Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-07-10 04:13:31 +00:00
Code Issues Packages Projects Releases Wiki Activity
12,813 Commits 38 Branches 348 Tags
Commit Graph

12813 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Lars Grefer
719149f01d Remove usages of Gradle's jcenter() repository 
Closes gh-10253
 2021-11-22 09:38:49 -03:00
Lars Grefer
ccd30607a9 Fix Gradle Deprecation Warnings 2021-11-22 09:38:44 -03:00
Lars Grefer
d736a2b358 Remove usages of Gradle's jcenter() repository 
Closes gh-10253
 2021-11-22 09:28:47 -03:00
Lars Grefer
cf95d3f91e Fix Gradle Deprecation Warnings 2021-11-22 09:28:24 -03:00
Lars Grefer
0541341201 Remove usages of Gradle's jcenter() repository 
Closes gh-10253
 2021-11-22 08:42:40 -03:00
Lars Grefer
5c012dc7eb Fix Gradle Deprecation Warnings 2021-11-22 08:42:40 -03:00
Josh Cummings
ba5a68ec63 Polish LdapAuthenticationPopulator Support 
PR gh-9276
 2021-11-19 12:19:43 -07:00
Filip Hanik
ae08608011 LdapAuthoritiesPopulator should be postProcessed 
To enable customizations through withObjectPostProcessor
 2021-11-19 12:03:44 -07:00
Josh Cummings
4374905801 Establish new Package Tangle Baseline 
Ran ./gradlew check && ./gradlew s101 -Ps101.label=baseline

Issue gh-10333
 2021-11-19 11:46:08 -07:00
Norbert Nowak
4bc55769a3 Import cleanup 
Issue gh-10333
 2021-11-19 11:46:08 -07:00
Norbert Nowak
4f186f2c1f Move Dsl files to annotation Package 
Closes gh-10333
 2021-11-19 11:46:08 -07:00
Jerome Prinet
0d8450a725 Bump up Gradle enterprise plugin to 3.7.2 2021-11-19 14:05:34 -03:00
Marcus Da Coregio
25feedb870 Fix removal of framework deprecated code 
Issue https://github.com/spring-projects/spring-framework/issues/27686
 2021-11-19 13:06:13 -03:00
Dávid Kováč
17e28fa7aa Update clockSkew javadoc according to implementation 
Closes gh-10174
 2021-11-19 13:48:32 +01:00
Dávid Kováč
aa1ef46d84 Update clockSkew javadoc according to implementation 
Closes gh-10174
 2021-11-19 13:33:05 +01:00
Marcus Da Coregio
01be7eca6e Improve log message when no CSRF token found 
Closes gh-10436
 2021-11-19 09:00:55 -03:00
Marcus Da Coregio
5a47e17a0d Improve log message when no CSRF token found 
Closes gh-10436
 2021-11-19 09:00:29 -03:00
Marcus Da Coregio
e05c9f4bba Improve log message when no CSRF token found 
Closes gh-10436
 2021-11-19 08:43:48 -03:00
Marcus Da Coregio
2bf7a5ae80 Improve log message when no CSRF token found 
Closes gh-10436
 2021-11-19 08:37:25 -03:00
Dávid Kováč
862122a267 Update clockSkew javadoc according to implementation 
Closes gh-10174
 2021-11-19 08:13:12 +01:00
Josh Cummings
bd42939b52 Fix AuthnRequestConverter Sample Typos 
Closes gh-10364
 2021-11-18 13:38:32 -07:00
Josh Cummings
c495ff8759 Fix AuthnRequestConverter Sample Typos 
Closes gh-10364
 2021-11-18 13:37:45 -07:00
Josh Cummings
16a21264d0 Polish AuthRequestConverter Sample Doc 
Issue gh-10364
 2021-11-18 13:36:31 -07:00
Josh Cummings
739cdc1a4c Polish AuthRequestConverter Sample Doc 
Issue gh-10364
 2021-11-18 13:36:10 -07:00
Josh Cummings
2dac210cac Polish AuthRequestConverter Sample Doc 
Issue gh-10364
 2021-11-18 13:32:36 -07:00
Norbert Nowak
1c0f092176 Fix AuthnRequestConverter Sample Typos 
Closes gh-10364
 2021-11-18 13:26:53 -07:00
Norbert Nowak
02cd1dd3c4 Fix AuthnRequestConverter Sample Typos 
Closes gh-10364
 2021-11-18 13:26:25 -07:00
Norbert Nowak
9316241c01 Fix AuthnRequestConverter Sample Typos 
Closes gh-10364
 2021-11-18 13:24:59 -07:00
Josh Cummings
ff7f8f913d Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:35:34 -07:00
Josh Cummings
6fcee07527 Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:35:22 -07:00
Josh Cummings
ef23337f90 Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:35:10 -07:00
Josh Cummings
b7a12e1b80 Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:34:40 -07:00
Jeff Maxwell
32d79f3f4e Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:33:42 -07:00
Jeff Maxwell
b7cc667d21 Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:33:27 -07:00
Jeff Maxwell
879b2d089f Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:29:23 -07:00
Josh Cummings
76aff9df62 Fix jwtDecoder Documentation Usage 
Closes gh-10505
 2021-11-16 15:22:55 -07:00
Josh Cummings
1b1c78f408 Fix jwtDecoder Documentation Usage 
Closes gh-10505
 2021-11-16 15:22:26 -07:00
Josh Cummings
e8bbe7a1ce Fix jwtDecoder Documentation Usage 
Closes gh-10505
 2021-11-16 15:21:59 -07:00
Josh Cummings
670d10dadd Fix jwtDecoder Documentation Usage 
Closes gh-10505
 2021-11-16 15:21:05 -07:00
Jeff Maxwell
088a24cf59 Fix jwtDecoder Documentation Usage 
Closes gh-10505
 2021-11-16 15:18:42 -07:00
Jeff Maxwell
3fb1565cc0 Fix jwtDecoder Documentation Usage 
Closes gh-10505
 2021-11-16 15:17:37 -07:00
Khaled Hamlaoui
00fafd878c Allow custom OAuth2ErrorHttpMessageConverter with OAuth2ErrorResponseErrorHandler 
Closes gh-10425
 2021-11-16 15:27:48 -06:00
Jeff Maxwell
5913501e1a #10505 Fix jwtDecoder 
Fixed jwtDecoder(JWTProcessor jwtProcessor, OAuth2TokenValidator<Jwt> jwtValidator)
 2021-11-16 14:05:43 -07:00
Khaled Hamlaoui
498636e26b Allow custom OAuth2ErrorHttpMessageConverter with OAuth2ErrorResponseErrorHandler 
Closes gh-10425
 2021-11-16 14:52:08 -06:00
Rob Winch
bd34d70f97 Prevent Save @Transient Authentication with existing HttpSession 
Previously, @Transient Authentication would get saved if an existing
HttpSession existed but it shouldn't.

This commit always prevents @Transient Authentication from being saved.

Closes gh-9992
 2021-11-16 14:45:34 -06:00
Rob Winch
96a6fef820 Prevent Save @Transient Authentication with existing HttpSession 
Previously, @Transient Authentication would get saved if an existing
HttpSession existed but it shouldn't.

This commit always prevents @Transient Authentication from being saved.

Closes gh-9992
 2021-11-16 14:44:49 -06:00
« Christophe
e85958f65c Fix CsrfConfigurer default AccessDeniedHandler consistency 
Fix when AccessDeniedHandler is specified per RequestMatcher on
ExceptionHandlingConfigurer.

This introduces evolutions on :
- CsrfConfigurer#getDefaultAccessDeniedHandler,
to retrieve an AccessDeniedHandler similar to the one used by
ExceptionHandlingConfigurer.
- OAuth2ResourceServerConfigurer#accessDeniedHandler, to continue to
handle CsrfException with the default AccessDeniedHandler implementation

Fixes: gh-6511
 2021-11-16 14:25:03 -06:00
« Christophe
4318a51971 Fix CsrfConfigurer default AccessDeniedHandler consistency 
Fix when AccessDeniedHandler is specified per RequestMatcher on
ExceptionHandlingConfigurer.

This introduces evolutions on :
- CsrfConfigurer#getDefaultAccessDeniedHandler,
to retrieve an AccessDeniedHandler similar to the one used by
ExceptionHandlingConfigurer.
- OAuth2ResourceServerConfigurer#accessDeniedHandler, to continue to
handle CsrfException with the default AccessDeniedHandler implementation

Fixes: gh-6511
 2021-11-16 14:22:35 -06:00
Rob Winch
0aa75e04b7 Fix imports for ChannelSecurityConfigurerTests 
gh-7997
 2021-11-16 14:07:53 -06:00
Stephane Nicoll
2e4c6c3bf1 Avoid using SpEL to change the meaning of the injection point 
This commit removes the use of SpEL expression and replaces it with an
explicit call to the underlying method.
 2021-11-16 13:53:29 -06:00