Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
15,715 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

3016 Commits

Author SHA1 Message Date
Angel Aguilera 13ad66807e Update messages_es_ES.properties 
Uncomment and translate message property.
 2023-12-14 10:24:19 -06:00
Josh Cummings db7c5d128b
Fix Typos 
Closes gh-14268
 2023-12-11 11:34:52 -07:00
ahmd-nabil dfef781e33 Add default implementation in UserDetails 
Closes gh-14275

Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>
 2023-12-11 11:00:57 -07:00
Marcus Da Coregio 57ab15127a Add Max Sessions on WebFlux 
Closes gh-6192
 2023-12-11 09:48:34 -03:00
Josh Cummings 4a50d5aab3
Merge branch '6.2.x' 2023-12-09 11:52:31 -07:00
Josh Cummings 6e636e6abb
Merge branch '6.1.x' into 6.2.x 
Closes gh-14267
 2023-12-09 11:50:58 -07:00
Josh Cummings 9f90661b6f
Merge branch '5.8.x' into 6.1.x 
Closes gh-14266
 2023-12-09 11:43:04 -07:00
Josh Cummings be11812fe4
Account for Super-super-interface Inheritance 
Closes gh-13625
 2023-12-09 11:41:02 -07:00
Josh Cummings 92be497d24 Polish RoleHierachyImpl#of 
- Change to #fromHierarchy to match naming convention
- Keep existing test methods the same
- Deprecate setHierarchy and default constructor
- Add private Map constructor
- Change Adjust RoleHierarchyBuilder to use Map constructor

Issue gh-13788
 2023-12-08 11:49:50 -07:00
Toshiaki Maki c1b3351569 Add RoleHierarchyImpl#of 
Closes gh-13788
 2023-12-08 11:49:50 -07:00
Josh Cummings bb6b55aca3 Add Not Support 
Closes gh-14058
 2023-12-07 16:24:19 -07:00
Yuriy Savchenko e49ae096e6 Add AuthorizationManager factory methods 
Factory methods to create AuthorizationManager with a configurable default AuthorizationDecision.

Closes gh-13085
 2023-12-07 15:20:08 -07:00
Josh Cummings ee8bc78cbc Polish RoleHierarchyImpl#Builder 
- Added documentation
- Removed withNoRolePrefix for now; let's see how folks
use the minimal API first
- Adjusted class hierarchy to match AuthorizeHttpRequests more
closely
- Adjusted to match Spring Security style guide
- Added needed @since attributes

Issue gh-13300
 2023-12-07 15:18:13 -07:00
Federico Herrera 7d366242ce Add RoleHierarchyImpl.Builder 
Closes gh-13300
 2023-12-07 15:18:13 -07:00
Angel Aguilera 1ce1ff92de Update messages_ca.properties 
Add translation for new message properties
 2023-12-07 15:28:06 -06:00
Josh Cummings d50698a269
Prepare for Spring Security 6.3 
Closes gh-14210
 2023-12-05 15:49:42 -07:00
YangSiJun528 3f6b6aa523 Update Javadoc for getAuthorizationDecision method 
Added missing description for `@return` tag.
 2023-11-21 10:07:42 -03:00
Marcus Hert Da Coregio e3ab1c94d7 Use assertj assertions 2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio a7da9491d9 Use assertj assertions 2023-11-17 09:03:36 -03:00
Josh Cummings 97516727a4
Add Coroutine Support 
Closes gh-12080
 2023-11-15 11:48:37 -07:00
Josh Cummings 24abf45128
Merge remote-tracking branch 'origin/6.1.x' 2023-11-07 13:13:29 -07:00
Josh Cummings f295e9d28f
Merge branch '6.0.x' into 6.1.x 
Closes gh-14111
 2023-11-07 13:09:20 -07:00
Josh Cummings bb354f1895
Merge branch '5.8.x' into 6.0.x 
Closes gh-14110
 2023-11-07 13:07:25 -07:00
Josh Cummings 11a21896dd
Defer SecurityContextHolderStrategy Lookup 
Due to how early method interceptors are loaded during startup
it's reasonable to consider scenarios where applications are
changing the global security context holder strategy during
startup.

Closes gh-12877
 2023-11-07 12:36:16 -07:00
Marcus Hert Da Coregio 6e0fb2fc96 Merge branch '6.1.x' 2023-11-06 15:03:06 -03:00
Marcus Hert Da Coregio 99c84aa935 Merge branch '6.0.x' into 6.1.x 2023-11-06 15:02:09 -03:00
Marcus Hert Da Coregio 3893136084 Remove Gradle deprecations 
Stop using JavaPluginConvention type and replace outputFile with destinationFile

Issue gh-13864
 2023-11-06 15:01:38 -03:00
Steve Riesenberg d0a5ada2da
Fix formatting 2023-10-31 15:38:44 -05:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Martin Lukas 1589d19c8b Fix typos in spring-security core module 2023-10-31 09:48:43 -03:00
valery1707 cc86afe658 Use same case for all fields in toString 2023-10-16 14:42:53 -06:00
Marcus Da Coregio 07b6c451fd Merge branch '6.1.x' 
Closes gh-13884
 2023-09-29 11:47:38 -03:00
Marcus Da Coregio 8adfc9b463 Merge branch '6.0.x' into 6.1.x 
Closes gh-13883
 2023-09-29 11:46:48 -03:00
Marcus Da Coregio 92c82191c9 Merge branch '5.8.x' into 6.0.x 
Closes gh-13882
 2023-09-29 11:46:00 -03:00
Marcus Da Coregio 64e2a2ff8b Apply updated Code Style 
Closes gh-13881
 2023-09-29 11:44:32 -03:00
Steve Riesenberg 7f61d40415
Fix code style 2023-09-27 10:51:08 -05:00
Marcus Da Coregio 33fb37e134 Fix Tests on JDK 21 
Issue gh-13811
 2023-09-27 11:59:09 -03:00
Steve Riesenberg ff374935fb
Verify ReactorContext when using Virtual Threads 
Closes gh-12791
 2023-09-25 12:01:31 -05:00
Steve Riesenberg 247ce5dcab
Add integration tests for virtual threads 
Closes gh-12790
 2023-09-19 10:39:05 -05:00
Steve Riesenberg ecf8467cac
Fix tests on JDK 21 
Issue gh-12790
Issue gh-13811
 2023-09-19 10:39:04 -05:00
Steve Riesenberg d6ff58bb7f
Update Mockito to 5.5.0 
Closes gh-13810
 2023-09-19 10:39:03 -05:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices 
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-09-12 16:18:14 -06:00
Steve Riesenberg 92256f0522 Support nested suspend calls for Kotlin coroutines 
Closes gh-13764
 2023-09-05 00:23:30 -05:00
Josh Cummings 75e0068925
Merge branch '6.1.x' 2023-08-07 16:03:55 -06:00
Seongguk Jeong bcd4dcc15c Refactor equals method 
Using the accessor method for fields instead of directly access
 2023-08-07 16:00:18 -06:00
Seongguk Jeong 8df8d4022e Fix documentation typo 
changed "user name" to "username"
 2023-08-07 16:00:18 -06:00
Seongguk Jeong de1357cbd1 Refactor equals method 
To use the accessor method for username instead of directly accessing the attribute.
 2023-08-07 16:00:18 -06:00
Seongguk Jeong ea19f82b8a Using pattern matching for instanceof 2023-08-07 16:00:18 -06:00
maimate-dev 7b2cb59dab
Localize AccessDeniedException message 
Closes gh-13419
 2023-07-27 16:50:41 -05:00
Josh Cummings cf79af2386
Update Kotlin Test Usage 
Issue gh-13539
 2023-07-14 18:38:58 -06:00
Josh Cummings a08036aee5
Change from AwaitKt to MonoKt 
Issue gh-13539
 2023-07-14 18:38:58 -06:00
Josh Cummings 6c3636d780
Update Removed Usages 
Issue gh-13544
 2023-07-14 18:38:58 -06:00
Josh Cummings a99dff7de3
Remove Reference to LocalVariableTableParameterNameDiscoverer 
Issue gh-2572
 2023-07-14 18:38:58 -06:00
Josh Cummings b62dd851a2
Merge branch '6.1.x' 
Closes gh-13489
 2023-07-11 17:03:53 -06:00
Josh Cummings 0579be0d25
Merge branch '6.0.x' into 6.1.x 
Closes gh-13488
 2023-07-11 17:02:59 -06:00
Josh Cummings 6393702e70
Fix allOf/anyOf Abstain Logic 
Closes gh-13487
 2023-07-11 17:02:07 -06:00
Claudio Nave 52e12ad64b Replace deprecated methods 2023-06-22 13:19:55 -06:00
Evgeniy Cheban 0cefb27928 Simplify RequestMatcherDelegatingAuthorizationManager.Builder matcher registration 
Closes gh-11624
 2023-06-22 16:07:30 -03:00
Josh Cummings 339185998a
Update JavaDoc 
Issue gh-12782
 2023-06-22 11:26:45 -06:00
kandaguru17 fa2bc745f7 Use AuthoritiesAuthorizationManager in Jsr250AuthorizationManager 
Closes gh-12782
 2023-06-22 11:25:54 -06:00
Krzysztof Krason 9b603b99ab Using modern Java features 2023-06-22 11:24:25 -06:00
Josh Cummings 97cff7c715 Polish TestingAuthenticationToken 
Restore List constructor to retain binary compatibility.
 2023-06-22 11:22:15 -06:00
Laurent Martelli f25d76c48f TestingAuthenticationToken takes broader collection type 
So that callers do not have to cast.

Closes gh-12953
 2023-06-22 11:22:15 -06:00
Josh Cummings fb910e2997
Prepare for Spring Security 6.2 
Closes gh-14316
 2023-06-22 11:03:28 -06:00
Steve Riesenberg 1f04baa4a3
Polish gh-13290 
Issue gh-12533
 2023-06-13 14:17:40 -05:00
Dmitry Korotych 4def405067
Allow authorities to be overridden in UserBuilder 
Issue gh-12533
 2023-06-13 14:12:47 -05:00
Josh Cummings 613165b86c
Merge branch '6.0.x' 2023-05-11 11:46:10 -06:00
Josh Cummings c6c091b12e
Merge branch '5.8.x' into 6.0.x 2023-05-11 11:43:37 -06:00
Josh Cummings 05ef215b88 Align Formatting 
Issue gh-13132
 2023-05-11 11:42:51 -06:00
Florian Cramer 9669747245 Ignore synthetic methods when checking for duplicate annotations 
Closes gh-13132
 2023-05-11 11:42:51 -06:00
SeasonPan a44e91d044 fix javadoc typo 2023-04-24 16:41:17 -06:00
Josh Cummings 9244989b2e
Fix allOf/anyOf Abstain Logic 
Closes gh-13069
 2023-04-24 15:36:17 -06:00
Josh Cummings 072feb2fb8
Merge branch '6.0.x' 2023-04-24 12:52:36 -06:00
Josh Cummings 599ed3e96b
Polish Format 
Issue gh-13079
 2023-04-24 12:52:26 -06:00
Josh Cummings 57294be795
Merge branch '6.0.x' 
Closes gh-13083
 2023-04-24 12:49:56 -06:00
Josh Cummings 73a543d318
Handle Empty Role 
Closes gh-13079
 2023-04-24 12:49:30 -06:00
Marcus Da Coregio 1a4a2a9055 Merge branch '5.8.x' into 6.0.x 2023-04-14 13:32:10 -03:00
Marcus Da Coregio 54117d7d27 Fix test suffix to align with checkstyle 2023-04-14 13:29:15 -03:00
Rob Winch 20b0156d5a Merge branch '6.0.x' 
Closes gh-12984
 2023-04-10 11:26:01 -05:00
Rob Winch 9c3f91a2d3 Merge branch '5.8.x' into 6.0.x 
Closes gh-12983
 2023-04-10 11:25:32 -05:00
Rob Winch 16dcfd1cfe Merge branch '5.7.x' into 5.8.x 
Closes gh-12982
 2023-04-10 11:25:01 -05:00
Yuanhang Guo c69df9fba0 Fix javadoc typo in ReactiveAuthorizationManager 
Closes gh-12978
 2023-04-10 11:24:49 -05:00
Josh Cummings 25ff3d69bd
Polish WebFlux Observation contextualName 
Issue gh-12156
 2023-04-04 13:15:44 -06:00
Marcus Da Coregio 5e2dd0351d Merge branch '6.0.x' 
Closes gh-12964
 2023-04-04 10:21:52 -03:00
Petr Svoboda 44c4a4ae86 Add new DaoAuthenticationProvider constructor 
Add a new constructor to the DaoAuthenticationProvider, which allows
providing a custom PasswordEncoder to prevent instantiation of the
default delegating PasswordEncoder in the default constructor.

This provides a way to instantiate the DaoAuthenticationProvider on JDKs
where the default delegating PasswordEncoder cannot be instantiated due
to limited JCE providers for compliance reasons (e.g., FIPS).

Closes gh-12874
 2023-04-04 10:21:22 -03:00
Josh Cummings 607e40d366 Polish ObservationConvention Configuration 
Change to setObservationConvention so that it reads more clearly
when used, for example `authenticationManager.setObservationConvention`
is clearer than `authenticationManager.setConvention`.

Change unit test names to follow team conventions.

Issue gh-12534
 2023-03-28 15:01:26 -06:00
Josh Cummings f1b14de3ba Format ObservationConvention Configuration 
Issue gh-12534
 2023-03-28 15:01:26 -06:00
Braunson 8d933fcb03 Support Customizing Observation Conventions 
Closes gh-12534
 2023-03-28 15:01:26 -06:00
Josh Cummings a7562ad950
Update io.spring.javaformat to 0.0.38 
Closes gh-12891
 2023-03-20 10:44:35 -06:00
Josh Cummings f588f9fa9a
Merge branch '6.0.x' 2023-03-03 15:02:51 -07:00
Josh Cummings acf48721cd
Merge branch '5.8.x' into 6.0.x 2023-03-03 15:02:34 -07:00
Josh Cummings ebabcaa51a
Merge branch '5.7.x' into 5.8.x 2023-03-03 15:02:07 -07:00
bist 094bf1b527 Validate hasRole Input 
There are no check for role prefix in AuthorizeHttpRequestsConfigurer#XXXrole
methods. This PR adds check for the same. Now the configuration
will fail if role/s start with prefix for hasRole and hasAnyRole methods.

Closes #12581
 2023-03-03 15:00:34 -07:00
Pascal Verdage 659b65a666 Fix javadox typo 2023-02-15 15:20:48 -07:00
Marcus Da Coregio eb35d3055f Merge branch '6.0.x' 
Closes gh-12640
 2023-02-07 09:25:33 -03:00
Marcus Da Coregio 52ed165476 Move classpath checks to class member variable 
Closes gh-11437
 2023-02-07 09:25:06 -03:00
stillya 3229bfa40f Add empty authorities by default 
Closes gh-12533
 2023-01-30 15:37:10 -06:00
Josh Cummings f9d674cb10
Merge branch '6.0.x' 
Closes gh-12525
 2023-01-11 10:14:01 -07:00
Josh Cummings 4d2dab9b6b
Lookup Parent Observation 
Closes gh-12524
 2023-01-11 10:13:33 -07:00