spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	ee28896f42	AntRegexRequestMatcher Optimization Closes gh-11234	4 years ago
Rob Winch	6b823fb27e	Extract rejectNonPrintableAsciiCharactersInFieldName Closes gh-11234	4 years ago
Rob Winch	67830f4111	Fix WebSessionReactiveSecurityRepository Supports Cache Fix the checkstyle for this feature Closes gh-8422	4 years ago
Rob Winch	c6eaa05fc5	WebSessionReactiveSecurityRepository Supports Cache	4 years ago
Rob Winch	aaf78330b1	ForceEagerSessionCreationFilter Closes gh-11109	4 years ago
Marcus Da Coregio	7fea639a43	Add Option to Filter All Dispatcher Types Closes gh-11092	4 years ago
Rob Winch	3a9b080bbe	Deprecate loadContext(RequestResponseHolder) Fix gh-11032	4 years ago
Rob Winch	39b0620a84	Add DisableUrlRewritingFilter Closes gh-11084	4 years ago
Eleftheria Stein	725a57fccc	Remove blocking call from ExceptionTranslationWebFilter This also means that the exception message is no longer retrieved from a MessageSource. This is consistent with the other WebFilters. Closes gh-10864	4 years ago
Josh Cummings	c175118f62	Use RequestMatcherEntry Closes gh-11046	4 years ago
Josh Cummings	061f69eb70	Polish Authorization Event Support - Added spring-security-config support - Renamed classes - Changed contracts to include the authenticated user and secured object - Added method security support Issue gh-9288	4 years ago
Parikshit Dutta	bd9434882f	Add authorization events Closes gh-9288	4 years ago
Marcus Da Coregio	6c52c52a68	Use ServletContext in AuthorizationManagerWebInvocationPrivilegeEvaluator Closes gh-10908	4 years ago
Rob Winch	67fd46bfa6	Add SecurityContextRepository.loadContext(HttpServletRequest) This allows loading the SecurityContext lazily, without the need for the response, and does not attempt to automatically save the request when the response is comitted. Closes gh-11028	4 years ago
Rob Winch	8940719dbb	HttpSessionSecurityContextRepository support null HttpServletResponse Closes gh-11029	4 years ago
Steve Riesenberg	987ee2e67a	Polish gh-10911	4 years ago
David Kirstein	1b29c43a11	Use configurable charset in ServerHttpBasicAuthenticationConverter Closes gh-10903	4 years ago
ShinDongHun1	7955e5ac52	Polish UsernamePasswordAuthenticationFilter method Closes gh-10970	4 years ago
Rob Winch	87ed31a99c	Add SecurityContextHolderFilter Closes gh-9635	4 years ago
Norbert Nowak	ac9c29b2a0	Add UsernamePasswordAuthenticationToken factory methods - unauthenticated factory method - authenticated factory method - test for unauthenticated factory method - test for authenticated factory method - make existing constructor protected - use newly factory methods in rest of the project - update copyright dates Closes gh-10790	4 years ago
Rob Winch	636f3e1d5d	AbstractPreAuthenticatedProcessingFilter.securityContextRepository Issue gh-10953	4 years ago
Rob Winch	e6b6104b52	DigestAuthenticationFilter.securityContextRepository Issue gh-10953	4 years ago
Rob Winch	9b0cd5a0a8	BasicAuthenticationFilter.setSecurityContextRepository Issue gh-10953	4 years ago
Rob Winch	120f2a356f	RememberMeAuthenticationFilter.securityContextRepository Issue gh-10953	4 years ago
Rob Winch	014c471ff1	AuthenticationFilter.securityContextRepository Issue gh-10953	4 years ago
Rob Winch	f11cb988a9	AbstractAuthenticationProcessingFilter.securityContextRepository Issue gh-10953	4 years ago
Marcus Da Coregio	980e0466a7	AuthorizationManagerWebInvocationPrivilegeEvaluator grant access when AuthorizationManager abstains Closes gh-10950	4 years ago
Rob Winch	65ec2659c4	HttpSessionSecurityContextRepository saves with original response Previously, the HttpSessionSecurityContextRepository unnecessarily required the HttpServletResponse from the HttpReqeustResponseHolder passed into loadContext. This meant code that wanted to save a SecurityContext had to have a reference to the original HttpRequestResponseHolder. Often that implied that the code that saves the SecurityContext must also load the SecurityContext. This change allows any request / response to be used to save the SecurityContext which means any code can save the SecurityContext not just the code that loaded it. This sets up the code to be permit requiring explicit saves. Using the request/response from the HttpRequestResponseHolder is only necessary for implicit saves. Closes gh-10947	4 years ago
Rob Winch	b9f79543c5	Add RequestAttributeSecurityContextRepository Closes gh-10918	4 years ago
Josh Cummings	efd5fc745c	Invert Log Messages Closes gh-10909	4 years ago
Josh Cummings	371389580b	Update JavaDoc Issue gh-10564	4 years ago
Yuriy Savchenko	0fb6840db3	Make WebAuthenticationDetails constructor public Closes gh-10564	4 years ago
Josh Cummings	cbd87fac89	Polish ignoring() log messaging - Public API remains unchanged Issue gh-9334	4 years ago
Manuel Jordan	01ed617d5f	Print ignore message DefaultSecurityFilterChain When either `web.ignoring().mvcMatchers(...)` or `web.ignoring().antMatchers(...)` methods are used, for all their variations, the DefaultSecurityFilterChain class now indicates correctly through its ouput what paths are ignored according the `ignoring()` settings. Closes gh-9334	4 years ago
Rob Winch	70fa8b1fdb	Add Support for @Transient SecurityContext Closes gh-9995	4 years ago
Marcus Da Coregio	1c10c10f73	RequestMatcherDelegatingWebInvocationPrivilegeEvaluator doesn't provided access to the ServletContext Closes gh-10779	4 years ago
Josh Cummings	9baf1134c7	Add Request-based AuthenticationManagerResolvers Closes gh-6762	4 years ago
Rob Winch	0e8c03401b	javax.xml.bind:jaxb-api -> jakarta.xml.bind:jakarta.xml.bind-api Issue gh-10501	4 years ago
Rob Winch	8f64bb6c8c	javax.servlet:javax.servlet-api -> jakarta.servlet:jakarta.servlet-api Issue gh-10501	4 years ago
Juan Carlos	7435da6bbf	Add serialVersionUID to DefaultSavedRequest and SavedCookie Closes gh-10594	4 years ago
Josh Cummings	75f25bff82	Polish multiple RequestRejectedHandlers support Issue gh-10603	4 years ago
Adam Ostrožlík	4ea57f3e3f	Support multiple RequestRejectedHandler beans Closes gh-10603	4 years ago
Josh Cummings	aaaf7d3523	Use noNullElements Collection#contains(null) does not work for all collection types Closes gh-10703	4 years ago
heowc	1ab0705b47	Fix typo	4 years ago
Marcus Da Coregio	f04cd641b0	Fix @since tag Issue gh-10590, gh-10554	4 years ago
Marcus Da Coregio	18427b6411	Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains Closes gh-10554	4 years ago
Marcus Da Coregio	7e17a00197	Add RequestMatcherEntry	4 years ago
Marcus Da Coregio	53b8cff26f	Introduce AuthorizationManagerWebInvocationPrivilegeEvaluator Closes gh-10590	4 years ago
Marcus Da Coregio	65426a40ec	Add Cross Origin Policies headers Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers Closes gh-9385, gh-10118	4 years ago
Steve Riesenberg	62e8799a8d	Use BDD in tests	4 years ago

1 2 3 4 5 ...

1206 Commits (5.7.0)