7498 Commits

Author SHA1 Message Date
Josh Cummings
7269aacbdd Password Modify Extended Operation Support
LdapUserDetailsManager can be configured to either use direct
attribute modification or the LDAP Password Modify Extended Operation
to change a user's password.

Fixes: gh-3392
2018-10-15 12:24:39 -06:00
Josh Cummings
b9ca1400e3 UnboundIdContainer Random Port Support
Setting a port of 0 will now induce the container to select a random
port.

Fixes: gh-5920
2018-10-15 12:24:39 -06:00
Josh Cummings
b9c499d8c8 Polish UnboundIdContainerTests
Basic server startup test now asserts a successful server startup
instead of a failed one.

Issue: gh-5920
2018-10-15 12:24:39 -06:00
Josh Cummings
22bd8f1c1f Reactive Jwt Authentication Converter Support
Fixes: gh-5092
2018-10-15 11:55:12 -05:00
Rob Winch
01b47a8b2f Update to Thymeleaf 3.0.10.RELEASE
Fixes: gh-5960
2018-10-15 11:42:20 -05:00
Rob Winch
c0e9488f1d Update to htmlunit-driver 2.33.0
Fixes: gh-5959
2018-10-15 11:42:13 -05:00
Rob Winch
4b72429b00 Update to Jackson 2.9.7
Fixes: gh-5958
2018-10-15 11:42:07 -05:00
Rob Winch
180c6fe24d Update to GAE 1.9.66
Fixes: gh-5957
2018-10-15 11:42:01 -05:00
Rob Winch
d40a8e09c3 Update to Spring Data Lovelace SR1
Fixes: gh-5949
2018-10-15 09:36:45 -05:00
Rob Winch
ad05c756de Update to Spring Framework 5.0.1.RELEASE
Fixes: gh-124
2018-10-15 09:36:45 -05:00
Joe Grandja
88f8bfeb57 Polish docs for WebClient OAuth2 Servlet Setup 2018-10-15 09:44:22 -04:00
Joe Grandja
07d2e43d7a Deprecate NimbusAuthorizationCodeTokenResponseClient
Fixes gh-5954
2018-10-15 09:01:19 -04:00
Joe Grandja
26fcde6f8e Document new features for OAuth Client
Fixes gh-5832
2018-10-12 19:24:02 -04:00
Rob Winch
a26eadc600 Snapshot Build uses Spring 5.+
Fixes: gh-5951
2018-10-12 16:57:08 -05:00
Rob Winch
e782cb09cb Update to Reactor Californium-SR1
Fixes: gh-5950
2018-10-12 16:52:27 -05:00
Rob Winch
7fcc47850f Update to Spring Boot 2.1.0.M4 2018-10-12 16:49:08 -05:00
Rob Winch
93ca455405 OAuth2LoginAuthenticationFilter ignores authenticated Users
This ensures that OAuth2 Client support works with the same log in URL as
oauth2 login.

Fixes: gh-5915
2018-10-12 16:29:27 -05:00
Thomas Jensen
e8045838e3 Fix minor typo in secure-objects.adoc 2018-10-10 10:43:34 -05:00
Josh Cummings
2307b01a7a
Resource Server Docs - Servlet
Fixes: gh-5912
2018-10-05 15:46:37 -06:00
Rob Winch
cbb25f7b87 Polish Getting Spring Security Reference
Fixes: gh-5921
2018-10-04 17:27:09 -05:00
John Lin
fe080cadbe Fix method name in the Contact sample code 2018-10-03 16:45:18 -04:00
Johnny Lim
68ffa0fece Add a missing space in Secured.value() signature 2018-10-03 14:47:48 -04:00
Tadaya Tsuyukubo
12050404ad Populate test security context with authentication
Add setAuthentication method on TestSecurityContextHolder.
2018-10-03 14:24:45 -04:00
Rob Winch
44ee15cb4d Next Development Version 2018-09-21 09:32:51 -05:00
Rob Winch
c073705d55 Release Spring Security 5.1.0.RELEASE
Fixes: gh-5895
5.1.0.RELEASE
2018-09-21 08:13:44 -05:00
John Lin
69b71ee0ed Remove unused variables in ConsensusBased and UnanimousBased 2018-09-21 08:12:40 -05:00
Rob Winch
5d18bb68ed Add @formatter to @EnableWebFluxSecurity Javadoc
Fixes: gh-5898
2018-09-21 08:11:50 -05:00
Rob Winch
e67264ae2c Update to Spring Data Lovelace-RELEASE
Fixes: gh-5885
2018-09-21 07:25:16 -05:00
Rob Winch
dd82d114c0 Update to Spring Framework 5.1.0.RELEASE
Fixes: gh-5883
2018-09-21 01:04:16 -05:00
Rob Winch
eca0b7bc04 Update to Reactor Californium-RELEASE
Fixes: gh-5884
2018-09-21 01:04:16 -05:00
Rob Winch
45a9c0fd54 Polish Automatically Add CsrfServerLogoutHandler
Issue: gh-5337
2018-09-21 00:59:36 -05:00
Eric Deandrea
b060ec050a Automatically add CsrfServerLogoutHandler if csrf enabled
The configuration DSL should automatically add CsrfServerLogoutHandler if csrf is enabled

Fixes gh-5337
2018-09-21 00:59:36 -05:00
Rob Winch
725b3b5482 Fix OAuth2AuthorizationCodeGrantWebFilter works w/ /{action/
Issue: gh-5856
2018-09-20 21:39:09 -05:00
Vedran Pavic
79828d4f7b Polish WebFlux Referrer-Policy header config 2018-09-20 17:14:16 -05:00
Joe Grandja
9565e90b6e Remove oauth2-oidc-sdk dependency from oauth2-jose module
Fixes gh-5891
2018-09-20 15:20:11 -04:00
Joe Grandja
d46f83caf4 Ensure consistent matching of redirect_uri
Fixes gh-5890
2018-09-20 14:30:41 -04:00
Josh Cummings
77fa495860
DelegatingOAuth2TokenValidator Varargs Constructor
Fixes: gh-5889
2018-09-20 10:45:51 -06:00
Rob Winch
8a49c431c3 Add OAuth2ClientSpec.and
Fixes: gh-5888
2018-09-20 10:19:21 -05:00
Josh Cummings
73c1abbba0
EnableGlobalMethodSecurity Misconfiguration Check
This polishes the EnableGlobalMethodSecurity misconfiguration check to
not error if the user has specified a custom method security metadata
source.

Issue: gh-5341
2018-09-20 07:55:03 -06:00
artsiom
1e864ad764
Validate @EnableGlobalMethodSecurity usage
Fixes: gh-5341
2018-09-20 07:55:03 -06:00
Josh Cummings
d4c50a8fb8
Replace Section Links in What's New
Fixes: gh-5857
2018-09-20 07:50:30 -06:00
Rob Winch
508f0bc870 Remove Deprecated EvaluationContextExtensionSupport Usage
EvaluationContextExtensionSupport is deprecated. Instead classes should
implement EvaluationContextExtension directly.

Fixes: gh-5886
2018-09-19 16:52:16 -05:00
Rob Winch
b4cad2c8b9 Update to mockito-core:2.22.0
Fixes: gh-5882
2018-09-19 16:36:41 -05:00
Rob Winch
1483d148d8 Update to htmlunit:2.33
Fixes: gh-5881
2018-09-19 16:36:33 -05:00
Rob Winch
779da0a633 Update to hibernate-validator:6.0.13.Final
Fixes: gh-5880
2018-09-19 16:36:16 -05:00
Rob Winch
352db344a1 Update to Jetty 9.4.12.v20180830
Fixes: gh-5879
2018-09-19 16:36:01 -05:00
Rob Winch
1acc46e622 Update to unboundid-ldapsdk:4.0.8
Fixes: gh-5878
2018-09-19 16:35:45 -05:00
Rob Winch
a23830d096 Update to jaxb 2.3.0.1
Fixes: gh-5877
2018-09-19 16:35:35 -05:00
Rob Winch
c10a4686bf Update to cglib:cglib-nodep:3.2.8
Fixes: gh-5876
2018-09-19 16:35:26 -05:00
Rob Winch
9e0c7f17b7 Default RequestCache should ignore favicon
Fixes: gh-5875
2018-09-19 14:29:14 -05:00