Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
8,462 Commits 32 Branches 333 Tags 111 MiB
Commit Graph

8462 Commits

Author SHA1 Message Date
Eleftheria Stein 669fdba98c Update to Spring Boot 2.2.9.RELEASE 
Closes gh-8921
 2020-08-05 11:21:45 +02:00
Eleftheria Stein b4d2217d45 Update to jaxb-impl 2.3.3 
Closes gh-8912
 2020-08-05 11:06:50 +02:00
Eleftheria Stein b1e09eddaa Update to Jackson 2.10.5 
Closes gh-8910
 2020-08-05 11:04:25 +02:00
Eleftheria Stein b425b622db Update to GAE 1.9.81 
Closes gh-8911
 2020-08-05 10:41:59 +02:00
Eleftheria Stein 6512c04079 Upgrade to embedded Apache Tomcat 9.0.37 
Closes gh-8913
 2020-08-05 10:37:32 +02:00
Dávid Kováč da4bd22c6d Resolve Bearer token after subscribing to publisher 
Bearer token was resolved immediately after calling method convert. In situations when malformed token was provided or authorization header and access token query param were present in request exception was thrown instead of signalling error.
After this change Bearer token is resolved on subscription and invalid states are handled by signaling error to subscriber.

Closes gh-8865
 2020-08-03 11:11:09 -05:00
Josh Cummings fd669f751d
Remove unused import 
Issue gh-8589
 2020-07-31 08:45:47 -06:00
Josh Cummings 510d1b8121
Polish to Avoid NPE 
Issue gh-5648

Co-authored-by: MattyA <mat.auburn@gmail.com>
 2020-07-30 17:59:31 -06:00
Josh Cummings 2f80b8a5be
Additional Jwt Validation Debug Messages 
Closes gh-8589

Co-authored-by: MattyA <mat.auburn@gmail.com>
 2020-07-30 17:58:16 -06:00
Josh Cummings 0efdb2c92c
Polish WebSecurityConfigurerAdapter JavaDoc 
Issue gh-8784
 2020-07-20 15:24:23 -06:00
Romil Patel 79d8b616f0
WebSecurityConfigurerAdapter JavaDoc 
Closes gh-8784
 2020-07-20 15:24:19 -06:00
Josh Cummings 9d8920f1b1
Polish Bearer Token Padding 
Issue gh-8502
 2020-07-16 12:22:45 -06:00
kothasa 6519029340
Bearer Token Padding 
Closes gh-8502
 2020-07-16 12:22:32 -06:00
wangsong 3dc59686fa Fix ProviderManager Javadoc typo 
Closes gh-8800
 2020-07-07 17:17:16 -05:00
Rob Winch dcd2137418 LoginPageGeneratingWebFilter honors context path 
Closes gh-8807
 2020-07-07 13:37:06 -05:00
Ellie Bahadori 1bb49bbc2e Use Github Actions workflow for PRs and remove Travis 
Closes gh-8718
 2020-06-30 05:05:48 -04:00
Rob Winch 5f395a3513 Better scp Retry Settings 2020-06-25 11:34:46 -05:00
Rob Winch 0356af03e6 Revert "Update to spring-build-conventions:0.0.33.RELEASE" 
This reverts commit 5343325091.
 2020-06-25 11:32:18 -05:00
Rob Winch 5343325091 Update to spring-build-conventions:0.0.33.RELEASE 
Closes gh-8759
 2020-06-25 11:30:12 -05:00
Dávid Kovács fa9898dd6d formLogin() and login() implement Mergable 
This is necessary so that default requests like Spring REST Docs work.

Closes gh-7572
 2020-06-22 14:58:39 -05:00
Evgeniy Cheban bff6d82dd0 DefaultWebSecurityExpressionHandler uses RoleHierarchy bean 
Fixes gh-7059
 2020-06-10 17:08:50 -04:00
Joe Grandja 674e2c0a8e OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException 
Issue gh-8609
 2020-06-09 16:24:00 -04:00
Joe Grandja 11c1236261 OAuth2AuthorizationCodeGrantWebFilter should handle OAuth2AuthorizationException 
Fixes gh-8609
 2020-06-09 16:24:00 -04:00
Eleftheria Stein 98467755ad Update to RSocket 1.0.1 
Fixes gh-8664
 2020-06-08 17:18:33 -04:00
Eleftheria Stein 0e37c722e2 Revert "Temporarily ignore RSocket integration tests" 
This reverts commit d5eeec0ae6.

Fixes gh-8643
 2020-06-08 16:14:34 -04:00
Rob Winch c71a893e08 Add subscriberContext to PayloadSocketAcceptor delegate.accept 
Closes gh-8654
 2020-06-05 12:55:07 -05:00
Eleftheria Stein 69ff2ab3fc Next development version 2020-06-03 16:17:30 -04:00
Eleftheria Stein 38a731d5e4 Release 5.2.5.RELEASE 2020-06-03 16:02:37 -04:00
Eleftheria Stein d5eeec0ae6 Temporarily ignore RSocket integration tests 
Issue gh-8643
 2020-06-03 15:29:59 -04:00
Eleftheria Stein fd7fe482f5 Revert "Release 5.2.5.RELEASE" 
This reverts commit b88e094f37.
 2020-06-03 15:29:44 -04:00
Eleftheria Stein b88e094f37 Release 5.2.5.RELEASE 2020-06-03 10:59:04 -04:00
Eleftheria Stein 04453cec96 Update to groovy 2.4.19 
Fixes gh-8525
 2020-06-02 17:18:21 -04:00
Eleftheria Stein d9919b838d Update to okhttp 3.14.9 
Fixes gh-8629
 2020-06-02 17:17:56 -04:00
Eleftheria Stein 05b9591e44 Update to Jython 2.5.3 
Fixes gh-8628
 2020-06-02 17:17:29 -04:00
Eleftheria Stein 1b93b0c9a6 Update to mockwebserver 3.14.9 
Fixes gh-8627
 2020-06-02 17:17:05 -04:00
Eleftheria Stein e87783024c Update to RSocket 1.0.0 
Fixes gh-8626
 2020-06-02 17:15:05 -04:00
Eleftheria Stein 7e9c7534f5 Update to Spring Boot 2.2.7 
Fixes gh-8630
 2020-06-02 17:14:44 -04:00
Rob Winch 24fd9579c5 Delay AuthenticationPrincipalArgumentResolver Creation 
Use ObjectProvider<AuthenticationPrincipalArgumentResolver> to delay its
lookup.

Closes gh-8613
 2020-05-29 16:51:47 -05:00
Eleftheria Stein a6dd119266 Mock request with non-standard HTTP method in test 
Fixes gh-8594
 2020-05-26 11:32:27 -04:00
justmehyp 774ea6980b Remove unused field 'digester' in Md4PasswordEncoder 
`private Digester digester;`  defined in Md4PasswordEncoder is never used. So remove it.

Closes gh-8553
 2020-05-21 11:21:24 -05:00
Maksim Vinogradov 279ddbe223 Prevent StackOverflowError for AccessControlEntryImpl.hashCode 
Getting StackOverflowError when invoke AclImpl.hashCode because of
cross-references between AclImpl and AccessControlEntryImpl

Remove from AccessControlEntryImpl.hashCode method invocation of
acl.hashCode

fixes gh-5401
 2020-05-21 10:07:54 -05:00
Dávid Kovács eaaee899fc Object ID Identicy conversion to long fails on old schema 
This change fixed a bug which tried to convert non-string object as string

Fixes gh-7621
 2020-05-19 13:45:23 -05:00
cbornet 21c1d98f64 Create the CSRF token on the bounded elactic scheduler 
The CSRF token is created with a call to UUID.randomUUID which is blocking.
This change ensures this blocking call is done on the bounded elastic scheduler which supports blocking calls.

Fixes gh-8128
 2020-05-18 11:06:45 -05:00
Artyom Tarynin 9f33ce312a Update AntPathRequestMatcher.java 
Fixes gh-8512
 2020-05-14 10:05:52 -04:00
Dávid Kovács e382c269ef Document NoOpPasswordEncoder will not be removed 
This commit adds extension to deprecation notice.

Fixes gh-8506
 2020-05-13 12:56:04 -05:00
Rob Winch ce7c501f9c AbstractUserDetailsReactiveAuthenticationManager uses boundidElastic() 
Some JVMs have blocking operations when accessing SecureRandom and thus
this needs to be performed in a pool that is larger than the number of
CPUs

Closes gh-7522
 2020-05-12 13:24:47 -05:00
Rob Winch bd93616567 Fix non-standard HTTP method for CsrfWebFilter 
Closes gh-8452
 2020-05-12 13:18:01 -05:00
Eleftheria Stein f9872d3dee Next Development Version 2020-05-06 15:59:24 -04:00
Eleftheria Stein b7212bd975 Release 5.2.4.RELEASE 2020-05-06 15:16:32 -04:00
Eleftheria Stein 50da82d88d Temporarily build against Framework 5.2.x snapshot 
Issue: gh-8489
 2020-05-06 14:43:53 -04:00