Commit Graph

698 Commits

Author SHA1 Message Date
Rob Winch dcbf762a0b WebClient OAuth2 Support for defaultClientRegistrationId
Fixes: gh-5872
2018-09-19 11:47:04 -05:00
Josh Cummings f48055ce47
Polish Section Link in What's New 2018-09-19 10:20:42 -06:00
Rob Winch ece5de3f99 Polish What's New
Issue: gh-5857
2018-09-19 09:45:13 -05:00
Rob Winch 62db88ce6a Add WebFlux CORS Reference
Fixes: gh-5870
2018-09-18 21:24:36 -05:00
Rob Winch 501c008526 Add WebFlux Redirect to HTTPS Reference
Fixes: gh-5869
2018-09-18 21:12:37 -05:00
Rob Winch db9248e05a Polish WebFlux HTTP Headers Reference
Issue: gh-5868
2018-09-18 20:30:45 -05:00
Rob Winch 7b7f579746 What's New Links to WebFlux sections
Issue: gh-5857
2018-09-18 17:23:03 -05:00
Rob Winch 54d07b6b8b Add WebFlux HTTP Headers Reference
Fixes: gh-5868
2018-09-18 17:09:41 -05:00
Josh Cummings a7f94b2188
Separate Servlet and WebFlux Feature Lists
Issue: gh-5857
2018-09-18 12:05:20 -06:00
Josh Cummings 2a83e34db5
Remove NOTE bookmarks
Originally, there were two references to "[[NOTE]]" which was
confusing since Asciidoc can't have two bookmarks of the same name.

Changed these to "[NOTE]" so they would display the "note" component
in the docs.

Issue: gh-5866
2018-09-18 12:05:19 -06:00
Rob Winch 87243ea453 Add WebFlux Resource Server Reference
Fixes: gh-5866
2018-09-18 10:58:56 -05:00
Rob Winch 83af2df131 Add WebFlux @RegisteredOAuth2AuthorizedClient Reference
Fixes: gh-5864
2018-09-18 10:25:06 -05:00
Rob Winch 1e1b8ab3e7 Add WebFlux OAuth2 Client Reference
Fixes: gh- 5865
2018-09-18 10:24:59 -05:00
Rob Winch a44d07ecf4 Fix OAuth2 Login Reference Format
Issue: gh-5836
2018-09-18 09:42:09 -05:00
Rob Winch 3ecefab957 Add WebFlux OAuth2 Login Reference
Fixes: gh-5863
2018-09-18 09:41:45 -05:00
Rob Winch 735d755bb1 Add WebClient OAuth2 Documentation
Fixes: gh-5859
2018-09-17 22:26:33 -05:00
Josh Cummings 26afc18b66
What's New in Spring Security 5.1
An initial skeleton pointing to the various sections of Spring
Security that received an update in Spring Security 5.1

Issue: gh-5857
2018-09-17 16:37:47 -06:00
Rob Winch 5b8d66e911 Extract Preface
Issue: gh-5836
2018-09-12 17:04:41 -05:00
Rob Winch 57359058dd Separate Servlet and WebFlux
Fixes: gh-5836
2018-09-12 16:48:41 -05:00
Jisoo Youn 3f3a3e8351 Fix convention 2018-09-11 13:57:23 -05:00
Jason Zhekov 439538477a Add missing space in namespace.adoc 2018-08-27 10:43:53 -05:00
Do Nhu Vy cbd28cfd1e Polish Reference Documentation 2018-08-18 20:39:18 -05:00
Do Nhu Vy 329bde0db1 Update database-schema.adoc 2018-08-18 20:21:35 -05:00
Do Nhu Vy b192bf54f7 Update database-schema.adoc 2018-08-18 20:21:35 -05:00
Do Nhu Vy 594cacb0d6 Add SQL for Oracle at section USERS and revise ACL
I feel very painful when using SQL script for Oracle database. I set datatype, number(18), number(38) is too big, all character is uppercase (because Oracle database is case-insensitive). ACL's SQL script has script for Oracle database, but section USERS, AUTHORITIES has not SQL scrip for Oracle database, therefore I add more.
2018-08-18 20:21:35 -05:00
Do Nhu Vy 7f04d8d893 Polish Reference Documentation
- Improve emphasis
- Fix formatting
- Update to Spring Framework 5
- Bom -> BOM

Fixes: gh-5695
2018-08-18 20:09:31 -05:00
Do Nhu Vy 1d8db1085a Polish Reference Documentation
- Fix Broken Link
- Update docs to state Spring Security 5 instead of Spring Security 4

Fixes: gh-5694
2018-08-18 20:05:44 -05:00
Vedran Pavic c6ea447cc0 Add support for Feature-Policy security header 2018-08-16 09:31:02 -05:00
fdesu 9c478257d4 Fix the broken link in the WebSocket documentation
Changeset 46bb855 (#4094) removed websocket chat
sample in favor of spring-session one. This commit
updates spring-security documentation link to
point to the up-to-date sample location
2018-08-16 09:14:24 -05:00
Johnny Lim fe17c71775 Mention spring-security-data dependency for Spring Data in doc
Closes #5556
2018-07-31 09:56:57 -05:00
Henry Lin 7e52fe67f4 Fixed document error 2018-07-19 09:35:16 -06:00
Rob Winch 1137f3b46d Add cross references to ReactorContextTestExecutionListener
Fixes: gh-5418
2018-06-11 17:13:24 -05:00
Joe Grandja 81e19ad85e Move oauth2 samples under boot directory
Issue gh-5397
2018-06-06 09:37:36 -04:00
Joe Grandja de95583509 Move oauth2login samples under oauth2 directory
Fixes gh-5397
2018-05-30 12:16:05 -04:00
Rob Winch 73345e7434 Add Cross Site Tracing (XST) & HTTP Method Tampering Protection
Fixes: gh-5377
2018-05-24 09:35:40 -05:00
Robert Roth 4bfce2a591 Fixed typo in acl database schema appendix.
Fixes gh-5204
2018-05-07 16:44:32 -05:00
Robert Roth fddc28ba3b Fixed typo in CSRF documentation.
Fixes gh-4792
2018-05-07 16:44:32 -05:00
Johnny Lim 2a0f529ee4 Use spring-projects for organization in GitHub URLs 2018-05-04 21:01:39 -05:00
Johnny Lim 44b22e7208 Fix 'attributes' deprecation warning in spring-security-docs-guides 2018-05-04 14:12:14 -05:00
Josh Cummings f8247fa346
Remove Default URLs and Parameters Commentary
This paragraph was originally there to explain why Spring Security was
moving from the old default URLs and parameters to new ones.

Now that the defaults are the same in XML and well as Java Config, the
explanation is now no longer relevant.

Fixes: gh-5242
2018-04-19 08:53:23 -06:00
Joe Grandja 526e0fdd4f Add OAuth2 Client HandlerMethodArgumentResolver
Fixes gh-4651
2018-04-02 12:13:52 -04:00
Rob Winch 6e5105f899 Extract appendix subsections
Issue: gh-2567
2018-03-09 16:34:46 -06:00
Rob Winch 40bb73124c Move data to data/index
Issue: gh-2567
2018-03-09 16:34:42 -06:00
Rob Winch 780e6aefd2 Extract additional-topics subsections
Issue: gh-2567
2018-03-09 16:34:38 -06:00
Rob Winch 35345fac70 Extract authorization subsections
Issue: gh-2567
2018-03-09 16:34:35 -06:00
Rob Winch 8cf51032e0 Extract Subsections of Web
Issue: gh-2567
2018-03-09 16:34:31 -06:00
Rob Winch ae9075c023 Extract test subsections
Issue: gh-2567
2018-03-09 16:34:30 -06:00
Rob Winch cf4272ff64 Extract architecture subsections
Issue: gh-2567
2018-03-09 16:34:24 -06:00
Rob Winch 4152530e69 Fix new lines
Issue: gh-2567
2018-03-09 16:34:20 -06:00
Rob Winch 73cec43842 Extract subsections for preface
Issue: gh-2567
2018-03-09 16:34:12 -06:00
Rob Winch 86465026a1 Extract top level section of reference
Issue: gh-2567
2018-03-09 16:33:54 -06:00
Rob Winch e799f13ae2 Consistent new lines in referenche
Issue: gh-2567
2018-03-09 16:33:54 -06:00
Rob Winch d21338d212 Support errorOnInvalidType for Reactive AuthenticationPrincipal
Fixes: gh-5096
2018-03-09 12:05:55 -06:00
Rob Winch a2073b2b91 Support BeanResolver for Reactive AuthenticationPrincipal
Fixes: gh-4326
2018-03-09 12:05:55 -06:00
Rob Winch d816af2337 Add BadCredentials Jackson Support to What's New
Issue: gh-5087
2018-03-09 12:05:55 -06:00
Rob Winch 7fafd899ee Add Reactive WithUserDetails to What's new
Issue: gh-4888
2018-03-09 12:05:55 -06:00
Rob Winch abae2f3e87 Allow WithSecurityContextTestExecutionListener to execute after @Before
Fixes: gh-2935
2018-03-08 14:13:07 -06:00
Rob Winch 210a510bba Use HttpFirewall Bean
Fixes: gh-5022
2018-02-15 17:18:28 -06:00
Rob Winch 6f48afbfe6 Format HttpFirewall Reference
Put each sentence on a newline.

Issue: gh-5022
2018-02-15 17:18:28 -06:00
Rob Winch 964a14b224 Document Reactive Method security requires Publisher return types
Fixes: gh-4988
2018-02-07 16:43:18 -06:00
Rissy Lin 4fbfb710f5 fix typo in documentation: index.adoc
1) for more on information on how the Spring Security `AuthenticationManager` is -> for more information on how the Spring Security `AuthenticationManager` is`

2) all the sames things -> all the same things
2018-02-07 10:48:00 -06:00
Rob Winch e1a8d250de Add authenticated().withAuthentication(Consumer<Authentication>)
This allows arbitrary assertions of the authenticated user

Fixes: gh-4996
2018-02-02 16:56:45 -06:00
Rob Winch cd88c739e0 Add Guides to docsZip
Fixes: gh-4327
2018-01-30 15:35:30 -06:00
Joe Grandja 84679a5d64 Polish #4904 Support GrantedAuthoritiesMapper @Bean for oauth2Login 2018-01-23 12:14:57 -05:00
Rob Winch 65c3862da9 Password Troubleshooting Reference Fix
Correct the package to NoOpPasswordEncoder within the reference

Fixes: gh-4965
2018-01-18 08:25:52 -06:00
Rob Winch 450600cbb8 Polish reference 2018-01-12 09:17:05 -06:00
Rob Winch 0991f31613 Document exchange password for short term credential
Fixes gh-4959
2018-01-12 09:15:35 -06:00
Joe Grandja aa900065b8 Document OAuth2UserService delegation-based strategy for authorities mapping
Fixes gh-4909
2018-01-11 10:07:58 -05:00
Johnny Lim f3830eec7d Rename userDetailsRepository to userDetailsService 2018-01-10 16:04:48 -06:00
Rob Winch 00e8795adc Update What's New 2017-11-27 11:50:37 -06:00
Rob Winch cd1a02225b Document PasswordEncoder 2017-11-27 11:42:56 -06:00
Rob Winch 690e22778a Polish Docs 2017-11-27 11:42:56 -06:00
Joe Grandja 4f85f3a12f Polish - Editing pass for OAuth 2.0 Login ref doc 2017-11-22 10:44:50 -05:00
Jay Bryant 3eb66f37e0 Editing pass for OAuth 2.0 Login ref doc
Fixes gh-4850
2017-11-21 22:01:15 -05:00
Joe Grandja 94a8d9b116 Add OAuth 2.0 Login in reference doc
Fixes gh-4849
2017-11-17 11:37:56 -05:00
Johnny Lim 9e22190198 Remove duplicate eruby option in asciidoctor task 2017-11-16 11:19:20 -06:00
Rob Winch 82adf744f5 Polish Docs 2017-10-31 10:27:34 -05:00
Rob Winch e95430fa36 Polish Reactive Method Security reference
Issue gh-4757
2017-10-30 16:27:50 -05:00
Rob Winch d664ff2e26 Lookup HandlerMappingIntrospector from Bean 2017-10-30 16:27:50 -05:00
Rob Winch 8e6c726fb2 Add WebFlux to What's New 5.0
Fixes gh-4757
2017-10-30 15:29:13 -05:00
Rob Winch 5280ac40e9 WebMvcConfigurerAdapter->WebMvcConfigurer
Fixes gh-4612
2017-10-30 01:30:08 -05:00
Arend v. Reinersdorff a558d408a3 Minor typos PreAuthenticatedAuthenticationProvider 2017-10-29 22:12:04 -05:00
Kyle Anderson a139a0052d Fix Typo in Reference Docs 2017-10-29 22:09:46 -05:00
Paul Wheeler 6decf1c8ef Allow use of non-numeric (e.g. UUID) values for ObjectIdentity.getIdentifier()
Prior to this commit, the ObjectIdentity id had to be a number. This
commit allows for domain objects to use UUIDs as their identifier. The
fully qualified class name of the identifier type can be specified
in the acl_object_identity table and a ConversionService can be provided
to BasicLookupStrategy to convert from String to the actual identifier
type.

There are the following other changes:

 - BasicLookupStrategy has a new property, aclClassIdSupported, which
 is used to retrieve the new column from the database. This preserves
 backwards-compatibility, as it is false by default.

 - JdbcMutableAclService has the same property, aclClassIdSupported,
 which is needed to modify the insert statement to write to the
 new column. Defaults to false for backwards-compatibility.

 - Tests have been updated to verify both the existing functionality
 for backwards-compatibility and the new functionality.

Fixes gh-1224
2017-10-29 21:29:12 -05:00
Rob Winch b91aa19b35 Doc DelegatingPasswordEncoder is default
Fixes gh-gh-2775
2017-10-24 07:56:28 -05:00
Rob Winch cdc992b132 Remove SaltSource
Fixes gh-4681
2017-10-24 07:56:28 -05:00
Rob Winch 6a3e981c80 Remove BaseDigestPasswordEncoder from core
Issue: gh-4674
2017-10-24 07:55:40 -05:00
Hanson, Tristan 53cb6c17e4 gh-4482 - Updating docs for `ConcurrentSessionFilter` configuration example 2017-10-12 07:41:11 -05:00
Robby Pond 9833f0090d Update to remove extra Header
Update to remove extra Ldap Authentication Section Header
2017-10-06 17:07:08 -05:00
Stephan Schroevers 9e719bc313 Drop the `aopalliance:aopalliance` dependency
As of Spring 4.3 RC1 the `org.aopalliance` interfaces are once again bundled
with `spring-aop` [1]. Moreover, all modules with a dependency on
`aopalliance:aopalliance` directly or indirectly also depend on `spring-aop`.

This change drops the `aopalliance:aopalliance` dependency in all places it's
declared. Where applicable an explicit dependency on `spring-aop` was added in
its place. (This dependency was already present in most places; in one case the
module didn't require `aopalliance:aopalliance` in the first place.)

The documentation is updated accordingly.

[1] https://jira.spring.io/browse/SPR-13984
2017-09-22 11:11:04 -05:00
Rob Winch 3f58822d4d Fix MyCustomDsl Reference
Fixes gh-4340
2017-09-18 16:07:29 -05:00
stonio dbda7e35a4 Update index.adoc - add missing callout
To fix WARNING: index.adoc: line 988: no callouts refer to list item 1
2017-06-15 12:49:20 -05:00
Rob Winch 221d4f8fb1 Document WebFlux What Is New
Issue gh-4325
2017-05-10 00:28:16 -05:00
Joe Grandja 829c386756 Add support for OAuth 2.0 Login
Fixes gh-3907
2017-04-28 10:58:59 -04:00
Rob Winch dd6fc48dd8 Standardize Build
The build now uses spring build conventions to simplify the build

Fixes gh-4284
2017-04-21 10:55:05 -05:00
Rob Winch d59f128210 Fix asciidoc in manual
Fixes gh-4301
2017-04-21 10:50:30 -05:00
Rob Winch 49719480a8 Fix configuration-source-ref doc
Fixes gh-4200
2017-03-02 00:25:51 -06:00
pkovacs f99fe36e02 Refer to SimpleGrantedAuthority instead of GrantedAuthorityImpl
GrantedAuthorityImpl has been replaced a couple of years ago with
SimpleGrantedAuthority and this commit fixes the documentation items
which weren’t updated to reflect this change.

Fixes gh-4163.
2017-03-02 00:09:14 -06:00
Artyom Kosykh 72d08a2a5f Fix index.adoc typo 2017-03-01 23:45:50 -06:00
stonio aa5df61eff Fix index.adoc typo 2016-12-21 10:19:51 -06:00