spring-security

Commit Graph

Author	SHA1	Message	Date
Rob Winch	5b293d2116	Automate spring-security.xsd Closes gh-13819	2 years ago
Marcus Da Coregio	aeafcc1377	Defer MethodSecurityExpressionHandler Resolution When using Spring Security ACL and compiling to Native, in order to create the '*AuthorizationMethodInterceptor' Proxy beans during build time, Spring tries to resolve the DataSource bean since the DataSource can be a dependency of some AclService implementations, and fails because some required data source properties are not available during build time. This commit defers the initialization of the MethodSecurityExpressionHandler to the runtime. Closes gh-12653	2 years ago
Josh Cummings	28f98b3351	Improve Error Message Closes gh-13667	2 years ago
Josh Cummings	ed96e2cddf	Ignore Unmappable Servlets Closes gh-13666	2 years ago
Josh Cummings	ca0140c586	saml2Login Honors AuthenticationProvider bean Closes gh-13654	2 years ago
Josh Cummings	8d4a024809	Update Copyright PR gh-13472	2 years ago
Seongguk Jeong	cd6f33c03e	Using putIfAbsent instead of put	2 years ago
Josh Cummings	c4f061c63d	Do Not Re-register Method Security Advisors Closes gh-13572	3 years ago
Josh Cummings	bb46a54270	Add DispatcherServlet to Tests Issue gh-13551	3 years ago
Josh Cummings	df239b6448	Improve RequestMatcher Validation Closes gh-13551	3 years ago
Marcus Da Coregio	7813a9ba26	Use default PathPatternParser instance	3 years ago
Marcus Da Coregio	933b302979	Fix once-per-request="true" not taking any effect Closes gh-13491	3 years ago
Josh Cummings	1abfd2c801	Only Register as Advisor in Proxy Mode Now that https://github.com/spring-projects/spring-framework/issues/30689 is addressed. Closes gh-13198	3 years ago
Marcus Da Coregio	2686af0c4d	Revert "Only Register as Advisor in Proxy Mode" This reverts commit `35ad1f85`	3 years ago
Marcus Da Coregio	7250abc185	Does not apply a Configurer when disabled from another DSL Closes gh-13203	3 years ago
Marcus Da Coregio	537e10cf9c	Improve javadoc adding how to stick with defaults and link to documentation Closes gh-13273	3 years ago
Josh Cummings	f566ed0afd	Update Symlink for 6.1 Issue gh-13131	3 years ago
Josh Cummings	71703dc371	Update Symlink for 6.0 Issue gh-13131	3 years ago
Josh Cummings	73cb9862ad	Update Symlink for 5.8 Issue gh-13131	3 years ago
Josh Cummings	1eefd433b6	Add spring-security.xsd symlink Closes gh-13131	3 years ago
Josh Cummings	35ad1f857e	Only Register as Advisor in Proxy Mode Closes gh-13160	3 years ago
lukasz.migdalek	f4915890cc	Use Spec Order for Verifying Signatures Closes gh-12346	3 years ago
Josh Cummings	e9a02bc6e9	RememberMeConfigurer Picks Up SecurityContextRepository Closes gh-13104	3 years ago
Marcus Da Coregio	69338ecdfa	Only Observe AuthenticationManager if it is not null Closes gh-13084	3 years ago
SeasonPan	a44e91d044	fix javadoc typo	3 years ago
Ruslan Stelmachenko	caa4093619	Fix javadoc for migration from WebSecurityConfigurerAdapter	3 years ago
Josh Cummings	1e25756ee6	Fix Import Order	3 years ago
Josh Cummings	64542b4059	Polish X509 SecurityContextRepository Like Basic and Bearer authentication, X509 is stateless by default. As such, it is better to not pick up the global SecurityContextRepository bean. The better fix is to change the default from HttpSessionSecurityContextRepository to RequestAttributeSecurityContextRepository. Issue gh-13008	3 years ago
Josh Cummings	c3479ddb45	Pick Up SecurityContextRepository Closes gh-13008	3 years ago
Marcus Da Coregio	2d52fb8e4b	Clear Repository on Logout	3 years ago
Marcus Da Coregio	82a149207d	Deprecate .and() and non lambda DSL methods Closes gh-12629	3 years ago
Marcus Da Coregio	54117d7d27	Fix test suffix to align with checkstyle	3 years ago
Marcus Da Coregio	01d1e20dc3	Deprecate shouldFilterAllDispatcherTypes Closes gh-12138	3 years ago
Martin Tarjányi	5eefe9dcff	Fix typo in SessionManagementConfigurer javadoc	3 years ago
twosom	cbb4e40166	fix typo in RequestCacheResultMatcher	3 years ago
Josh Cummings	a4bc0a6f3c	Polish - Add POST /login assertion - Rearrange test and config class Issue gh-12552	3 years ago
Clayton Walker	e2332d9620	Add disable to FormLoginDsl Closes gh-12552	3 years ago
Josh Cummings	a7562ad950	Update io.spring.javaformat to 0.0.38 Closes gh-12891	3 years ago
Josh Cummings	3ad6c6ce06	Use EntityId-lookup Components Closes gh-12880	3 years ago
Josh Cummings	46452c0cae	Add saml2Metadata Closes gh-11828	3 years ago
hdeadman	e0284a4503	Fix CAS packages for 4.0.1 and Jasig references Issue gh-11674	3 years ago
hdeadman	b4d3ac6665	Revert "Remove CAS module" This reverts commit `caf4c471`	3 years ago
Josh Cummings	bbd31f0e33	Defer ObservationRegistry Lookup Closes gh-12780	3 years ago
Marcus Da Coregio	1c3ce1e401	Fix entity-id ignored in RelyingPartyRegistration XML config Closes gh-11898	3 years ago
Leonid Rozenblyum	000b4bc495	Fix NPE in HttpSecurity#addFilterBefore, HttpSecurity#addFilterAfter Before the fix, these methods would throw a NPE in case when the filter class passed as the second parameter, is not registered yet. In particular, this exception can occur when mixing standard and custom DSL to register filters. The fix doesn't change the situation that standard DSL for registration of filters cannot refer to filters that are registered via custom DSL even though those calls were done earlier. It just provides more user-friendly error handling for this and most likely other scenarios of calls of HttpSecurity#addFilterBefore, HttpSecurity#addFilterAfter. The error handling is implemented similarly to HttpSecurity#addFilter. Closes gh-12637	3 years ago
twosom	cef13a6a16	Fix Javadoc Type Parameter	3 years ago
twosom	c79dac49ca	Fix Typo	3 years ago
Tobias Meurer	7dd5cc6082	Pick Up Custom SecurityContextRespository Closes gh-12579	3 years ago
twosom	c66370c092	Update javadoc in EnableWebSecurity	3 years ago
Marcus Da Coregio	52ed165476	Move classpath checks to class member variable Closes gh-11437	3 years ago

1 2 3 4 5 ...

2221 Commits (6.1.4)