spring-security

Commit Graph

Author	SHA1	Message	Date
Marcus Da Coregio	7983c695e2	Fix mvcMatchers overriding previous paths Closes gh-10956	4 years ago
Marcus Da Coregio	15b3744dcf	Fix setServletContext not being called for AuthorizationManagerWebInvocationPrivilegeEvaluator Issue gh-10908	4 years ago
Josh Cummings	040a28a8c9	Replace Apache Commons Base64 Decoding Issue gh-10923	4 years ago
Josh Cummings	a09f6e15ad	Polish ignoring() log messaging - Public API remains unchanged Issue gh-9334	4 years ago
Manuel Jordan	7e0302be5c	Print ignore message DefaultSecurityFilterChain When either `web.ignoring().mvcMatchers(...)` or `web.ignoring().antMatchers(...)` methods are used, for all their variations, the DefaultSecurityFilterChain class now indicates correctly through its ouput what paths are ignored according the `ignoring()` settings. Closes gh-9334	4 years ago
Marcus Da Coregio	a763382c3e	Make source code compatible with JDK 8 Closes gh-10695	4 years ago
Marcus Da Coregio	ba810e468f	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Rob Winch	e4a76b0ec9	Checkstyle Fixes - Javadoc tag ordering - Private constructors before inner classes Issue gh-10394	4 years ago
Josh Cummings	97dfabe92e	Polish SecurityNamespaceHandler Tests Issue gh-8974	4 years ago
Emil Sierżęga	944463e19a	SecurityNamespaceHandler: update schema version to 5.5 Closes gh-8974	4 years ago
Marcus Da Coregio	816e847af2	Allow SAML 2.0 loginProcessingURL without registrationId Closes gh-10176	4 years ago
Derek Van Blerkom	c55f1f8bea	Fix return type to allow further security config Issue gh-10245	4 years ago
Abdul Al-Faraj	ba16d91971	Improve OpenSAML Version Check Closes gh-10077	5 years ago
/usr/local/ΕΨΗΕΛΩΝ	61284ce22d	Improve AuthenticationManagerBeanDefinitionParser XML parsing Closes gh-7282	5 years ago
Eleftheria Stein	fdd017d935	Apply DefaultLoginPageConfigurer before logout If they are not applied in this order, then the LogoutConfigurer cannot set the logoutSuccessUrl, because the DefaultLoginPageGeneratingFilter does not exist yet. This impacts users that inject the default HttpSecurity bean. Closes gh-9973	5 years ago
Eleftheria Stein	cb4bb463da	Disable default logout page when logout disabled Closes gh-9475	5 years ago
Marcus Hert da Coregio	53870ab3de	Fix Adding Filter Relative to Custom Filter Closes gh-9787	5 years ago
Eleftheria Stein	34b55242fe	Ensure Kotlin 1.3 compatibility Closes gh-9765	5 years ago
Rob Winch	4d251157b2	opensaml4MainCompile	5 years ago
Rob Winch	eda38b8f88	opensaml fixes	5 years ago
Rob Winch	e5a652e749	Update to Kotlin 1.5.0 Closes gh-9763	5 years ago
Joe Grandja	e51ca79954	Document Jwt Client Authentication support Closes gh-9578	5 years ago
Joe Grandja	f874a12ddb	Document jwt-bearer authorization grant Closes gh-9580	5 years ago
Josh Cummings	ca2bc4feb3	Bump Schema Version Closes gh-9694	5 years ago
Josh Cummings	4d564ffb50	Update AuthorizationManager references Issue gh-9692	5 years ago
Josh Cummings	17cfc6ade3	Inline ResourceKeyConverterAdapter Closes gh-9689 Closes gh-9626	5 years ago
Eleftheria Stein	de0cd11a72	Fix PreAuthorize when returning Kotlin Flow Closes gh-9676	5 years ago
Joe Grandja	53e94bca45	Add oauth2Login() tests Issue gh-9548 gh-9660 gh-9266	5 years ago
Joe Grandja	5afeaa3ce7	WebFlux httpBasic() matches on XHR requests Closes gh-9660	5 years ago
Rob Winch	a31a855146	Fix HttpSecurity.addFilter* Ordering Closes gh-9633	5 years ago
Denis Washington	2b4b856b32	Limit oauth2Login() links to redirect-based flows This prevents the generated login page from showing links for authorization grant types like "client_credentials" which are not redirect-based, and thus not meant for interactive use in the browser. Closes gh-9457	5 years ago
Josh Cummings	163b5943ca	Revert AuthorizationManager Method Security	5 years ago
Josh Cummings	404a6c5674	Revert "Publish CsrfTokenRepository as shared object" This reverts commit `d19ff12813`.	5 years ago
Josh Cummings	4e81bbe386	Revert "Add Saml2LogoutConfigurer" This reverts commit `6f52baba29`.	5 years ago
Josh Cummings	6f52baba29	Add Saml2LogoutConfigurer Closes gh-9497	5 years ago
Josh Cummings	d19ff12813	Publish CsrfTokenRepository as shared object Closes gh-9595	5 years ago
Josh Cummings	df8abcfae7	Use Interceptors instead of Advice - Interceptor is a more descriptive term for what method security is doing - This also allows the code to follow a delegate pattern that unifies both before-method and after- method authorization Issue gh-9289	5 years ago
Josh Cummings	6828987b4b	Add AfterMethodAuthorizationManager - Removes the need to keep MethodAuthorizationContext#returnObject in sync with other method parameters - Restores MethodAuthorizationContext's immutability Closes gh-9591	5 years ago
Josh Cummings	2b494ebc5f	Polish AOP Structure - Changed from MethodMatcher to Pointcut since authorization annotations also can be attached to classes - Adjusted advice to extend Before or AfterAdvice - Adjusted advice to extend PointcutAdvisor so that it can share its Pointcut - Adjusted advice to extend AopInfrastructureBean to align with old advice classes Issue gh-9289	5 years ago
Josh Cummings	62d77ec97e	Add GrantedAuthorityDefaults to Expression Handler Issue gh-9289	5 years ago
Josh Cummings	68cf74468c	Add check for custom advice - Because publishing an advice bean replaces Spring Security defaults, the code should error if both a custom bean and either secureEnabled or prePostEnabled are specified Issue gh-9289	5 years ago
Josh Cummings	45376b359b	Adjust Packaging Issue gh-9289	5 years ago
Evgeniy Cheban	20778f727b	Consider AuthorizationManager for Method Security Closes gh-9289	5 years ago
Josh Cummings	7ded671858	Refactor AuthenticationDetailsSource support - BearerTokenAuthenticationFilter exposes this directly, simplifying configuration and removing a package tangle Closes gh-9576	5 years ago
Eleftheria Stein	e03fe7f089	Add coroutine support to pre/post authorize Closes gh-8143	5 years ago
Rob Winch	60d3db5798	add management platform(project(":spring-security-dependencies")) Closes gh-9540	5 years ago
Rob Winch	1a76ee7442	Update Gradle configuration names Closes gh-9540	5 years ago
Eleftheria Stein	0f3df3e714	Consider Order on SecurityFilterChain bean definitions Closes gh-9154	5 years ago
Eleftheria Stein	f5fe64cd5b	Fix typo	5 years ago
Josh Cummings	d0d0a8d958	Add OpenSAML 4 Support Closes gh-9095	5 years ago

1 2 3 4 5 ...

1748 Commits (5.5.7)