Joe Grandja
26fcde6f8e
Document new features for OAuth Client
...
Fixes gh-5832
2018-10-12 19:24:02 -04:00
Rob Winch
a26eadc600
Snapshot Build uses Spring 5.+
...
Fixes: gh-5951
2018-10-12 16:57:08 -05:00
Rob Winch
e782cb09cb
Update to Reactor Californium-SR1
...
Fixes: gh-5950
2018-10-12 16:52:27 -05:00
Rob Winch
7fcc47850f
Update to Spring Boot 2.1.0.M4
2018-10-12 16:49:08 -05:00
Rob Winch
93ca455405
OAuth2LoginAuthenticationFilter ignores authenticated Users
...
This ensures that OAuth2 Client support works with the same log in URL as
oauth2 login.
Fixes: gh-5915
2018-10-12 16:29:27 -05:00
Thomas Jensen
e8045838e3
Fix minor typo in secure-objects.adoc
2018-10-10 10:43:34 -05:00
Josh Cummings
2307b01a7a
Resource Server Docs - Servlet
...
Fixes: gh-5912
2018-10-05 15:46:37 -06:00
Rob Winch
cbb25f7b87
Polish Getting Spring Security Reference
...
Fixes: gh-5921
2018-10-04 17:27:09 -05:00
John Lin
fe080cadbe
Fix method name in the Contact sample code
2018-10-03 16:45:18 -04:00
Johnny Lim
68ffa0fece
Add a missing space in Secured.value() signature
2018-10-03 14:47:48 -04:00
Tadaya Tsuyukubo
12050404ad
Populate test security context with authentication
...
Add setAuthentication method on TestSecurityContextHolder.
2018-10-03 14:24:45 -04:00
Rob Winch
44ee15cb4d
Next Development Version
2018-09-21 09:32:51 -05:00
Rob Winch
c073705d55
Release Spring Security 5.1.0.RELEASE
...
Fixes: gh-5895
2018-09-21 08:13:44 -05:00
John Lin
69b71ee0ed
Remove unused variables in ConsensusBased and UnanimousBased
2018-09-21 08:12:40 -05:00
Rob Winch
5d18bb68ed
Add @formatter to @EnableWebFluxSecurity Javadoc
...
Fixes: gh-5898
2018-09-21 08:11:50 -05:00
Rob Winch
e67264ae2c
Update to Spring Data Lovelace-RELEASE
...
Fixes: gh-5885
2018-09-21 07:25:16 -05:00
Rob Winch
dd82d114c0
Update to Spring Framework 5.1.0.RELEASE
...
Fixes: gh-5883
2018-09-21 01:04:16 -05:00
Rob Winch
eca0b7bc04
Update to Reactor Californium-RELEASE
...
Fixes: gh-5884
2018-09-21 01:04:16 -05:00
Rob Winch
45a9c0fd54
Polish Automatically Add CsrfServerLogoutHandler
...
Issue: gh-5337
2018-09-21 00:59:36 -05:00
Eric Deandrea
b060ec050a
Automatically add CsrfServerLogoutHandler if csrf enabled
...
The configuration DSL should automatically add CsrfServerLogoutHandler if csrf is enabled
Fixes gh-5337
2018-09-21 00:59:36 -05:00
Rob Winch
725b3b5482
Fix OAuth2AuthorizationCodeGrantWebFilter works w/ /{action/
...
Issue: gh-5856
2018-09-20 21:39:09 -05:00
Vedran Pavic
79828d4f7b
Polish WebFlux Referrer-Policy header config
2018-09-20 17:14:16 -05:00
Joe Grandja
9565e90b6e
Remove oauth2-oidc-sdk dependency from oauth2-jose module
...
Fixes gh-5891
2018-09-20 15:20:11 -04:00
Joe Grandja
d46f83caf4
Ensure consistent matching of redirect_uri
...
Fixes gh-5890
2018-09-20 14:30:41 -04:00
Josh Cummings
77fa495860
DelegatingOAuth2TokenValidator Varargs Constructor
...
Fixes: gh-5889
2018-09-20 10:45:51 -06:00
Rob Winch
8a49c431c3
Add OAuth2ClientSpec.and
...
Fixes: gh-5888
2018-09-20 10:19:21 -05:00
Josh Cummings
73c1abbba0
EnableGlobalMethodSecurity Misconfiguration Check
...
This polishes the EnableGlobalMethodSecurity misconfiguration check to
not error if the user has specified a custom method security metadata
source.
Issue: gh-5341
2018-09-20 07:55:03 -06:00
artsiom
1e864ad764
Validate @EnableGlobalMethodSecurity usage
...
Fixes: gh-5341
2018-09-20 07:55:03 -06:00
Josh Cummings
d4c50a8fb8
Replace Section Links in What's New
...
Fixes: gh-5857
2018-09-20 07:50:30 -06:00
Rob Winch
508f0bc870
Remove Deprecated EvaluationContextExtensionSupport Usage
...
EvaluationContextExtensionSupport is deprecated. Instead classes should
implement EvaluationContextExtension directly.
Fixes: gh-5886
2018-09-19 16:52:16 -05:00
Rob Winch
b4cad2c8b9
Update to mockito-core:2.22.0
...
Fixes: gh-5882
2018-09-19 16:36:41 -05:00
Rob Winch
1483d148d8
Update to htmlunit:2.33
...
Fixes: gh-5881
2018-09-19 16:36:33 -05:00
Rob Winch
779da0a633
Update to hibernate-validator:6.0.13.Final
...
Fixes: gh-5880
2018-09-19 16:36:16 -05:00
Rob Winch
352db344a1
Update to Jetty 9.4.12.v20180830
...
Fixes: gh-5879
2018-09-19 16:36:01 -05:00
Rob Winch
1acc46e622
Update to unboundid-ldapsdk:4.0.8
...
Fixes: gh-5878
2018-09-19 16:35:45 -05:00
Rob Winch
a23830d096
Update to jaxb 2.3.0.1
...
Fixes: gh-5877
2018-09-19 16:35:35 -05:00
Rob Winch
c10a4686bf
Update to cglib:cglib-nodep:3.2.8
...
Fixes: gh-5876
2018-09-19 16:35:26 -05:00
Rob Winch
9e0c7f17b7
Default RequestCache should ignore favicon
...
Fixes: gh-5875
2018-09-19 14:29:14 -05:00
Rob Winch
e4597b5213
WebSessionServerRequestCache ignores favicon and html
...
Fixes: gh-5874
2018-09-19 14:28:05 -05:00
Rob Winch
8e4d540bfb
Default Log Out Pages Use HTTPS for CSS
...
Fixes: gh-5873
2018-09-19 13:52:35 -05:00
Rob Winch
410f6bae1a
Fix ServerOAuth2AuthorizedClientExchangeFilterFunctionTests Merge
...
Issue: gh-5872
2018-09-19 11:53:21 -05:00
Rob Winch
dcbf762a0b
WebClient OAuth2 Support for defaultClientRegistrationId
...
Fixes: gh-5872
2018-09-19 11:47:04 -05:00
Josh Cummings
f48055ce47
Polish Section Link in What's New
2018-09-19 10:20:42 -06:00
Joe Grandja
91f6888e9f
Remove OAuth2AuthorizedClientRepository @Bean from OAuth2LoginApplication
...
Fixes gh-5546
2018-09-19 11:22:52 -04:00
Joe Grandja
e8d8eb59bf
Make OAuth2AuthorizedClient Serializable
...
Fixes gh-5757
2018-09-19 10:47:30 -04:00
Joe Grandja
2c078c5dd9
Remove expiresAt constructor-arg in OAuth2RefreshToken
...
Fixes gh-5854
2018-09-19 10:47:30 -04:00
Rob Winch
ece5de3f99
Polish What's New
...
Issue: gh-5857
2018-09-19 09:45:13 -05:00
Joe Grandja
8b0a3a760c
Use providedSessionAuthenticationStrategy
...
Fixes gh-5763
2018-09-19 07:04:49 -04:00
John Lin
f5e2ca1b6e
Fix truncated javadoc for Secured
...
Fixes: gh-5861
2018-09-18 21:34:02 -05:00
Rob Winch
62db88ce6a
Add WebFlux CORS Reference
...
Fixes: gh-5870
2018-09-18 21:24:36 -05:00