	Update to httpclient 4.5.11 Fixes gh-7903	6 years ago
Joe Grandja	6e0fbfcccd	Update to commons-codec 1.14 Fixes gh-7899	6 years ago
Joe Grandja	87ea083520	Update to com.squareup.okhttp3 3.14.6 Fixes gh-7898	6 years ago
Joe Grandja	9db3f51f2a	Update to Jackson 2.10.2 Fixes gh-7897	6 years ago
Joe Grandja	3cc4a945c6	Update to Reactor Dysprosium SR4 Fixes gh-7896	6 years ago
Joe Grandja	dbc43fb47d	Update to Spring Data Moore SR3 Fixes gh-7895	6 years ago
Joe Grandja	ce6a0368bd	Update to Spring Framework 5.2.3 Fixes gh-7894	6 years ago
Eleftheria Stein	9dd3dfe718	Fix requiresAuthenticationMatcher not being used The custom server requiresAuthenticationMatcher was not always picked up Fixes: gh-7863	6 years ago
Eleftheria Stein	edb6cd3729	Fix authenticationFailureHandler not being used The custom server authenticationFailureHandler was not always picked up Fixes: gh-7782	6 years ago
Peter Keller	2dbedf7af5	Set charset of BasicAuthenticationFilter converter Allow BasicAuthenticationFilter to pick up the given credentials charset. Fixes: gh-7835	6 years ago
Eleftheria Stein	630eb10704	Load LDIF file from classpath in unboundId mode Fixes: gh-7833	6 years ago
Eleftheria Stein	f4d4c08329	Fix LDIF file example in LDAP docs Fixes: gh-7832	6 years ago
Johannes Edmeier	cc956a66df	Don't cache requests with `Accept: text/event-stream` by default. The eventstream requests is typically not directly invoked by the browser. And even more unfortunately the Browser-Api doesn't allow the set additional headers as `XMLHttpRequest`..	6 years ago
Rob Winch	29182abb34	Fix HttpHeaderWriterWebFilterTests Ensure setComplete() is subscribed to	6 years ago
Filip Hanik	b754a3d635	Use the custom ServerRequestCache that the user configures on for the default authentication entry point and authentication success handler Fixes gh-7721 https://github.com/spring-projects/spring-security/issues/7721 Set RequestCache on the Oauth2LoginSpec default authentication success handler import static ReflectionTestUtils.getField Feedback incorporated per https://github.com/spring-projects/spring-security/pull/7734#pullrequestreview-332150359	6 years ago
Eleftheria Stein	0d24e2b8cf	Fix WebFlux logout disabling Fixes: gh-7682	6 years ago
Rob Winch	b00999deed	Docs ServerRSocketFactoryCustomizer->ServerRSocketFactoryProcessor The documentation incorrectly used ServerRSocketFactoryCustomizer which was renamed to ServerRSocketFactoryProcessor. The docs now use the correct class name Fixes gh-7737	6 years ago
Eleftheria Stein	59ca2ddf65	Polish SAML2 principal classes Update @since Issue: gh-7681	6 years ago
Clement Stoquart	0782228914	fix: make Saml2Authentication serializable	6 years ago
Rob Winch	29eb8b9177	CompositeServerHttpHeadersWriter Executes Sequentially Fixes gh-7731	6 years ago
Rob Winch	bd6ff1f319	DelegatingServerAuthenticationSuccessHandler Executes Sequentially Fixes gh-7728	6 years ago
Rob Winch	6db7b457b7	DelegatingServerLogoutHandler Executes Sequentially Fixes gh-7723	6 years ago
Phil Clay	840d3aa986	Polish #7589 Rename OAuth2AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager to AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager. Handle empty mono returned from contextAttributesMapper. Handle empty map returned from contextAttributesMapper. Fix DefaultContextAttributesMapper so that it doesn't access ServerWebExchange. Fix unit tests so that they pass. Use StepVerifier in unit tests, rather than .subscribe(). Fixes gh-7569	6 years ago
Ankur Pathak	4c5c4f6cce	Reactive Implementation of AuthorizedClientServiceOAuth2AuthorizedClientManager ReactiveOAuth2AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager is reactive version of AuthorizedClientServiceOAuth2AuthorizedClientManager Fixes: gh-7569	6 years ago
Joe Grandja	148b570a98	Remove redundant validation for redirect-uri Fixes gh-7706	6 years ago
Joe Grandja	752d5f29aa	Display general error message when WebFlux oauth2Login() fails Issue gh-5562 gh-6484	6 years ago
Joe Grandja	e4aa3be4c5	WebFlux oauth2Login() redirects on failed authentication Fixes gh-5562 gh-6484	6 years ago
Alexey Nesterov	0babe7d930	Correctly configure authorization requests repository for OAuth2 login To use custom ServerAuthorizationRequestRepository both OAuth2AuthorizationRequestRedirectWebFilter and OAuth2LoginAuthenticationWebFilter should use the same repo provided in the configuration. Currently the former filter is correctly configured, but the latter always uses default, WebSession based repository. So authorization code created before redirect to authorization endpoint will never be found to complete OAuth2 login when custom ServerAuthorizationRequestRepository is used. This change also makes OAuth2Client and OAuth2Login authentication converters consistent. Fixes gh-7675	6 years ago
Joe Grandja	b905cb8aaa	Polish OAuth2AuthorizedClientArgumentResolver	6 years ago
Joe Grandja	19c2209a12	ServerOAuth2AuthorizedClientExchangeFilterFunction works with UnAuthenticatedServerOAuth2AuthorizedClientRepository Fixes gh-7544	6 years ago
Joe Grandja	18f48e4a16	DefaultReactiveOAuth2AuthorizedClientManager requires non-null serverWebExchange Issue gh-7544	6 years ago
ryenus	42ab6736e1	typo fix: consecutive-word duplications (#7673 ) * fix typo: require require * more typo fix: consecutive-word duplications Following previously finding, I then used `rg` to find other similar typos, with false positives manually excluded, using the following command: rg -t asciidoc -Pp '\b(\w+)\s+\1\b'	6 years ago
Rob Winch	af47e730a0	Only Hello Spring Security Boot For those getting started, we really need to send the message of using Spring Boot. Fixes gh-7627	6 years ago
Eleftheria Stein	c5b36664ce	Polish PrincipalSid Remove reduntant UserDetails check and add tests	6 years ago
杨博 (Yang Bo)	ea148d5fee	Avoid toString in favor of getName for extract sid There are some more sophisticated implementations of `getName` in `AbstractAuthenticationToken` and other `Authentication` classes.	6 years ago
Rob Winch	b3d177fc7e	Extract HTTPS Documentation Fixes gh-7626	6 years ago
Josh Cummings	7cbd1665a6	Isolate Jwt Test Support Isolating Jwt test support inside JwtRequestPostProcessor and JwtMutator. Fixes gh-7641	6 years ago
Eleftheria Stein	8a95e5798d	Update @MessageMapping to match input/output cardinality	6 years ago
Pim Moerenhout	cd0bec48de	Fix typo in log message.	6 years ago
Paul Pazderski	0d35194b47	Add sessionFixation Javadoc	6 years ago
Josh Cummings	22ae3eb765	Polish Error-handling Tests Tests should assert the error message content that Spring Security controls. Fixes gh-7647	6 years ago
Adrian Pena	ca8877c8c5	Updates javadoc for InitializeUserDetailsBeanManagerConfigurer	6 years ago

1 2 3 4 5 ...

8291 Commits (5.2.2.RELEASE) All Branches Search

8291 Commits (5.2.2.RELEASE)

All Branches