Commit Graph

952 Commits

Author SHA1 Message Date
Rob Winch 8291f20796 DaoAuthenticationProvider uses DelegatingPasswordEncoder
This means that passwords will be encoded with BCrypt by default

Fixes: gh-2775
2017-10-24 07:56:28 -05:00
Rob Winch d19b222b55 UserDetailsRepositoryReactiveAuthenticationManager uses DelegatingPasswordEncoder
This means passwords will be encoded with BCrypt by default

Issue: gh-2775
2017-10-24 07:56:28 -05:00
Joe Grandja f0c9f85292 spring-security-jwt-jose -> spring-security-oauth2-jose
Fixes gh-4595
2017-10-23 09:04:01 -04:00
Joe Grandja a49047dec5 Fix OAuth2LoginApplicationTests
Issue gh-4659
2017-10-20 04:41:48 -04:00
Joe Grandja ee6c1f2ddd Add temporary GlobalAuthenticationConfigurerAdapter
Fixes gh-4664
2017-10-19 12:15:35 -04:00
Joe Grandja e91da5959c Remove auto-config classes from oauth2Login sample
Fixes gh-4638
2017-10-19 11:27:22 -04:00
Joe Grandja 1e891b38ab Rename scope -> scopes for Set types
Fixes gh-4644
2017-10-18 17:56:39 -04:00
Rob Winch b81c1ce2c0 Move spring-security-webflux into spring-security-web
Fixes gh-4662
2017-10-18 16:20:09 -05:00
Joe Grandja 7b8d131386 Fix package tangles -> OAuth2/Oidc AuthenticationProvider's
Fixes gh-4614
2017-10-16 20:56:32 -04:00
Joe Grandja 3c824dc44b Fix package tangles -> OAuth2UserService
Fixes gh-4614
2017-10-13 18:59:41 -04:00
Joe Grandja cfa4858b04 Fix package tangles -> AuthorizationGrantTokenExchanger
Fixes gh-4614
2017-10-13 16:35:48 -04:00
Rob Winch 211e8eae90 Remove formLogin() and httpBasic() from defaults 2017-10-12 16:41:01 -05:00
Rob Winch 792944eee7 HttpSecurity->ServerHttpSecurity
Issue gh-4615
2017-10-11 13:58:24 -05:00
Rob Winch a5af2a07d7 HttpHeadersWriter->ServerHttpHeadersWriter
Issue gh-4615
2017-10-11 13:58:09 -05:00
Rob Winch d0de8d40dd WebFilterChainFilter -> WebFilterChainProxy
Issue gh-4615
2017-10-11 13:57:50 -05:00
Rob Winch 4681697581 UserDetailsRepository->ReactiveUserDetailsService
Issue gh-4615
2017-10-11 13:57:30 -05:00
Joe Grandja d840090cb0 Add support for implicit grant type
Fixes gh-4500
2017-10-11 13:54:59 -04:00
Joe Grandja bd4d814e4b Fix bug in oauth2Login sample 2017-10-10 14:40:11 -04:00
Joe Grandja 6b16fa0d8c Polish OAuth Security Configurers 2017-10-10 14:38:06 -04:00
Joe Grandja 97c938e7f3 Extract authentication logic from AuthorizationCodeAuthenticationFilter
Fixes gh-4590
2017-10-10 14:38:06 -04:00
Rob Winch 60b5a18a49 Update thymeleaf-layout-dialect-2.2.2
Issue: gh-4608
2017-10-09 16:12:57 -05:00
Rob Winch 72bbb27bf8 Update appengine-gradle-plugin to 1.3.3
Issue: gh-4608
2017-10-09 16:12:41 -05:00
Rob Winch 448ee08f28 Update to Boot 2.0.0.M4
Issue: gh-4608
2017-10-09 16:12:22 -05:00
Joe Grandja 5811624bbe Polish endpoint package
* Remove ErrorResponseAttributes
* Rename AuthorizationRequestAttributes -> AuthorizationRequest
* Remove AuthorizationCodeTokenRequestAttributes
* Rename TokenResponseAttributes -> TokenResponse

Issue gh-4593
2017-10-06 18:51:24 -04:00
Joe Grandja eca2b67137 ClientRegistration supports 'baseUrl' uri variable
Fixes gh-4589
2017-10-05 20:35:51 -04:00
Joe Grandja eb320bfed4 AuthorizationCodeAuthenticationProcessingFilter -> AuthorizationCodeAuthenticationFilter 2017-10-05 16:40:12 -04:00
Joe Grandja 5c14e48b18 Add OAuth2UserAuthenticationProvider
Moved logic from AuthorizationCodeAuthenticationProvider
to OAuth2UserAuthenticationProvider (new) related to
loading user attributes via OAuth2UserService.

This re-factor is part of the work required for Issue gh-4513
2017-10-05 15:15:35 -04:00
Joe Grandja 0d516ca32c Rename scopes -> scope 2017-10-02 15:50:16 -04:00
Joe Grandja fb57111ecd redirect-uri property supports 'baseRedirectUrl' uri variable
Fixes gh-4589
2017-10-02 15:29:03 -04:00
Joe Grandja 66647070ab Default login page supports Iterable<ClientRegistration>
Fixes gh-4596
2017-09-29 19:54:17 -04:00
Joe Grandja ad91adf9dc Retrieving the UserInfo is conditional
Fixes gh-4451
2017-09-29 10:51:16 -04:00
Joe Grandja 8448a54678 Remove ClientRegistrationRepository.getRegistrations()
Fixes gh-4582
2017-09-28 07:02:59 -04:00
Joe Grandja 814742fef6 Rename ClientRegistration.clientAlias -> registrationId
Fixes gh-4575
2017-09-27 09:14:55 -04:00
Joe Grandja 38be35677d Add userNameAttributeName to ClientRegistration
Fixes gh-4580
2017-09-26 21:55:19 -04:00
Joe Grandja 0e9b2807bf Split up NimbusOAuth2UserService
Fixes gh-4447
2017-09-26 11:32:49 -04:00
Rob Winch 71b1720cfe Use WebHttpHandlerBuilder in samples
DispatcherHandler.toHttpHandler was removed
2017-09-22 20:36:34 -05:00
Joe Grandja c54c622124 Re-structure OAuth2AuthenticationToken
Fixes gh-4553
2017-09-19 16:35:43 -04:00
Rob Winch c46243594a Use appengine-gradle-plugin
The com.google.appengine:gradle-appengine-plugin is deprecated
2017-09-18 12:00:50 -05:00
Rob Winch f8ee9944ff Copyright date range 2017-09-18 11:18:46 -05:00
Rob Winch 1f4082e754 Fix copyright lines 2017-09-18 11:11:25 -05:00
Rob Winch 3ecf3ea034 Fix double * in Copyright headers 2017-09-18 10:47:26 -05:00
Rob Winch 455e2bab90 Update to Gradle 4.1 2017-09-18 10:19:59 -05:00
Rob Winch 404a8e793e Add WithMockUser & mutateWith to WebFlux Samples 2017-09-18 10:18:11 -05:00
Rob Winch 21f8ee7f36 Use basicAuthenticationCredentials 2017-09-13 15:31:32 -05:00
Joe Grandja 65b968f04a Move servlet-specific classes to 'web' package
Fixes gh-4366
2017-09-13 16:13:32 -04:00
Rob Winch 0a36359f11 WebFlux HTTP Basic & Form Login Sessions
By default both HTTP Basic and form log are enabled. Now HTTP Session will
not be used for HTTP Basic, but will be for form log in.
2017-09-13 14:47:44 -05:00
Joe Grandja e31684bcf5 Update google defaults 2017-09-13 14:04:18 -04:00
Rob Winch 1fe414379c Simplify hellowebfluxfn
This sample should be absolute minimal example
2017-09-13 10:45:11 -05:00
Rob Winch 164404c7d3 Simplify hellowebflux
This sample should be absolute minimal example.
2017-09-13 10:40:50 -05:00
Joe Grandja 306f81b7f7 Minor renames to oauth2 client properties
Fixes gh-4296
2017-08-30 11:51:06 -04:00
Joe Grandja 4951550d7d Add context path to authorization request URI
Fixes gh-4510
2017-08-26 18:55:23 -04:00
Joe Grandja 91b0bd4ba5 Provide oauth2login.tokenEndpoint config
Fixes gh-4506
2017-08-23 17:18:01 -04:00
Joe Grandja 93c2b2533e Allow configuring request paths for oauth2 filters
Fixes gh-4473
2017-08-23 17:17:01 -04:00
Rob Winch 0eb0e3556b Add hellowebflux-method sample
Fixes gh-4503
2017-08-17 16:42:01 -05:00
Rob Winch e16b8e7976 Fix logback-test.xml 2017-08-17 16:42:01 -05:00
Joe Grandja c204cc2c31 Completed implementation in ClaimAccessor's
Fixes gh-4449
2017-07-28 09:31:38 -04:00
Joe Grandja e8c6a1acc8 Move user-name-attribute-name to clients-defaults.yml
Fixes gh-4456
2017-07-28 09:31:37 -04:00
Rob Winch 6590fc31cd Use withMutator
Fixes gh-4455
2017-07-14 11:01:52 -05:00
Rob Winch 03f2d654ad Fix WebTestClient Support
Fixes gh-4419
2017-07-13 21:02:07 -05:00
Joe Grandja 67f80dfadc Update oauth2Login sample doc -> user authority mapping
Fixes gh-4373
2017-07-12 17:35:16 -04:00
Joe Grandja c42b9a68b1 Update oauth2Login sample doc
Fixes gh-4452
2017-07-12 17:35:16 -04:00
Joe Grandja 9cfb890207 Use id_token for user authentication
Fixes gh-4410
2017-07-07 12:44:26 -04:00
Rob Winch 236e87fc37 Comment WebTestClient Integration
Issue gh-4419
2017-06-23 20:51:58 -05:00
Rob Winch 8130965259 Fixes for changes in SPR-15657
Fixes gh-4408
2017-06-20 16:42:24 -05:00
Rob Winch ca6348800e HttpSecurity.authorizeExchange() allows Method Chaining
Fixes gh-4397
2017-06-15 15:50:30 -05:00
Rob Winch 9141a8a7c0 Add Multiple Reactive HttpSecurity
Fixes gh-4395
2017-06-15 13:00:19 -05:00
Matt Raible 3624ba5b4e Remove Okta Add Authorization Server section
Fixes gh-4391
2017-06-15 11:51:56 -04:00
Rob Winch a34bf01754 HelloWebfluxApplicationTests do not start a server 2017-06-13 15:16:01 -05:00
Rob Winch 337317a060 WebFlux now uses ParsingPathMatcher
Fixes gh-4388
2017-06-09 22:25:45 -05:00
Rob Winch d09fb5b500 Move UserDetailsRepository to core.userdetails
Fixes gh-4383
2017-06-09 16:07:09 -05:00
Joe Grandja eb6bd9bea9 Update groupId io.projectreactor.addons -> io.projectreactor
Fixes gh-4377
2017-06-08 14:06:51 -04:00
Thai Ha 489ffcfce5 UserInfoTypeConverter is registered if client is registered
Fixes gh-4364
2017-06-02 16:03:33 -04:00
Joe Grandja 6c0ecea494 Use java.util.Function instead of Converter
Fixes gh-4323
2017-06-01 17:25:39 -04:00
Joe Grandja ae17cc255b Implement protected resource call flow in oauth2login sample
Fixes gh-4362
2017-06-01 14:32:29 -04:00
Rob Winch 915de03f42 Polish ExchangeMutatorWebFilter Support
Issue gh-4343
2017-05-31 13:23:55 -05:00
Rob Winch 6aa7f05579 Polish ExchangeMutatorWebFilter usage 2017-05-30 16:37:21 -05:00
Joe Grandja 4476df93e9 Change ResponseType from enum to class
Fixes gh-4292
2017-05-30 16:11:57 -04:00
Joe Grandja 435e389609 Change ClientAuthenticationMethod from enum to class
Fixes gh-4313
2017-05-30 14:41:59 -04:00
Joe Grandja e5ceeb4e22 Resolve compile errors -> MockServerExchangeMutator removed
Fixes gh-4356
2017-05-26 07:17:32 -04:00
Joe Grandja 86d0fd77a7 Fix HelloWebflux tests
Fixes gh-4353
2017-05-24 21:27:09 -04:00
Matt Raible dd8952f700 Update Okta instructions in oauth2Login sample
Fixes gh-4352
2017-05-24 16:15:53 -04:00
Joe Grandja 521feb9a1b Update Boot samples to 2.0.0.M1
Fixes gh-4339
2017-05-24 11:32:00 -04:00
Rob Winch bc141febdb Demo mock support with RouterFunction 2017-05-23 16:29:30 -05:00
Rob Winch a79a81cd24 Simplify webflux samples
Remove the custom user from the hellowebflux and hellowebfluxfn samples.
2017-05-23 15:59:16 -05:00
Rob Winch 247635ed92 WebFluxSecurityConfiguration defaults HTTP Basic
Fixes gh-4346
2017-05-19 21:50:06 -05:00
Rob Winch 1cec497a50 Add method chaining for AuthorizeExchangeBuilder
Fixes gh-4345
2017-05-19 21:25:50 -05:00
Rob Winch 0428cdd934 Add @EnableWebFluxSecurity
Fixes gh-4344
2017-05-19 21:11:42 -05:00
Rob Winch 7bc98db23c Add WebTestClient test support
SecurityExchangeMutators

Fixes gh-4343
2017-05-19 15:09:23 -05:00
Rob Winch d9c7f42b4c Rename Application->HelloWebFluxApplication 2017-05-17 15:34:07 -05:00
Rob Winch f01989ff49 Add hellowebfluxfn
Fixes gh-4338
2017-05-16 15:39:39 -05:00
Rob Winch d81b436e5d Remove pom.xml from build
Gradle is easy enough to import into IDEs, so pom.xml should no
longer be necessary.

This commit removes the pom.xml files from the build.

Fixes gh-4283
2017-05-11 14:32:36 -05:00
Rob Winch b4f2777755 Add WebFlux
Fixes gh-4128
2017-05-10 00:13:02 -05:00
Rob Winch 514f0053cc Use dependency-management.gradle 2017-05-09 02:39:49 -05:00
Joe Grandja d04bfaca5a Update oauth2login README with GitHub/Facebook/Okta
* Add instructions to the oauth2login sample README for setting up
OAuth 2.0 Login for GitHub, Facebook, and Okta
* Change base package for oauth2login sample

Fixes gh-4287, Fixes gh-4288, Fixes gh-4289
2017-05-04 12:37:35 -04:00
Rob Winch 021ee0d317 Spring Data findOne->findById 2017-05-04 09:38:03 -05:00
Rob Winch 7fcc3f58e4 Polish Logging for Tests
This should drastically reduce the log size for integration tests
fixing the build for Travis which limits the console output.
2017-05-01 14:00:40 -05:00
Joe Grandja 829c386756 Add support for OAuth 2.0 Login
Fixes gh-3907
2017-04-28 10:58:59 -04:00
Rob Winch dd6fc48dd8 Standardize Build
The build now uses spring build conventions to simplify the build

Fixes gh-4284
2017-04-21 10:55:05 -05:00
Rob Winch 5ba051aa70 Reset browser to accomidate every domain
Fixes gh-4304
2017-04-21 10:52:31 -05:00
Rob Winch 59a0ba285f Fix Sonar Issues
Fixes gh-4300
2017-04-21 10:49:59 -05:00