11627 Commits

Author SHA1 Message Date
Rob Winch
5a4b0a0ff7 Update hibernate-entitymanager to 5.4.31.Final
Closes gh-9714
2021-05-03 14:40:47 -05:00
Rob Winch
ce45657854 Update org.eclipse.jetty to 9.4.40.v20210413
Closes gh-9713
2021-05-03 14:40:45 -05:00
Rob Winch
349cdf7e59 Update ehcache to 2.10.9.2
Closes gh-9712
2021-05-03 14:40:43 -05:00
Rob Winch
5a7e096d0c Update io.spring.nohttp to 0.0.7
Closes gh-9711
2021-05-03 14:40:41 -05:00
Rob Winch
df83105599 Update io.spring.javaformat to 0.0.28
Closes gh-9710
2021-05-03 14:40:39 -05:00
Rob Winch
6d0df03a2d Disable Gradle updates 2021-05-03 14:38:01 -05:00
Rob Winch
09e5594fe3 Exclude minor version bump 2021-05-03 14:37:03 -05:00
Rob Winch
4e8b7dfb12 add minorVersionBump
Closes gh-9709
2021-05-03 14:36:47 -05:00
Rob Winch
8c11853eaf Add generateChangelog
Closes gh-9704
2021-04-30 16:10:08 -05:00
Rob Winch
985ae989fe Fix release-notes-sections.yml
- Relplace releasenotes with changelog
- List Breaking Changes first because issue is only included in first match
- Sort by title

Issue gh-9704
2021-04-30 16:10:08 -05:00
Joe Grandja
761e3a9dd8 JwtBearerOAuth2AuthorizedClientProvider checks for access token expiry
Fixes gh-9700
2021-04-30 10:12:38 -04:00
Josh Cummings
fc6fa79c86
Update permission-policy Docs
Issue gh-9262
2021-04-29 16:52:29 -06:00
Josh Cummings
ca2bc4feb3
Bump Schema Version
Closes gh-9694
2021-04-29 16:52:29 -06:00
Rob Winch
84d9629599 Add gitHubCheckMilestoneHasNoOpenIssues
Closes gh-9693
2021-04-29 16:15:02 -05:00
Rob Winch
23eee9aa03 Remove unused ratelimit code 2021-04-29 15:43:57 -05:00
Josh Cummings
4d564ffb50
Update AuthorizationManager references
Issue gh-9692
2021-04-28 11:58:30 -06:00
Josh Cummings
df6ebc7051
Rename DelegatingAuthorizationManager
Closes gh-9692
2021-04-28 09:53:25 -06:00
Josh Cummings
17cfc6ade3
Inline ResourceKeyConverterAdapter
Closes gh-9689
Closes gh-9626
2021-04-28 09:39:12 -06:00
Eleftheria Stein
4d610ca80c Update MockK to 1.11.0
Closes gh-9691
2021-04-28 13:25:06 +02:00
Eleftheria Stein
de0cd11a72 Fix PreAuthorize when returning Kotlin Flow
Closes gh-9676
2021-04-28 12:33:18 +02:00
Rob Winch
362855b8b8 docs.af.pivotal.io->docs-ip.spring.io
The build conventions plugin does not support a property, so we must
override the configuration for docs.host to docs-ip.spring.io

Closes gh-9686
2021-04-27 10:26:51 -05:00
Rob Winch
0a56dc4ef5 docs.af.pivotal.io->docs-ip.spring.io
Closes gh-9686
2021-04-27 09:54:05 -05:00
Rob Winch
b1c021ec56 docs.af.pivotal.io->docs-ip.spring.io
Closes gh-9686
2021-04-27 09:52:20 -05:00
Rob Winch
4a2f493be0 docs.af.pivotal.io->docs-ip.spring.io
Closes gh-9686
2021-04-27 09:30:41 -05:00
Thomas Vitale
e2993d93e1 Make Csrf cookie secure flag configurable (WebFlux)
Make the XSRF-TOKEN cookie secure flag configurable in CookieServerCsrfTokenRepository.

Closes gh-9678
2021-04-27 09:34:12 +02:00
Rob Winch
006b9b9607 master->main
Closes gh-9683
2021-04-26 16:55:43 -05:00
kevin
8ab7a27a20
Release ByteBuf
Closes gh-9661
2021-04-26 13:38:00 -06:00
kevin
ec46ce08c9
Release ByteBuf
Closes gh-9661
2021-04-26 13:22:06 -06:00
kevin
32ac31c101
Release ByteBuf
Closes gh-9661
2021-04-26 13:16:41 -06:00
Josh Cummings
2c625f30e0
Add NPE Guards
- Like values, names are only validated if they are not null

Closes gh-9598
2021-04-22 11:28:25 -06:00
Josh Cummings
cb6e4f4a11
Add NPE Guards
- Like values, names are only validated if they are not null

Closes gh-9598
2021-04-22 11:22:19 -06:00
Josh Cummings
b0011893d2
Update Copyright
Issue gh-9651
2021-04-20 10:43:20 -06:00
Tibor Koch
5da472f3be Fix ClassCastException
Closes gh-9651
2021-04-20 10:42:52 -06:00
Joe Grandja
99db0ca2c5 WebFlux httpBasic() matches on XHR requests
Closes gh-9660
2021-04-20 10:05:06 -04:00
Joe Grandja
c8b6dc390d WebFlux httpBasic() matches on XHR requests
Closes gh-9660
2021-04-20 09:42:08 -04:00
Joe Grandja
6725b1324a WebFlux httpBasic() matches on XHR requests
Closes gh-9660
2021-04-20 09:09:42 -04:00
Joe Grandja
53e94bca45 Add oauth2Login() tests
Issue gh-9548 gh-9660 gh-9266
2021-04-20 08:37:19 -04:00
Joe Grandja
5afeaa3ce7 WebFlux httpBasic() matches on XHR requests
Closes gh-9660
2021-04-20 08:36:42 -04:00
Craig Andrews
ab34c0308c
Add guard around logger.debug statement
The log message involves string concatenation, the cost of which
should only be incurred if debug logging is enabled

Issue gh-9648
2021-04-16 10:57:53 -06:00
Craig Andrews
a85ce9c91f
Add guard around logger.debug statement
The log message involves string concatenation, the cost of which
should only be incurred if debug logging is enabled

Issue gh-9648
2021-04-16 10:54:10 -06:00
Craig Andrews
b97e93a486
Add guard around logger.debug statement
The log message involves string concatenation, the cost of which
should only be incurred if debug logging is enabled

Issue gh-9648
2021-04-16 10:37:48 -06:00
Craig Andrews
7dc4de05b1 Add guard around logger.debug statement
The log message involves string concatenation, the cost of which should only be incurred if debug logging is enabled
2021-04-16 10:32:58 -06:00
Rob Winch
adf3e94c9f Fix HttpSecurity.addFilter* Ordering
Closes gh-9633
2021-04-14 21:18:51 -05:00
Rob Winch
6c5e92fb0b Fix HttpSecurity.addFilter* Ordering
Closes gh-9633
2021-04-14 21:01:09 -05:00
Rob Winch
26788a7309 Fix HttpSecurity.addFilter* Ordering
Closes gh-9633
2021-04-14 17:49:33 -05:00
Rob Winch
a31a855146 Fix HttpSecurity.addFilter* Ordering
Closes gh-9633
2021-04-14 17:47:31 -05:00
Denis Washington
521706d496 Limit oauth2Login() links to redirect-based flows
This prevents the generated login page from showing links for
authorization grant types like "client_credentials" which are
not redirect-based, and thus not meant for interactive use in
the browser.

Closes gh-9457
2021-04-14 06:41:52 -04:00
Denis Washington
d3af4f7354 Limit oauth2Login() links to redirect-based flows
This prevents the generated login page from showing links for
authorization grant types like "client_credentials" which are
not redirect-based, and thus not meant for interactive use in
the browser.

Closes gh-9457
2021-04-14 06:16:43 -04:00
Denis Washington
67d5520194 Limit oauth2Login() links to redirect-based flows
This prevents the generated login page from showing links for
authorization grant types like "client_credentials" which are
not redirect-based, and thus not meant for interactive use in
the browser.

Closes gh-9457
2021-04-14 05:36:57 -04:00
Denis Washington
2b4b856b32 Limit oauth2Login() links to redirect-based flows
This prevents the generated login page from showing links for
authorization grant types like "client_credentials" which are
not redirect-based, and thus not meant for interactive use in
the browser.

Closes gh-9457
2021-04-14 05:02:30 -04:00