Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
10,433 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

10433 Commits

Author SHA1 Message Date
Steve Riesenberg 802d5d466f
Update com.nimbusds to 9.35 
Closes gh-11239
 2022-05-16 10:38:42 -05:00
Steve Riesenberg e5c8d50d46
Update jackson-bom to 2.13.3 
Closes gh-11236
Closes gh-11237
Closes gh-11238
 2022-05-16 10:38:42 -05:00
Steve Riesenberg 29df19b168
Accept release candidate and milestone version upgrades for milestone releases 2022-05-16 10:30:29 -05:00
Josh Cummings 0814136ee8
Polish WebExpressionAuthorizationManager 
- Add support for request variables
- Added additional tests

Issue gh-11105
 2022-05-13 14:14:42 -06:00
Evgeniy Cheban c4766e64fe
Add AuthorizationManager that uses ExpressionHandler 
Closes gh-11105
 2022-05-13 14:05:34 -06:00
Evgeniy Cheban 2b4794475e
Polish gh-11188 2022-05-12 16:32:11 -05:00
Rob Winch f34ea188e2 RequestRejectedException is 400 by Default 
Closes gh-7568
 2022-05-12 10:32:27 -05:00
Marcus Da Coregio 0137f94f3b Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 12:32:16 -03:00
Marcus Da Coregio cddffa46b4 Add initScripts and projectProperties to IncludeCheckRemotePlugin 
Issue gh-10344
 2022-05-11 12:32:16 -03:00
Marcus Da Coregio 000b87f9aa Revert "Use Spring Framework version 6.0.0-M3" 
This reverts commit b803e845e7.
 2022-05-11 08:36:14 -03:00
Marcus Da Coregio 806e05855c Replace removed context-related operators 
Closes gh-11194
 2022-05-10 14:58:02 -03:00
Marcus Da Coregio b803e845e7 Use Spring Framework version 6.0.0-M3 
Closes gh-11193
 2022-05-10 14:49:02 -03:00
Evgeniy Cheban dbd96a9e3f
Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager 
Closes gh-11188
 2022-05-09 16:05:52 -06:00
Marcus Da Coregio dc2bd2b4f8 Update copyright headers 
Issue gh-10956
 2022-05-06 14:33:59 -03:00
Marcus Da Coregio de9b7b4fb8 Fix mvcMatchers overriding previous paths 
Closes gh-10956
 2022-05-06 14:33:59 -03:00
Marcus Da Coregio 995b2918bb Remove SAML Deprecations 
Closes gh-11077
 2022-05-06 10:15:42 -03:00
Marcus Da Coregio 195d767d98 Polish ServerWebExchangeDelegatingServerHttpHeadersWriter 
Issue gh-11073
 2022-05-06 09:43:34 -03:00
David Herberth 0e2fc51bad Add DelegatingServerHttpHeadersWriter 
Servlet Spring Security has DelegatingRequestMatcherHeaderWriter
the reactive world of Spring Security was missing a class to
conditionally write headers.

Closes gh-11073
 2022-05-06 09:43:34 -03:00
Josh Cummings c93c6b928e
Polish Relay State Resolver 
Issue gh-11065
 2022-05-05 17:42:02 -06:00
sebastiano f7a43e4989
Allow custom relay state 
Closes gh-11065
 2022-05-05 17:42:01 -06:00
Rob Winch 3c259b4be5 Fix WebSessionReactiveSecurityRepository Supports Cache 
Fix the checkstyle for this feature

Closes gh-8422
 2022-05-03 21:08:51 -05:00
Rob Winch 1ef738ba34 WebSessionReactiveSecurityRepository Supports Cache 2022-05-03 16:15:22 -05:00
Rob Winch dec0d97ef0 Multiple <authentication-manager> Do Not Duplicate Alias 
Previously, two authentication managers with different ids would duplicate
the alias to the global authentication manager. This would cause failures
for when allowBeanDefinitionOverriding = false.

This commit ensures that if the global authentication manager alias is
already set, then it is not set again. This means the first
<authentication-manager> will be used as the global AuthenticationManager.

Closes gh-8767
 2022-05-03 14:50:56 -05:00
Evgeniy Cheban 9193e46800 @EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy 
Removed proxy unwrapping in case of resolving Method Security annotations,
this cause an issue when interfaces which are implemented by the proxy was skipped,
resulting in a missing security checks on those methods.

Closes gh-11175
 2022-05-03 13:15:53 -05:00
Josh Cummings 4ebd37ae77
Add 5.8 Support 2022-05-03 09:04:34 -06:00
Josh Cummings 1f43733749
Add 5.7.x branch to playbook 2022-05-03 09:03:51 -06:00
Josh Cummings 397ccbc1c8
Add 5.7 Schema 2022-05-03 09:03:50 -06:00
Ulrich Grave c6038b1ea3 Add Jackson Support for Saml2AuthenticationException 
Closes gh-11169
 2022-05-02 16:24:43 -05:00
Emil Sierżęga 33ee3058d4 Add missing insufficientAuthentication property in messages_*.properties 2022-04-29 10:38:42 +02:00
Emil Sierżęga da2a68e182 Add missing untranslated properties in messages_lt 2022-04-29 10:38:42 +02:00
Emil Sierżęga 5832202a4d Fixed bad property name in messages_it 2022-04-29 10:38:42 +02:00
Emil Sierżęga 22dac674da Remove unnecessary dots from messages_cs_CZ 2022-04-29 10:38:42 +02:00
Emil Sierżęga 8b06a4bbe2 Remove trailing space from messages_ru 2022-04-29 10:38:42 +02:00
Emil Sierżęga 47c4b0426d Add missing badLdapConnection property in messages_*.properties 2022-04-29 10:38:42 +02:00
Eleftheria Stein 48ac100a92 Remove WebSecurityConfigurerAdapter from Kotlin tests 
Issue gh-10902
 2022-04-28 16:13:35 +02:00
Eleftheria Stein 736f439bb5 Detect UserDetailsService bean in X509 configuration 
Closes gh-11174
 2022-04-28 14:48:40 +02:00
Eleftheria Stein 9dd393cb9c Update remember me Javadocs 
Describe the new behaviour for retrieving the UserDetailsService

Issue gh-11170
 2022-04-28 14:48:29 +02:00
Marcus Da Coregio a0232ed135 Add shouldFilterAllDispatcherTypes to Kotlin DSL 
Closes gh-11153
 2022-04-28 08:34:48 -03:00
Eleftheria Stein ac06057cf6 Detect UserDetailsService bean in remember me 
Closes gh-11170
 2022-04-28 12:44:27 +02:00
Rob Winch 451873fdb7 RepositoryRef Serializable 
This is necessary to support caching of tasks that use RepsitoryRef as
inputs or outputs.

Issue gh-11158
 2022-04-27 19:07:48 +02:00
Rob Winch e4f5d2c6ef Fix release-next-version.yml 
- Improve speed by using single job and multiple steps
- Check output of tasks rather than rely on status codes to fail

Issue gh-11158
 2022-04-27 19:07:36 +02:00
Rob Winch 57cf0bf3bb GitHubMilestoneNextVersionDueTodayTask Outputs to File 
Rather than having the task fail if the milestone is not due today, it now
outputs to a file true or false. This allows the pipeline to determine
if it should continue or not without causing a failure.

Issue gh-11158
 2022-04-27 19:07:21 +02:00
Rob Winch 78f059e446 GitHubMilestoneHasNoOpenIssuesTask outputs to a file 
Rather than having the task fail if the milestone is not due today, it now
outputs to a file true or false. This allows the pipeline to determine
if it should continue or not without causing a failure.

Closes gh-11158
 2022-04-27 19:06:53 +02:00
Eleftheria Stein 7dc4364f43 Fix Kotlin mockk test compatibility 
Issue gh-11039
 2022-04-26 18:13:29 +02:00
nor-ek 558bb161c5 Security Context Dsl 
Closes gh-11039
 2022-04-26 17:38:00 +02:00
Eleftheria Stein eba091bad5 Push tag in release workflow 
Issue gh-11023
 2022-04-26 10:10:27 +02:00
Eleftheria Stein 8914f06eca Use non-default access token in release pipeline 
This ensures that subsequent workflows are triggered

Closes gh-11022
 2022-04-26 09:54:40 +02:00
Marcus Da Coregio 9a57b42786 Fix setServletContext not being called for AuthorizationManagerWebInvocationPrivilegeEvaluator 
Issue gh-10908
 2022-04-25 09:53:20 -03:00
Marcus Da Coregio 4c5d404c46 Exclude duplicate issues from changelog 
Closes gh-11154
 2022-04-20 09:03:57 -03:00
Rob Winch e79b6b3ac8 Default SecurityContextHolderFilter 
Closes gh-11110
 2022-04-15 14:59:38 -05:00