spring-security

Commit Graph

Author	SHA1	Message	Date
Joe Grandja	a8c4d6cead	Require Locale argument for toLower/toUpperCase usage	1 year ago
Rob Winch	81e74e65d4	Support ServerExchangeRejectedHandler @Bean Closes gh-16061	1 year ago
Rob Winch	1ba6301afa	Support ServerWebExchangeFirewall @Bean Closes gh-15987	1 year ago
Scott Murphy Heiberg	18dba34bde	Make RequestMatcherDelegatingAuthorizationManager Post-Processable Closes gh-15948	1 year ago
Josh Cummings	c1857c0308	Fix Formatting Issue gh-15771	1 year ago
chao.wang	690e012fb1	Improve OidcBackChannelLogoutTokenValidator error when provider issuer is missing Closes gh-15771	1 year ago
Josh Cummings	97cefa6830	Update Formatting Issue gh-15714	1 year ago
tugjg	f836efb912	Address unnecessary method invocation Closes gh-15714	1 year ago
Hero Wanders	f372f5cf52	Replace OidcSessionStrategy References with OidcSessionRegistry	1 year ago
Josh Cummings	5c604b95fb	Correct PostFilterAuthorizationMethodInterceptor Target Type Previously, `postFilterAuthorizationMethodInterceptor` mistakenly was published as an `Advisor`. Because `MethodSecurityAdvisorRegistrar` re-publishes each pre/post annotation interceptor also as an `Advisor`, this resulted in a duplicate advisor for `@PostFilter`. Closes gh-15651	1 year ago
Daniel Garnier-Moiroux	b92ed92548	Fix checkstyle errors with @Deprecated	1 year ago
Daniel Garnier-Moiroux	79fb0113c8	Bump io-spring-javaformat from 0.0.42 to 0.0.43 Bumps `io-spring-javaformat` from 0.0.42 to 0.0.43. Updates `io.spring.javaformat:spring-javaformat-checkstyle` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) Updates `io.spring.javaformat:spring-javaformat-gradle-plugin` from 0.0.42 to 0.0.43 - [Release notes](https://github.com/spring-io/spring-javaformat/releases) - [Commits](spring-io/spring-javaformat@v0.0.42...v0.0.43) --- updated-dependencies: - dependency-name: io.spring.javaformat:spring-javaformat-checkstyle dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: io.spring.javaformat:spring-javaformat-gradle-plugin dependency-type: direct:production update-type: version-update:semver-patch ... --- Manual updates: - Adhere to rule where `@Deprecated` annotations and `@deprecated` javadoc comments MUST be used together Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
baezzys	3d4bcf1b44	fix: Restrict automatic CORS configuration to UrlBasedCorsConfigurationSource - Update CORS configuration logic to automatically enable .cors() only if a UrlBasedCorsConfigurationSource bean is present. - Modify applyCorsIfAvailable method to check for UrlBasedCorsConfigurationSource instances.	2 years ago
Josh Cummings	dab48d25b0	Improve Error Message When Registration Missing Closes gh-15363	2 years ago
Josh Cummings	7422a1134a	Allow logout+jwt JWT type Closes gh-15003	2 years ago
Josh Cummings	6aabd768a8	Pick MvcRequestMatcher for MockMvc requests Closes gh-13849	2 years ago
Josh Cummings	cdd626644e	Use Request-Level Servlet Context Spring Security cannot use the ServletContext attached to the ApplicationContext since there may be child ApplicationContext's with their own ServletContext. Because of that, it is necessary to always use the ServletContext attached to the request. Closes gh-14418	2 years ago
Josh Cummings	5a798e93f1	Polish MVC Tests Issue gh-14418	2 years ago
Marcus Hert Da Coregio	08f11f06ab	Revert unnecessary commits from main Issue gh-15016	2 years ago
sheheryarumair	0e211382ee	Remove useBase64 parameter	2 years ago
Josh Cummings	664dfd9b45	Defer Anonymous Filter Construction By delaying when the AnonymousAuthenticationFilter is constructed, it's now possible to call the principal and filter methods inside of a custom DSL implementation. This does not extend to setting the key or the authentication provider though, as these must be set during the init phase. Closes gh-14941	2 years ago
Josh Cummings	2bcbef1695	Add Saml2Logout DSL Support Closes gh-14935	2 years ago
Josh Cummings	a4dbf458ab	Add relying-party-registrations#id Closes gh-14487	2 years ago
Marcus Hert Da Coregio	2fbbcc4bd0	Polish Method Authorization Denied Handling - Renamed @AuthorizationDeniedHandler to @HandleAuthorizationDenied - Merged the post processor interface into MethodAuthorizationDeniedHandler , it now has two methods handleDeniedInvocation and handleDeniedInvocationResult - @HandleAuthorizationDenied now handles AuthorizationDeniedException thrown from the method Issue gh-14601	2 years ago
Steve Riesenberg	fd891d8fe3	Add proxyBeanMethods=false Addresses too early creation warning of a configuration imported by ReactiveOAuth2ClientConfiguration. Closes gh-14900	2 years ago
Marcus Hert Da Coregio	61eba00654	Move HaveIBeenPwnedRestApiPasswordChecker to spring-security-web Prior to this commit, the implementation was placed in spring-security-core, however we do not want to introduce a dependency on spring-web and spring-webflux for that module. Issue gh-7395	2 years ago
Marcus Hert Da Coregio	8d914ef145	Add @AuthorizationDeniedHandler for Method Authorization Denied Handling Issue gh-14601	2 years ago
DingHao	75197ca531	inject PasswordEncoder into DaoAuthenticationProvider constructor Closes gh-14691	2 years ago
Marcus Hert Da Coregio	472c9f8275	Avoid initializing raw bean during runtime in native-images Closes gh-14825	2 years ago
Steve Riesenberg	39dbd24dcb	Polish gh-14742	2 years ago
Josh Cummings	bb43174752	Fix Bean Name Issue gh-14480	2 years ago
Josh Cummings	3f7355abc6	Synthesize all annotation attributes Issue gh-14601	2 years ago
sheheryarumair	33ebd5405a	Removed dataSource null validation Fixed data source validation	2 years ago
Josh Cummings	6f07d63938	Support SpEL Returning AuthorizationDecision Closes gh-14598	2 years ago
Josh Cummings	0a9c482f62	Revert "Support SpEL Returning AuthorizationDecision" This reverts commit `77f2977c55`.	2 years ago
Josh Cummings	77f2977c55	Support SpEL Returning AuthorizationDecision Closes gh-14599	2 years ago
Marcus Hert Da Coregio	d85857f905	Add Authorization Denied Handlers for Method Security Closes gh-14601	2 years ago
Max Batischev	ff19f04fca	Add JwtValidators append to default Implemented simplified creation of default OAuth2TokenValidator with additional validators. Closes gh-14831	2 years ago
Marcus Hert Da Coregio	7d66525e23	Add Compromised Password Checker Closes gh-7395	2 years ago
Steve Riesenberg	614123e6f9	Update tests that fail on Windows Issue gh-14609	2 years ago
Josh Cummings	44033cd8b9	Make Internal Logout URI Configurable Closes gh-14609	2 years ago
Josh Cummings	e18ec48134	Fix Test Issue gh-14553	2 years ago
Josh Cummings	662cfed349	Make Internal Logout URI Configurable Closes gh-14609	2 years ago
Josh Cummings	c95f009b23	Fix Test Issue gh-14553	2 years ago
Josh Cummings	9898e0e993	Move AuthorizationAdvisorProxyFactory To prevent package tangles Issue gh-14596	2 years ago
Josh Cummings	795e44d11f	Add Value-Type Ignore Support Issue gh-14597	2 years ago
Josh Cummings	ce54a6db18	Add TestAuthentication convenience method Issue gh-14597	2 years ago
Josh Cummings	d169d5a835	Add AuthorizeReturnObject Closes gh-14597	2 years ago
Josh Cummings	c611b7e33b	Add AuthorizationProxyFactory Reactive Support Issue gh-14596	2 years ago
Josh Cummings	f541bce492	Polish AuthorizationAdvisorProxyFactory - Ensure Reasonable Defaults - Simplify Construction Issue gh-14596	2 years ago

1 2 3 4 5 ...

2631 Commits (6.2.8)