spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	28f98b3351	Improve Error Message Closes gh-13667	2 years ago
Josh Cummings	ed96e2cddf	Ignore Unmappable Servlets Closes gh-13666	2 years ago
Eric Haag	30bc2634d7	Optimize configuration of project repositories This change applies repository content filtering to configured repositories, reducing the time spent during dependency resolution. This fixes an issue where requests for 'org.opensaml', 'net.shibboleth.utilities' and 'net.minidev' dependencies were being made in the Spring releases repositories, resulting in many failed requests during dependency resolution and increased resolution times. Closes gh-13582	3 years ago
Josh Cummings	c4f061c63d	Do Not Re-register Method Security Advisors Closes gh-13572	3 years ago
Josh Cummings	bb46a54270	Add DispatcherServlet to Tests Issue gh-13551	3 years ago
Josh Cummings	df239b6448	Improve RequestMatcher Validation Closes gh-13551	3 years ago
Marcus Da Coregio	7813a9ba26	Use default PathPatternParser instance	3 years ago
Marcus Da Coregio	7250abc185	Does not apply a Configurer when disabled from another DSL Closes gh-13203	3 years ago
Josh Cummings	73cb9862ad	Update Symlink for 5.8 Issue gh-13131	3 years ago
Josh Cummings	1eefd433b6	Add spring-security.xsd symlink Closes gh-13131	3 years ago
Josh Cummings	35ad1f857e	Only Register as Advisor in Proxy Mode Closes gh-13160	3 years ago
lukasz.migdalek	f4915890cc	Use Spec Order for Verifying Signatures Closes gh-12346	3 years ago
Josh Cummings	e9a02bc6e9	RememberMeConfigurer Picks Up SecurityContextRepository Closes gh-13104	3 years ago
Ruslan Stelmachenko	caa4093619	Fix javadoc for migration from WebSecurityConfigurerAdapter	3 years ago
Marcus Da Coregio	2d52fb8e4b	Clear Repository on Logout	3 years ago
Marcus Da Coregio	54117d7d27	Fix test suffix to align with checkstyle	3 years ago
Martin Tarjányi	5eefe9dcff	Fix typo in SessionManagementConfigurer javadoc	3 years ago
Marcus Da Coregio	1c3ce1e401	Fix entity-id ignored in RelyingPartyRegistration XML config Closes gh-11898	3 years ago
Leonid Rozenblyum	000b4bc495	Fix NPE in HttpSecurity#addFilterBefore, HttpSecurity#addFilterAfter Before the fix, these methods would throw a NPE in case when the filter class passed as the second parameter, is not registered yet. In particular, this exception can occur when mixing standard and custom DSL to register filters. The fix doesn't change the situation that standard DSL for registration of filters cannot refer to filters that are registered via custom DSL even though those calls were done earlier. It just provides more user-friendly error handling for this and most likely other scenarios of calls of HttpSecurity#addFilterBefore, HttpSecurity#addFilterAfter. The error handling is implemented similarly to HttpSecurity#addFilter. Closes gh-12637	3 years ago
Steve Riesenberg	c306df9b46	Add XorCsrfChannelInterceptor Issue gh-12378	3 years ago
Mitja Kotnik	f39f215140	Replace javadoc with SecurityFilterChain bean definition	3 years ago
Guillaume Husta	a5464ed819	Fix typo in DefaultLoginPageConfigurer Javadoc 'isLogoutRequest' seems to have nothing to do here.	3 years ago
Marcus Da Coregio	f561d3784e	Improve deprecation notice in WebSecurityConfigurerAdapter Closes gh-12260	3 years ago
Steve Riesenberg	ea6ce05662	Add configurer tests for CookieCsrfTokenRepository Issue gh-12236	3 years ago
Steve Riesenberg	2ed7cff643	Check for existing token before clearing Closes gh-12236	3 years ago
Jan Marten	2301e8ca77	Fix Javadoc in EnableWebSocketSecurity Add missing method name in EnableWebSocketSecurity JavaDoc code example.	3 years ago
Josh Cummings	3192618220	Add authenticationFailureHandler - To ServerHttpSecurity#httpBasic - To ServerHttpSecurity#oauthResourceServer Closes gh-12132	3 years ago
Koos Gadellaa	5c4362bbc4	Refresh parsers when not found Closes gh-3065	3 years ago
Rob Winch	d860775b45	Document Defer load CsrfToken Closes gh-12105	3 years ago
mmoussa_mapfreusa	bd4e0fb5db	Set LogoutRequestRepository on Saml2 LogoutSuccessHandler Closes gh-11363	3 years ago
Steve Riesenberg	c75ca10900	Add DeferredSecurityContext Issue gh-12023	3 years ago
Steve Riesenberg	440748ec65	Add test support for Xor CSRF tokens Issue gh-4001	3 years ago
Steve Riesenberg	37fa49b32d	Polish gh-11952	3 years ago
Steve Riesenberg	f462134e87	Add reactive support for BREACH Closes gh-11959	3 years ago
Steve Riesenberg	f4ca90e719	Add reactive interfaces for CSRF request handling Issue gh-11959	3 years ago
Marcus Da Coregio	f3321c256c	Add XML support for shouldFilterAllDispatcherTypes Closes gh-11492	3 years ago
Marcus Da Coregio	8a5aed2983	Add deprecation warning to CsrfDsl#ignoringAntMatchers Issue gh-11347	3 years ago
Marcus Da Coregio	bc4ad52feb	Add deprecation warning to mvcMatchers methods Issue gh-11347	3 years ago
Josh Cummings	0c0e298aa7	Polish Saml2 XML Use of SecurityContextHolderStrategy Issue gh-11061	3 years ago
Josh Cummings	b4d13e7726	Polish use-authorization-manager - Use SecurityContextHolderStrategy - Allow empty role prefix - Disallow access-decision-manager-ref and authorization-manager-ref together Issue gh-11305	3 years ago
Josh Cummings	7043ef6ccb	Polish OpaqueTokenAuthenticationConverterTests Issue gh-11665	3 years ago
Steve Riesenberg	dce1c30522	Add support for BREACH Closes gh-4001	3 years ago
Steve Riesenberg	1d706ae13d	Add csrfTokenRequestResolver to CsrfDsl Closes gh-11952	3 years ago
Marcus Da Coregio	bf6e85ec15	Accept String varargs in securityMatcher Issue gh-9159	3 years ago
Steve Riesenberg	475b3bb6bb	Add deferred CsrfTokenRepository.loadDeferredToken * Move DeferredCsrfToken to top-level and implement Supplier<CsrfToken> * Move RepositoryDeferredCsrfToken to top-level and make package-private * Add CsrfTokenRepository.loadToken(HttpServletRequest, HttpServletResponse) * Update CsrfFilter * Rename CsrfTokenRepositoryRequestHandler to CsrfTokenRequestAttributeHandler Issue gh-11892 Closes gh-11918	3 years ago
Daniel Garnier-Moiroux	0e215a21ad	Add X-Xss-Protection headerValue to XML config Issue gh-9631	3 years ago
Marcus Da Coregio	039e0328e1	Simplify Java Configuration RequestMatcher Usage If Spring MVC is present in the classpath, use MvcRequestMatcher by default. This commit also adds a new securityMatcher method in HttpSecurity Closes gh-11347 Closes gh-9159	3 years ago
Steve Riesenberg	7f9600ae08	Polish gh-11896	3 years ago
Marcus Da Coregio	64a19de4dc	Deprecate HPKP security header Closes gh-10144	3 years ago
Rob Winch	6d56af7b65	SessionManagementDsl.requireExplicitAuthenticationStrategy	3 years ago

1 2 3 4 5 ...

2046 Commits (5.8.6)