spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	c4ccc96655	Polish Error Messages for OpaqueTokenIntrospectors	6 years ago
Eleftheria Stein	9dd3dfe718	Fix requiresAuthenticationMatcher not being used The custom server requiresAuthenticationMatcher was not always picked up Fixes: gh-7863	6 years ago
Eleftheria Stein	edb6cd3729	Fix authenticationFailureHandler not being used The custom server authenticationFailureHandler was not always picked up Fixes: gh-7782	6 years ago
Johannes Edmeier	cc956a66df	Don't cache requests with `Accept: text/event-stream` by default. The eventstream requests is typically not directly invoked by the browser. And even more unfortunately the Browser-Api doesn't allow the set additional headers as `XMLHttpRequest`..	6 years ago
Filip Hanik	b754a3d635	Use the custom ServerRequestCache that the user configures on for the default authentication entry point and authentication success handler Fixes gh-7721 https://github.com/spring-projects/spring-security/issues/7721 Set RequestCache on the Oauth2LoginSpec default authentication success handler import static ReflectionTestUtils.getField Feedback incorporated per https://github.com/spring-projects/spring-security/pull/7734#pullrequestreview-332150359	6 years ago
Eleftheria Stein	0d24e2b8cf	Fix WebFlux logout disabling Fixes: gh-7682	6 years ago
Joe Grandja	e4aa3be4c5	WebFlux oauth2Login() redirects on failed authentication Fixes gh-5562 gh-6484	6 years ago
Alexey Nesterov	0babe7d930	Correctly configure authorization requests repository for OAuth2 login To use custom ServerAuthorizationRequestRepository both OAuth2AuthorizationRequestRedirectWebFilter and OAuth2LoginAuthenticationWebFilter should use the same repo provided in the configuration. Currently the former filter is correctly configured, but the latter always uses default, WebSession based repository. So authorization code created before redirect to authorization endpoint will never be found to complete OAuth2 login when custom ServerAuthorizationRequestRepository is used. This change also makes OAuth2Client and OAuth2Login authentication converters consistent. Fixes gh-7675	6 years ago
Eleftheria Stein	8a95e5798d	Update @MessageMapping to match input/output cardinality	6 years ago
Pim Moerenhout	cd0bec48de	Fix typo in log message.	6 years ago
Paul Pazderski	0d35194b47	Add sessionFixation Javadoc	6 years ago
Adrian Pena	ca8877c8c5	Updates javadoc for InitializeUserDetailsBeanManagerConfigurer	6 years ago
Eleftheria Stein	1188a3bb5f	Polish RememberMeConfigurer Issue: gh-4140	6 years ago
邓超	b13f750646	Retrieve remember-me key from service as fallback Fixes: gh-4140	6 years ago
Yanming Zhou	9f6a36444a	Add missing schemas	6 years ago
Josh Cummings	925bf48ec0	Polish OAuth2ResourceServerConfigurerTests To confirm that resource server only produces SCOPE_<scope> authorities by default. Issue gh-7596	6 years ago
Filip Hanik	0cafcf37e2	Make the loginProcessingUrl configurable for saml2Login() Fixes gh-7565 https://github.com/spring-projects/spring-security/issues/7565	6 years ago
Josh Cummings	5f17032ffd	Restore Removed Throws Clauses In a recent clean-up, certain exceptions were removed from various throws clauses. This PR re-introduces throws clauses that are important for one of the following reasons: 1. It's a method on a public interface 2. It's a method clearly designed for inheritance, for example, a method stub, an abstract method, or indicated as such in the docs. Fixes gh-7541	6 years ago
Rob Winch	635f7e1edd	CsrfWebFilter supports multipart/form-data Fixes gh-7576	6 years ago
Vitalii Mahas	0ac5f5456f	Fix typo 'is' -> 'if' in javadoc	6 years ago
Eleftheria Stein	de7cbc82b5	Clarify in Javadoc that expressionHandler should not be null Fixes: gh-2665	6 years ago
Josh Cummings	758af54796	ObjectPostProcessor Tests groovy->java Issue gh-4939	6 years ago
Josh Cummings	a08be5bf6f	UrlAuthorizationsTests groovy->java Issue gh-4939	6 years ago
Josh Cummings	870d83eb3e	PermitAllSupportTests groovy->java Issue gh-4939	6 years ago
Luis Felipe Vega Calle	350bce761f	Add hasAuthority method to RSocketSecurity Fixes gh-7435	6 years ago
Josh Cummings	5f905232cb	Polish CurrentSecurityContextArgumentResolvers Fixes gh-7487	6 years ago
Joe Grandja	5ef6e7ed6f	Add author for SecurityReactorContextConfiguration Issue gh-7422	6 years ago
Joe Grandja	0fea57d6a1	Optimize SecurityReactorContextConfiguration Issue gh-7422	6 years ago
Josh Cummings	33ba292fed	Resource Server w/ SecurityReactorContextSubscriber Fixes gh-7423	6 years ago
Joe Grandja	5a67971375	WebFluxSecurityConfiguration configures oauth2Client() by default Fixes gh-7470	6 years ago
Joe Grandja	08d2c93713	Polish gh-7466	6 years ago
Roman Chigvintsev	9bae0a4dbd	Allow to customize OAuth2AuthorizationRequestRedirectWebFilter in OAuth2LoginSpec Fixes gh-7466	6 years ago
Joe Grandja	2a5bd6e719	Align Servlet ExchangeFilterFunction CoreSubscriber Fixes gh-7422	6 years ago
Joe Grandja	d3b7a47ef8	Polish gh-4442	6 years ago
Mark Heckler	da9f027fa4	Add nonce to OIDC Authentication Request Fixes gh-4442	6 years ago
Jesús Ascama	ceab56f764	Fix AuthorizationPayloadInterceptor order using PayloadInterceptorOrder.AUTHORIZATION Fixes gh-7434	6 years ago
Joe Grandja	9f18c2e21a	OAuth2AuthorizationCodeGrantWebFilter matches on registered redirect-uri Fixes gh-7036	6 years ago
Eleftheria Stein	98e75eb51a	Fix Javadoc for anonymous	6 years ago
Ebert Toribio	3a66191756	Add hasAnyAuthority method in AuthorizePayloadsSpec.Access See Fixes gh-7437 Co-authored-by: Eddú Meléndez <eddu.melendez@gmail.com>	6 years ago
Onur Kagan Ozcan	034b5e9e93	Introduce LogoutSuccessEvent LogoutSuccessEvent is a simple AbstractAuthenticationEvent implementation which indicates successful logout. By default, LogoutConfigurer will add a new LogoutHandler called LogoutSuccessEventPublishingLogoutHandler to publish this event. This PR will also fix ConcurrentSessionFilter's composite logoutHandler, now will get LogoutHandler instances from LogoutConfigurer for consistency. Fixes gh-2900	6 years ago
Manuel Tejeda	9926ad68b8	add hasAnyRole method in AuthorizePayloadsSpec.Access	6 years ago
Jesús Ascama	daf6b53e3a	Add denyAll method in AuthorizePayloadsSpec.Access See gh-7437 Co-authored-by: Eddú Meléndez <eddu.melendez@gmail.com>	6 years ago
Josh Cummings	05caf3d8fb	Use Jwt.Builder Fixes gh-7443	6 years ago
Josh Cummings	1176d0cfdb	Polish DefaultFilters,Issue55Tests Formatted HttpSecurity and WebSecurity configuration stacks Removed unnecessary code Issue gh-4939	6 years ago
kostya05983	950e6422a1	Migrate DefaultFilters,Issue55Tests groovy->java Issue gh-4939	6 years ago
Josh Cummings	101e0a21a8	Bearer WebClient Filter Authentication Propagation Fixes: gh-7418	6 years ago
Rob Winch	96d44cd4b7	Add Default RSocketSecurity Fixes gh-7361	6 years ago
Rob Winch	5d0815bc76	Allow RSocketMessageHandlerITests to timeout Fixes gh-7415	6 years ago
Rob Winch	6296e6e896	RSocketSecurity delegates to correct matcher Fixes gh-7414	6 years ago
Rob Winch	1b699a49fb	Polish RSocket packaging Fixes gh-7413	6 years ago

1 2 3 4 5 ...

1354 Commits (5.2.2.RELEASE)