Tim Boeckstaens
f180a04b74
Use final values in equals and hashCode
...
Closes gh-17584
Signed-off-by: Tim Boeckstaens <boeckstaenstim@gmail.com>
2025-07-31 10:12:24 -06:00
Rob Winch
2fdca16c1a
Merge branch '6.4.x' into 6.5.x
...
Closes gh-17634
2025-07-29 09:47:52 -05:00
Rob Winch
392129b616
Use 2004-present Copyright Header
...
The Spring portfolio is changing to use <inception-year>-present in
the copyright headers to simplify keeping headers up to date. This
commit updates the headers and the checkstyle accordingly.
The commit updated etc/checkstyle/header.txt
It also updated the copyright headers using the following find/replace:
Find: (Copyright \d{4})\s*(\-\d{4})? the original author or authors.
Replace: Copyright 2004-present the original author or authors.
Closes gh-17633
2025-07-29 09:45:23 -05:00
Josh Cummings
ea3ba62022
Correct Servlet Path JavaDoc
...
Initially PathPatternRequestMatcher was designed to match relative
to the servlet path. However, this was changed to be relative to
the context path. This commit updates the documentation and removes
references to the servlet path other than in the context of setting
a basePath to remove boilerplate.
Issue gh-16430
2025-07-07 11:34:29 -06:00
Andrey Litvitski
25d51a0d99
Include HTTP Method in equals and hashCode
...
Closes gh-17180
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
2025-07-02 13:18:36 -06:00
Joe Grandja
d622183e62
Merge branch '6.4.x' into 6.5.x
...
Closes gh-17216
2025-06-06 07:06:12 -04:00
Joe Grandja
a377175455
Merge branch '6.3.x' into 6.4.x
...
Closes gh-17215
2025-06-06 06:50:45 -04:00
Andrey Litvitski
b0f8aa5ea0
Fix to allow multiple AuthenticationFilter instances to process each request
...
Closes gh-17173
Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
2025-06-06 06:37:03 -04:00
Josh Cummings
8aaa9c28fa
Merge branch '6.4.x' into 6.5.x
2025-05-23 11:36:01 -06:00
Josh Cummings
2989d12743
Merge branch '6.3.x' into 6.4.x
2025-05-23 11:35:25 -06:00
Joaquin Santana
c0568ea9b0
Log Request Mismatch Only When Mismatches
...
Signed-off-by: Joaquin Santana <joaquinjsb@outlook.com>
2025-05-23 11:34:48 -06:00
Josh Cummings
78dd02a4c1
Merge branch '6.4.x' into 6.5.x
...
Closes gh-17147
2025-05-19 09:46:24 -06:00
Josh Cummings
edc8735eb8
Merge branch '6.3.x' into 6.4.x
...
Closes gh-17146
2025-05-19 09:46:10 -06:00
Mark Putsiata
cae3467a8d
Improve AbstractPreAuthenticatedProcessingFilter docs
...
Clarify misleading SecurityContextRepository setter documentation.
Note that AbstractPreAuthenticatedProcessingFilter saves the
SecurityContext upon successful authentication, and this behavior
can be customized via the setSecurityContextRepository setter.
Closes gh-14137
Signed-off-by: Mark Putsiata <m.putsiata@gmail.com>
2025-05-19 09:45:53 -06:00
yybmion
d48c463c03
Add logging to CsrfTokenRequestHandler implementations
...
Add trace-level logging to show the logical path of CSRF token processing
- Log token source (header or parameter) in resolveCsrfTokenValue
- Log request attribute names in handle methods
- Log failures in XorCsrfTokenRequestAttributeHandler (especially Base64 decoding)
- Add similar logging to XorServerCsrfTokenRequestAttributeHandler
Improves debugging capabilities without changing functionality.
Closes gh-13626
Signed-off-by: yybmion <yunyubin54@gmail.com>
2025-05-12 18:49:40 -06:00
Zhoudong
6624e302ac
Favor Spring Framework NonNull over Reactor NonNull
...
Signed-off-by: Zhoudong <jearton@users.noreply.github.com>
2025-05-06 10:52:05 -06:00
Josh Cummings
aa338e9b0d
Merge branch '6.4.x'
2025-05-02 10:58:22 -06:00
Josh Cummings
57fc29e614
Merge branch '6.3.x' into 6.4.x
...
Closes gh-17032
2025-05-02 10:57:55 -06:00
Josh Cummings
e48f26e51e
Propagate StrictFirewallRequest Wrapper
...
Closes gh-16978
2025-05-02 10:57:07 -06:00
Max Batischev
c855453e40
Fix Typo In SubjectDnX509PrincipalExtractorTests
...
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-04-29 12:25:41 -06:00
Tran Ngoc Nhan
29380a87a0
Polish javadoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-04-23 14:36:45 -06:00
Max Batischev
8525f0e3fd
Add FunctionalInterface To X509PrincipalExtractor
...
Closes gh-16949
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-04-23 14:27:42 -06:00
Josh Cummings
7d6bdfedc8
Add Null Guard for Authorization Result
2025-04-23 12:11:10 -06:00
Josh Cummings
0ab01eac14
Update Deprecated Security Usage
2025-04-23 12:11:08 -06:00
Josh Cummings
216680bb50
Update Deprecated Spring Jdbc Usage
2025-04-23 11:29:18 -06:00
Josh Cummings
2ad859a63c
Add Missing Deprecation Markers
2025-04-23 11:29:18 -06:00
Josh Cummings
3f7f3dabe7
Correct JavaDoc Class Reference
2025-04-23 11:29:18 -06:00
Daeho Kwon
9908d96644
DeferredCsrfToken Implements Supplier
...
Closes gh-16870
Signed-off-by: Daeho Kwon <trewq231@naver.com>
2025-04-09 14:24:11 -06:00
Josh Cummings
f93a7a2f85
Deprecate HandlerMappingIntrospectorRequestTransformer
...
Closes gh-16536
2025-04-07 13:56:18 -06:00
chu3la
8cbe02e3aa
Update WebAuthn Test Objects Class Names
...
Closes gh-16604
Signed-off-by: chu3la <elmansouri.houssam@gmail.com>
2025-04-03 16:33:34 -06:00
Josh Cummings
4cdc6dab21
Fix Formatting
...
Issue gh-16604
2025-04-03 12:55:51 -06:00
Vasanth
04d7130975
Update WebAuthn Test Objects Class Names
...
Renamed the WebAuthn test object class names
Closes gh-16604
Signed-off-by: Vasanth <76898064+vasanth-79@users.noreply.github.com>
2025-04-03 12:55:50 -06:00
Josh Cummings
b7d399ab89
Merge branch '6.4.x'
2025-04-01 12:02:53 -06:00
Josh Cummings
0954638d57
Merge branch '6.3.x' into 6.4.x
...
Closes gh-16862
2025-04-01 12:02:25 -06:00
DingHao
857ef6fe08
WithHttpOnlyCookie defaults to false
...
Closes gh-16820
Signed-off-by: DingHao <dh.hiekn@gmail.com>
2025-04-01 11:59:51 -06:00
Max Batischev
9a897d0b62
Add Support Postgres To JdbcUserCredentialRepository
...
Closes gh-16832
Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-03-31 16:43:36 -06:00
wtigerhyunsu
bdbf6a2be3
Add toString() to IpAddressMatcher.java
...
Closes gh-16795
Signed-off-by: wtigerhyunsu <jack951@naver.com>
2025-03-27 16:38:53 -06:00
Josh Cummings
99345537d6
Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter
...
Issue gh-16417
2025-03-26 16:38:39 -06:00
Josh Cummings
15d9c13984
Add RequestMatcher MigrationPath for SwitchUserFilter
...
To simplify migration, the filter's setter methods still use AntPathRequestMatcher.
Users can call the equivalent RequestMatcher setter methods to opt-in to the change early.
Issue gh-16417
2025-03-26 16:38:38 -06:00
Josh Cummings
1eec51ab6c
Polish SwitchUserFilterTests
...
Ensure that the appropriate HTTP Method is specified in tests
Issue gh-16417
2025-03-26 16:38:38 -06:00
Josh Cummings
1618963255
Deprecate AntPathRequestMatcher
...
Closes gh-16632
2025-03-26 13:40:05 -06:00
Josh Cummings
de07b1108f
Use PathPatternRequestMatcher in Web Components
...
This commit changes filters and resolvers that were using AntPathRequestMatcher as their
default to using PathPatternRequestMatcher.
Issue gh-16632
2025-03-26 13:28:58 -06:00
Josh Cummings
50ad378a29
Polish MockHttpServletRequest Usage
...
This commit makes so that the requestURI is set to a value that makes
sense with the other properties being mocked.
Issue gh-16632
2025-03-26 13:27:17 -06:00
Rob Winch
491d28b6bb
Merge branch '6.4.x'
...
- Fix WebAuthn saves Anonymous PublicKeyCredentialUserEntity
Closes gh-16821
2025-03-25 16:19:14 -05:00
Rob Winch
1f3dd53bdf
Fix WebAuthn saves Anonymous PublicKeyCredentialUserEntity
...
Closes gh-16606
2025-03-25 16:14:58 -05:00
Rob Winch
a6b5c05da9
Additional WebAuthn4jRelyingPartyOperationTests
...
- verify that anonymous users not saved
- verify that when user found the CredentialRecord is allowed
Issue gh-16385
2025-03-25 16:14:25 -05:00
Rob Winch
9c054474a8
Use Test Name Conventions
...
Issue gh-16385
2025-03-25 16:14:25 -05:00
Rob Winch
593f7c4490
Use !isAuthenticated
...
It's more verbose to see if the user is not null and not anonymous
Issue gh-16385
2025-03-25 16:14:25 -05:00
Rob Winch
4e20d56d2d
Fix format for WebAuthn4jRelyingPartyOperations
...
Issue gh-16385
2025-03-25 16:14:25 -05:00
Josh Cummings
05fdcd6a08
Deprecate MvcRequestMatcher
...
Closes gh-16631
2025-03-24 22:03:22 -06:00
