Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
11,431 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

1263 Commits

Author SHA1 Message Date
Joe Grandja 214cfe807e Allow Jwt assertion to be resolved 
Closes gh-9812
 2022-01-10 10:42:10 -05:00
Rob Winch 783a43ea35 Add CheckAntoraVersionPlugin 2022-01-04 15:52:05 -06:00
Rob Winch 07a176d11e Update antora to 5.6.2 2022-01-04 15:52:05 -06:00
Rob Winch 6884a16726 Add CheckAntoraVersionPlugin 2022-01-04 15:29:14 -06:00
Josh Cummings 6b54afe9a3 Remove SAML 2.0 Logout Default 
Closes gh-10607
 2022-01-03 12:54:22 -07:00
Marcus Da Coregio 65426a40ec Add Cross Origin Policies headers 
Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers

Closes gh-9385, gh-10118
 2021-12-07 17:23:06 +01:00
Steve Riesenberg 32ec8c3ae4 Fix Reactive OAuth2 Kotlin DSL examples 
Closes gh-10580
 2021-12-07 13:58:24 +01:00
Steve Riesenberg 7ec3b55ab3 Fix Reactive OAuth2 Kotlin DSL examples 
Closes gh-10580
 2021-12-07 13:48:11 +01:00
Henning Poettker f1ca42e501 Fix return type for NoOpPasswordEncoder bean in documentation 2021-11-23 14:14:05 -03:00
Henning Poettker bb99d7d95a Fix return type for NoOpPasswordEncoder bean in documentation 2021-11-23 14:13:12 -03:00
Josh Cummings 16a21264d0 Polish AuthRequestConverter Sample Doc 
Issue gh-10364
 2021-11-18 13:36:31 -07:00
Josh Cummings 739cdc1a4c Polish AuthRequestConverter Sample Doc 
Issue gh-10364
 2021-11-18 13:36:10 -07:00
Norbert Nowak 1c0f092176 Fix AuthnRequestConverter Sample Typos 
Closes gh-10364
 2021-11-18 13:26:53 -07:00
Norbert Nowak 02cd1dd3c4 Fix AuthnRequestConverter Sample Typos 
Closes gh-10364
 2021-11-18 13:26:25 -07:00
Jeff Maxwell 32d79f3f4e Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:33:42 -07:00
Jeff Maxwell b7cc667d21 Fix setJWTClaimSetJWSKeySelector Typo 
Closes gh-10504
 2021-11-16 15:33:27 -07:00
Jeff Maxwell 088a24cf59 Fix jwtDecoder Documentation Usage 
Closes gh-10505
 2021-11-16 15:18:42 -07:00
Jeff Maxwell 3fb1565cc0 Fix jwtDecoder Documentation Usage 
Closes gh-10505
 2021-11-16 15:17:37 -07:00
Josh Cummings 7b15098570 Update Spring Security to 5.7 
Closes gh-10509
 2021-11-15 17:10:00 -07:00
Josh Cummings 6b6f473a1b Added authorizeHttpRequests Docs 
Closes gh-10442
 2021-11-15 16:23:18 -07:00
Rob Winch 29a4b2bc9b Next Development Version 2021-11-15 16:13:45 -06:00
Rob Winch fa628f7491 Release 5.6.0 2021-11-15 16:13:12 -06:00
Joe Grandja 4f185724a3 Polish gh-10479 2021-11-12 15:09:50 -05:00
Steve Riesenberg 0bdaa21867 Update What's New for 5.6 2021-11-11 14:51:40 -06:00
Steve Riesenberg 0e6722800d Polish gh-10479 2021-11-11 14:24:30 -06:00
Steve Riesenberg 73e1506e5e Consistency update for servlet docs 2021-11-11 14:24:29 -06:00
Steve Riesenberg 7d806b668f Separate OAuth 2.0 Client Reactive Docs 
Related gh-10367
 2021-11-11 14:24:29 -06:00
Steve Riesenberg 1246d5839d Revamp OAuth 2.0 Login Reactive documentation 
Related gh-8174
 2021-11-11 14:24:29 -06:00
Rob Winch 08dc83c781 Fix Antora Versions 2021-11-11 13:35:34 -06:00
Rob Winch 127e10e607 Antora Playbook 2021-11-11 13:34:54 -06:00
Josh Cummings 310a50587c Port Missing Integration Docs 
Closes gh-10465
 2021-11-10 16:09:50 -07:00
Josh Cummings b60020a40c Use authorizeHttpRequests in Docs 
Issue gh-8900
 2021-11-10 16:09:50 -07:00
Josh Cummings f4ddb4e3f4 Update What's New Links 2021-11-10 16:09:50 -07:00
Josh Cummings 4a9637483a Separate OAuth 2.0 Client Reactive Docs 
Issue gh-10367
 2021-11-05 12:45:46 -06:00
Josh Cummings 7708418fae Separate OAuth 2.0 Login Servlet Docs 
Issue gh-10367
 2021-11-05 12:45:46 -06:00
Josh Cummings 82696918ae Separate OAuth 2.0 Client Servlet Docs 
Issue gh-10367
 2021-11-05 12:45:46 -06:00
Steve Riesenberg e350c8a852 Document parameters converter in oauth2 client servlet docs 
Closes gh-10467
 2021-11-05 12:45:46 -06:00
Steve Riesenberg efa2fab061 Document authentication helper method in WebClient integration 
Closes gh-10120
 2021-11-05 12:45:46 -06:00
Josh Cummings 76ebbb84f7 Separate Namespace Servlet Docs 
Issue gh-10367
 2021-11-05 12:45:46 -06:00
Rob Winch 46c5b91500 Put nav in generated docs 2021-11-01 10:28:08 -05:00
Rob Winch c7a50c40ae Use explicit version from antora.yml 2021-11-01 09:56:58 -05:00
Josh Cummings 11aa02c6fb Separate SAML 2.0 Login Docs 
Issue gh-10367
 2021-10-29 15:06:54 -06:00
Josh Cummings 6d2d3b9a69 Separate Resource Server Reactive Docs 
Issue gh-10367
 2021-10-29 13:06:38 -06:00
Josh Cummings f02a7d2b28 Separate Testing Servlet Docs 
Issue gh-10367
 2021-10-29 12:34:29 -06:00
Josh Cummings f39d272a86 Separate SAML Docs 
Issue gh-10367
 2021-10-29 11:30:41 -06:00
Josh Cummings b4ffe154d7 Separate Testing Reactive Docs 
Issue gh-10367
 2021-10-29 10:09:04 -06:00
Rob Winch 7a99542662 Docs Use Section Summary where appropriate 
Closes gh-10449
 2021-10-28 14:02:38 -05:00
Joe Grandja b77cb8d0cb Remove redundant docs for Reactive OAuth2 Client 
Issue gh-10373
 2021-10-28 09:23:32 -04:00
Joe Grandja ce09f3eff4 Polish gh-10373 2021-10-28 09:06:30 -04:00
Josh Cummings 4b0e74aac4 Separate Resource Server Servlet Docs 
Issue gh-10367
 2021-10-27 10:02:05 -06:00
Rob Winch d40e8f6732 Fix Antora warnings 2021-10-26 20:05:06 -05:00
Rob Winch 9357c2f05d antora.component.version extract major.minor only 2021-10-26 15:22:40 -05:00
Rob Winch 144af074b7 Use a dynamic version for Antora 2021-10-26 14:20:35 -05:00
Rob Winch 863bee2bc7
Revert 6.0 generated version 2021-10-25 21:16:05 -05:00
Rob Winch dbf8e9ecce
Use 6.0 for generated docs 2021-10-25 21:11:35 -05:00
Rob Winch 0c105ff44f Use ROOT component name 2021-10-25 10:48:53 -05:00
Rob Winch f27ad296d0 Generated docs use version URL 2021-10-21 10:11:11 -05:00
Rob Winch ecd7301893 Use version in docs URL 2021-10-21 10:10:24 -05:00
Rob Winch a8c7ac9010 Add Antora based docs in whats-new 2021-10-18 21:11:47 -05:00
Steve Riesenberg 47087ba9c5 Revamp OAuth 2.0 Client reactive documentation 
Related gh-8174
 2021-10-14 14:35:25 -05:00
Steve Riesenberg a487ef2d74 Add JwtEncoder to What's New in 5.6 2021-10-14 14:26:48 -05:00
Marcus Da Coregio c82722c412 Update What's New in 5.6 2021-10-14 09:27:39 -03:00
Steve Riesenberg 00f466a431 Update What's New in 5.6 2021-10-13 12:06:47 -05:00
Alexander Schwartz f561499683 Fix Antora cross-references that lead to other pages. 
Also using AsciiDoc style listings instead of Markdown style listings, and using explicit section IDs on all cross-references.
 2021-10-06 09:53:15 -06:00
Rob Winch 14fd213557 Better consistency between reactive and servlet 2021-09-23 15:50:14 -05:00
Rob Winch 77dc3d1a0e Move to servlet/configurations/* 2021-09-23 15:50:14 -05:00
Rob Winch ca2bc958df Create features/integrations 2021-09-23 15:50:14 -05:00
Rob Winch ab63ebbbee Add link to authorization from features. 2021-09-23 15:50:14 -05:00
Rob Winch 176e6b6000 Add additional info to overview 2021-09-23 15:50:14 -05:00
Rob Winch d6ada7fb18 Remove /servlet/hello/index.adoc 
This is now /servlet/getting-started.adoc
 2021-09-23 15:50:14 -05:00
Rob Winch e368734557 Update "Big Picture" to Architecture 2021-09-23 15:50:14 -05:00
Rob Winch 0d339aeda6 Add Reactive Getting Started Page 2021-09-23 15:50:14 -05:00
Rob Winch 7537aa5124 Add generic authorization page 2021-09-23 15:50:14 -05:00
Rob Winch a1c7a39bd3 Fix Firewall link in nav 2021-09-23 15:50:14 -05:00
Rob Winch d52aab88af Update nav text Project Modules 2021-09-23 15:50:14 -05:00
Rob Winch be9ff16583 Remove Asciidoctor from the build in favor of Antora 2021-09-23 15:50:14 -05:00
Rob Winch 871bc1c42c The next version of Security is 5.6 2021-09-23 15:50:14 -05:00
Rob Winch 7e2eb6894f Use component name of '' 
This makes it so that the URL contains security in the root of the deploy
folder. We will do this until we decide to add projects other than the
security related projects.
 2021-09-23 15:50:14 -05:00
Rob Winch 52bfae5e27 Servlet Authentication no a link in nav 2021-09-23 15:50:14 -05:00
Rob Winch a7f3f54a33 architecture/index.adoc -> ../architecture.adoc 
BASE_DIR=docs/modules/ROOT/pages

git --no-pager diff HEAD~1 --diff-filter=R -M | sed -Ez "s%(\nrename to|rename from |similarity index [^\n]+|diff[^\n]+|$BASE_DIR/)%%g" | grep "\S" | while read rename_from_to; do
  from=$(echo $rename_from_to | cut -f 1 -d " ")
  to=$(echo $rename_from_to | cut -f 2 -d " ")
  echo "processing rename from $from to $to"
  find "$BASE_DIR/../" -name "*.adoc" | while read adoc_file; do
    sed -i -E "s%xref:$from%xref:$to%g" "$adoc_file"
  done
done
 2021-09-23 15:50:14 -05:00
Rob Winch 583761f916 unpwd->passwords folder 2021-09-23 15:50:14 -05:00
Rob Winch e4ce7249cc Generate antora.yml and push to spring-security-docs-generated 2021-09-23 15:50:14 -05:00
Rob Winch a0e9c67482 Fix antora version 2021-09-23 15:50:13 -05:00
Rob Winch 0b587dcef1 Reduce folders 2021-09-23 15:50:13 -05:00
Rob Winch 2da377ec88 Fix antora security version 2021-09-23 15:50:13 -05:00
Rob Winch e681e44268 overview/ -> ../ 2021-09-23 15:50:11 -05:00
Rob Winch a64a694c60 Indent testing subsections in nav.adoc 2021-09-23 15:49:45 -05:00
Rob Winch 32331185dc Fix local anchor 2021-09-23 15:49:45 -05:00
Rob Winch 29a7669101 rg "xref:\S+?#\S+\[\]" docs/modules -l -g "*.adoc" | while read adoc_file_to_replace; do 
echo "Replacing $adoc_file_to_replace"
  for id_file in build/ids/*.id; do
    id=$(basename $id_file | sed 's/\.id$//')
    xref_page=$(cat $id_file)
    if [[ "$adoc_file_to_replace" -ef "./docs/modules/ROOT/pages/$xref_page" ]]
    then
      echo "  - Skipping same page refid $id "
    else
      text_file=$(echo $id_file | sed 's/\.id$/.text/')
      default_text=$(cat $text_file)
      sed -i -E "s%xref:${xref_page}#${id}\[\]%xref:${xref_page}#${id}[$default_text]%g" $adoc_file_to_replace
    fi
  done
done
 2021-09-23 15:49:45 -05:00
Rob Winch 1f90df6a14 mkdir -p build/ids 
find -name "*.adoc" |  xargs -I{file} awk -v file={file} '/\[\[/ {  gsub("\[|\]", ""); id=$0; gsub("./docs/modules/ROOT/pages/", "", file); gsub("\[|\]", ""); id=$0;getline;text=$0; sub("^=+ ","", text); print file > "build/ids/"id".id"; print text > "build/ids/"id".text" }' {file}

find docs/modules -name "*.adoc"|while read adoc_file_to_replace; do
  echo "Replacing $adoc_file_to_replace"
  for id_file in build/ids/*.id; do
    id=$(basename $id_file | sed 's/\.id$//')
    xref_page=$(cat $id_file)
    if [[ "$adoc_file_to_replace" -ef "./docs/modules/ROOT/pages/$xref_page" ]]
    then
      echo "  - Skipping same page refid $id "
    else
      sed -i -E "s%<<$id(|,([^,>]+))>>%xref:${xref_page}#${id}[\2]%g" $adoc_file_to_replace
    fi
  done
done
 2021-09-23 15:49:43 -05:00
Rob Winch d2affef356 Fix images 
- Move images into assets/
- Remove figures form antora.yml
- Add :figures: to each page that uses it
 2021-09-23 15:47:21 -05:00
Rob Winch f5274926cf Fix up reactive/oauth2/index.adoc links 2021-09-23 15:47:21 -05:00
Rob Winch 88ac7a5d2e Fixup servlet/authentication/architecture/index.adoc 2021-09-23 15:47:21 -05:00
Rob Winch b8a362a60f Remove include servlet/saml2/index.adoc 2021-09-23 15:47:20 -05:00
Rob Winch c3dfb1711d Remove includes 2021-09-23 15:45:22 -05:00
Rob Winch f01a13aa52 Antora 
mkdir -p docs/modules/ROOT/
mkdir -p docs/modules/ROOT/pages/
git checkout antora-2.x docs/antora.yml
git checkout antora-2.x docs/modules/ROOT/nav.adoc
mv docs/manual/src/docs/asciidoc/images docs/modules/ROOT/
mv docs/manual/src/docs/asciidoc/_includes/* docs/modules/ROOT/pages/
cp ~/code/rwinch/spring-reference/*antora* ~/code/spring-projects/spring-security/
mv docs/modules/ROOT/pages/about docs/modules/ROOT/pages/overview
 2021-09-23 15:45:22 -05:00
heqiang 131078dcae Fix typo in digest.adoc 
Closes gh-10304
 2021-09-21 14:45:43 -04:00
Marcus Da Coregio 220de60142 Update What's New in 5.6 2021-09-20 12:18:27 -03:00
Josh Cummings f0fd09bf79 Update What's New in 5.6 2021-09-20 09:09:45 -06:00
Steve Riesenberg d207d03bf7 Update What's New for 5.6 2021-09-17 14:40:57 -05:00
Marcus Hert da Coregio ab098f171d Propagate TestSecurityContextHolder to SecurityContextHolder 
Create SecurityMockMvcResultHandlers to define security related MockMvc ResultHandlers
Create a method to allow copying the SecurityContext from the TestSecurityContextHolder to SecurityContextHolder

Closes gh-9565
 2021-09-17 16:39:53 -03:00
Marcus Da Coregio 017c218bbd Update What's New section 
Adds the SAML 2.0 Single Logout Support and the new Saml2AuthenticationRequestRepository
 2021-09-17 13:57:23 -03:00
Ashley Scopes 729418ad7a Fix typo in headers asciidoc 2021-09-15 15:05:08 -06:00
Dmitriy Bogdanov fe274e7553 Fix some list punctuation and capitalization in docs 2021-09-15 10:49:02 -06:00
Dmitriy Bogdanov 31a8f8c4df Fix the use of "s" with code blocks in docs 2021-09-15 10:49:02 -06:00
Dmitriy Bogdanov af4cc03dec Fix some typos and mistakes in docs 2021-09-15 10:49:02 -06:00
Anthony Lofton 8cba9fbf9d Updated test.adoc SecurityMockServerConfigurers method references 
Updated all references to SecurityMockServerConfigurers to refer to
correct methods.
Added documentation for mockJwt to include the
SecurityMockServerConfigurers class.
 2021-09-14 15:04:08 -03:00
Josh Cummings 4f06fc6ed1 Add Saml2LogoutConfigurer 
Closes gh-9497
 2021-09-13 16:39:48 -06:00
Josh Cummings c63d618b26 Add Single Logout Support 
Closes gh-8731
 2021-09-13 16:39:48 -06:00
Josh Cummings 6488295cad Add RelyingPartyRegistrationResolver 
Closes gh-9486
 2021-09-13 16:39:48 -06:00
Josh Cummings f5a525e740 Add Registration to Saml2Authentication 
Closes gh-9487
 2021-09-13 16:39:48 -06:00
heqiang 3443eac829 Fix typo in index.adoc 2021-09-13 16:32:32 +02:00
Marcus Da Coregio 6fae98a6f4 Update docs to point to ACL samples 
Closes gh-10110
 2021-09-06 11:14:57 -03:00
Josh Cummings 989c1419d5 Clarify OAuth 2.0 Resource Server Multitenancy Snippet 
Closes gh-10233
 2021-09-03 16:54:41 -06:00
Ayush Kohli 1cfe84922c Add Java examples to session management docs 
Closes gh-8979
 2021-08-26 10:14:48 +02:00
YevheniiLutsyshyn ac8e912ea1 Update a broken link to Spring Boot documentation 2021-08-17 11:33:49 +02:00
Josh Cummings aed203f367
Docs for WebSessionServerLogoutHandler 
Issue gh-4838
 2021-08-16 13:09:42 -06:00
Josh Cummings d5c953b106
Polish Saml2AuthenticationRequestRepository 
- Moved docs into AuthnRequest section, changed links to be more
semantically valuable to search engines
- Moved tests to be nearer to similar tests

Issue gh-9185
 2021-07-27 14:56:23 -06:00
Marcus Da Coregio 16e17d242e Add Saml2AuthenticationRequestRepository 
Closes gh-9185
 2021-07-27 14:55:53 -06:00
Steve Riesenberg bfe94f9a80 Update deprecated usage in reference docs 
Closes gh-10063
 2021-07-21 10:21:02 -05:00
dmitrilc a4431264e6 Update oauth2-resourceserver.adoc 
fix the name of the parameter, from failure to badCredentials

Replaces AuthenticationFailureEvent

Remove AuthenticationFailureEvent Reference

Closes gh-10062
 2021-07-16 11:56:57 -06:00
Rob Winch f73f213f50 Remove DependencySetPlugin 
Closes gh-10070
 2021-07-12 15:31:38 -05:00
Marcus Da Coregio ff47086d56 Update SAML docs to point to correct api url 
Closes gh-9953
 2021-07-09 11:09:55 -03:00
Luke Quinane e30b45c6fb Fix typos 2021-07-08 09:17:47 -03:00
Josh Cummings bd88f37a50
Document PasswordManagementConfigurer 
Issue gh-8657
 2021-07-01 16:58:43 -06:00
Evgeniy Cheban d121ab9565 Support A Well-Known URL for Changing Passwords 
Closes gh-8657
 2021-07-01 16:57:53 -06:00
Marcus Da Coregio 85e95719a0 Update docs links to point to minor version branches 
Closes gh-9986
 2021-07-01 09:01:25 -03:00
Marcus Hert da Coregio 03ded987af Allow Defining Custom SAML Response Validator 
Add a setter method into OpenSaml4AuthenticationProvider that allows defining a custom ResponseValidator

Closes gh-9721
 2021-06-30 08:26:42 -03:00
Marcus Hert da Coregio 6474a9e76e Allow Creating RelyingPartyRegistration from Metadata InputStream 
Update SAML2 Login reference documentation to reflect the changes

Closes gh-9558
 2021-06-30 08:02:24 -03:00
Marcus Da Coregio 58ebacc06f Use springFrameworkVersion property in docs links 
Closes gh-9987
 2021-06-29 13:20:47 -03:00
Josh Cummings 0080aeee94
Add OpenSAML 3 and 4 Explanation 
Closes gh-10014
 2021-06-28 13:25:07 -06:00
Josh Cummings 5940b8dee7
Update to use OpenSaml4AuthenticationProvider 
Closes gh-10013
 2021-06-28 13:25:02 -06:00
Josh Cummings 8d3e58f074
Polish Whitespace 
Issue gh-10013
 2021-06-28 13:24:57 -06:00
Eleftheria Stein da9d7414bd Add remaining Kotlin samples to reference docs 
Closes gh-8172
 2021-06-24 11:49:13 +02:00
Marcus Hert da Coregio bbf5614a9c Fix Broken Links in Docs 
Closes gh-9869
 2021-06-21 10:42:55 -03:00
Marcus Da Coregio 0aa93b18d6 Update links to point to migrated samples 
Closes gh-9816
 2021-06-21 10:42:55 -03:00
Marcus Hert da Coregio d60981fd59 Add messaging to documentation about sample migration 
Closes gh-9815
 2021-06-21 10:42:55 -03:00
Eleftheria Stein b51c18b37b Add missing WebFlux CORS Reference 
Closes gh-9951
 2021-06-18 16:31:02 +02:00
Eleftheria Stein 7f81b3fead Fix typos in RSocket reference docs 2021-06-18 14:39:15 +02:00
Eleftheria Stein ebef8c1425 Remove non-existent class from RSocket reference docs 
Closes gh-9949
 2021-06-18 14:15:45 +02:00
Eleftheria Stein 8bf970c805 Fix typos in WebFlux test docs 2021-06-18 13:12:10 +02:00
Eleftheria Stein ba8a5b1d20 Fix typo in WebFlux reference docs 2021-06-17 16:38:23 +02:00
Eleftheria Stein 56fd50fa2f Add remaining servlet Kotlin examples 
Issue gh-8172
 2021-06-16 10:34:21 +02:00
Eleftheria Stein 1b72e9d4e0 Fix typos in FAQ docs 2021-06-16 10:34:21 +02:00
Eleftheria Stein e89db9fd69 Fix typos in Mock MVC docs 2021-06-16 10:34:21 +02:00
Eleftheria Stein cf9071b0b2 Fix typos in SAML 2 docs 2021-06-15 09:53:53 +02:00
Josh Cummings c294050738
Anonymous Authentication Argument Resolution Docs 
Closes gh-3338
 2021-06-08 16:11:18 -06:00
Eleftheria Stein e3416640a7 Fix Resource Server clock skew default value in docs 
Closes gh-6611
 2021-06-02 12:19:36 +03:00
Josh Cummings 67e5c05a47 Polish AuthorizationManager Method Security 
- Removed consolidated pointcut advisor in favor of each interceptor
being an advisor. This allows Spring AOP to do more of the heavy
lifting of selecting the set of interceptors that applies
- Created new method context for after interceptors instead of
modifying existing one
- Added documentation
- Added XML support
- Added AuthorizationInterceptorsOrder to simplify interceptor
ordering
- Adjusted annotation lookup to comply with JSR-250 spec
- Adjusted annotation lookup to exhaustively search for duplicate
annotations
- Separated into three @Configuration classes, one for each set of
authorization annotations

Issue gh-9289
 2021-05-18 17:34:04 -06:00
Rob Winch 55f85bd3a1 Add Eleftheria Stein to Reference Authors 
Closes gh-9762
 2021-05-17 09:25:59 -05:00