Rob Winch
fa5f789beb
Lock dependencies
5 years ago
Josh Cummings
10946e8153
Polish Tests
...
Issue gh-9331
5 years ago
happier233
3cb98ebed0
Configure CurrentSecurityContextArgumentResolver BeanResolver
...
Closes gh-9331
5 years ago
Rob Winch
e6d6b39767
Constant Time Comparison for CSRF tokens
...
Closes gh-9291
5 years ago
Rob Winch
b08075a721
Fix CsrfWebFilter error message when expected CSRF not found
...
Closes gh-9337
5 years ago
Josh Cummings
7c2010f507
Revert "Lock Dependencies for 5.3.6"
...
This reverts commit a153012056 .
5 years ago
Josh Cummings
a153012056
Lock Dependencies for 5.3.6
5 years ago
Josh Cummings
2dcfda7fac
Revert "Lock Dependencies for 5.3.5.RELEASE"
...
This reverts commit 846a5a962c .
5 years ago
Josh Cummings
846a5a962c
Lock Dependencies for 5.3.5.RELEASE
5 years ago
Tomoki Tsubaki
e44471331b
Create the CSRF token on the bounded elactic scheduler
...
The CSRF token is generated by UUID.randomUUID() which is I/O blocking operation.
This commit changes the subscriber thread to the bounded elactic scheduler.
Closes gh-9018
5 years ago
Eleftheria Stein
d8bef76a0f
Unlock dependencies
...
This reverts commit b619d298aa .
6 years ago
Eleftheria Stein
b619d298aa
Lock Dependencies for 5.3.4.RELEASE
6 years ago
Rob Winch
070706d948
LoginPageGeneratingWebFilter honors context path
...
Closes gh-8807
6 years ago
Joe Grandja
38c1e3ffa8
OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException
...
Issue gh-8609
6 years ago
Josh Cummings
bbd2a9ebae
Revert "Lock Dependencies for 5.3.3.RELEASE"
...
This reverts commit 116bfe01e6 .
6 years ago
Josh Cummings
116bfe01e6
Lock Dependencies for 5.3.3.RELEASE
6 years ago
Eleftheria Stein
2ebbb6f80a
Mock request with non-standard HTTP method in test
...
Fixes gh-8594
6 years ago
cbornet
b6efd5ba76
Create the CSRF token on the bounded elactic scheduler
...
The CSRF token is created with a call to UUID.randomUUID which is blocking.
This change ensures this blocking call is done on the bounded elastic scheduler which supports blocking calls.
Fixes gh-8128
6 years ago
Artyom Tarynin
9e665388d2
Update AntPathRequestMatcher.java
...
Fixes gh-8512
6 years ago
Rob Winch
06a02ed4bb
Fix non-standard HTTP method for CsrfWebFilter
...
Closes gh-8452
6 years ago
Joe Grandja
413dfc8679
Unlock dependencies
...
This reverts commit a61145f74c .
6 years ago
Joe Grandja
a61145f74c
Lock dependencies for 5.3.2.RELEASE
6 years ago
Rob Winch
566c25aa10
Fix example in javadoc of FilterChainProxy
...
Closes gh-8344
6 years ago
Joe Grandja
a78872f268
Unlock dependencies for 5.3.1.RELEASE
...
This reverts commit 88c02684bb .
6 years ago
Joe Grandja
88c02684bb
Lock dependencies for 5.3.1.RELEASE
6 years ago
Rob Winch
0e6e2b2a21
Fix HttpServlet3RequestFactory Logout Handlers
...
Previously there was a problem with Servlet API logout integration
when Servlet API was configured before log out.
This ensures that logout handlers is a reference to the logout handlers
vs copying the logout handlers. This ensures that the ordering does not
matter.
Closes gh-4760
6 years ago
Josh Cummings
034c23d46c
SwitchUserFilter Defaults to POST
...
Fixes gh-4183
6 years ago
Zeeshan Adnan
dfa78804a8
Fix exception for empty basic auth header token
...
fixes spring-projectsgh-7976
6 years ago
Josh Cummings
6eadf7b140
Unlock dependencies for 5.3.0.RELEASE
...
This reverts commit 147d7dadd7 .
6 years ago
Josh Cummings
147d7dadd7
Lock dependencies for 5.3.0.RELEASE
6 years ago
AmitB
2ce9eef95e
Fix typo in AntPathRequestMatcher contructor comment
6 years ago
Joe Grandja
82cd203791
Remove unnecessary mocking
...
Fixes gh-8012
6 years ago
Josh Cummings
5bdf57d1e5
Remove Groovy and Spock Dependencies
...
Fixes gh-4939
6 years ago
Josh Cummings
bae50ecc05
AbstractSecurityWebApplicationInitializerTests groovy->java
...
Issue gh-4939
6 years ago
Eleftheria Stein
84b8a5abd7
Unlock dependencies for next development version
...
This reverts commit 064616f1ef .
6 years ago
Eleftheria Stein
064616f1ef
Lock dependencies for 5.3.0.RC1
6 years ago
Josh Cummings
cb9fd09150
Change AuthenticationWebFilter's constructor
...
Fixes gh-7872
6 years ago
Peter Keller
e62fb755e8
Set charset of BasicAuthenticationFilter converter
...
Allow BasicAuthenticationFilter to pick up the given credentials charset.
Fixes: gh-7835
6 years ago
Onur Kağan Özcan
1f6381d970
Set secure on cookie when logging out
...
Mark cookie secure flag to ensure cookie identity is the same
6 years ago
Rob Winch
ffccec953f
Fix HttpHeaderWriterWebFilterTests
...
Ensure setComplete() is subscribed to
6 years ago
Eleftheria Stein
fcc6457bef
Unlock dependencies for next development version
...
This reverts commit 93acf8f0f1 .
6 years ago
Eleftheria Stein
93acf8f0f1
Lock dependencies for 5.3.0.M1
6 years ago
Onur Kağan Özcan
2015f392ef
Set secure when cancelling remember-me cookie
...
AbstractRememberMeServices is setting remember-me cookie with checking request is secure or secure usage is independently set to a fixed flag.
But when cancelling a cookie, cookie is not being marked secure or not. It produces an inconsistency when using secure flag as a part to identity of cookie.
6 years ago
Rob Winch
a8331ba7ed
CompositeServerHttpHeadersWriter Executes Sequentially
...
Fixes gh-7731
6 years ago
David Herberth
64e063d948
switches web authentication principal resolver to use reactive context
...
gh #6598
Signed-off-by: David Herberth <github@dav1d.de>
6 years ago
Rob Winch
8e53c3f269
DelegatingServerAuthenticationSuccessHandler Executes Sequentially
...
Fixes gh-7728
6 years ago
Rob Winch
73babc3314
DelegatingServerLogoutHandler Executes Sequentially
...
Fixes gh-7723
6 years ago
Joe Grandja
4d9cee116c
Display general error message when WebFlux oauth2Login() fails
...
Issue gh-5562 gh-6484
6 years ago
Filip Hrisafov
796859333f
Log full failed authentication exception in BasicAuthenticationFilter
6 years ago
Josh Cummings
5f17032ffd
Restore Removed Throws Clauses
...
In a recent clean-up, certain exceptions were removed from various
throws clauses.
This PR re-introduces throws clauses that are important for one of the
following reasons:
1. It's a method on a public interface
2. It's a method clearly designed for inheritance, for example, a
method stub, an abstract method, or indicated as such in the docs.
Fixes gh-7541
6 years ago