10732 Commits

Author SHA1 Message Date
Josh Cummings
3f30de388a
Encode postLogoutRedirectUri query params
Closes gh-11379
2022-06-16 16:09:56 -06:00
Michael
e4505ed6c8
Add placeholders to post_logout_redirect_uri
Now supports baseScheme, baseHost, basePort, and basePath in addition
to extant baseUrl.

Closes gh-11229
2022-06-16 16:09:56 -06:00
Steve Riesenberg
79c2b8709b
Allow form login when single OAuth2 Provider is configured
Closes gh-6802
2022-06-15 14:05:55 -05:00
Josh Cummings
d22277ce36
Add missing KeyInfo
Closes gh-11354
2022-06-09 13:16:50 -06:00
Josh Cummings
bd60a0f8c9
Add OpenSamlSigningUtilsTests
Issue gh-11354
2022-06-09 13:16:49 -06:00
Josh Cummings
812bb0ead0
Add missing KeyInfo
Closes gh-11354
2022-06-09 13:12:52 -06:00
Josh Cummings
bb9c7d1b6e
Add OpenSamlSigningUtilsTests
Issue gh-11354
2022-06-09 13:12:33 -06:00
Jared Rufer
3ca4b06612
Support multiple SingleLogoutService bindings.
Closes gh-11286
2022-06-09 12:56:16 -06:00
j3graham
29ba67b6d7 Remove dependency on commons-codec by using java.util.Base64
Closes gh-11318
2022-06-09 06:50:01 -06:00
Zhivko Delchev
e97c5a533b Reverse content type check
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.

closes gh-11204
Closes gh-11205
2022-06-06 15:47:35 -05:00
Zhivko Delchev
d882bfcf2b Reverse content type check
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.

closes gh-11204
Closes gh-11205
2022-06-06 15:47:14 -05:00
Zhivko Delchev
cf69cdf008 Reverse content type check
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.

closes gh-11204
Closes gh-11205
2022-06-06 15:46:28 -05:00
shirohoo
e0fa644b08 Fix typo in BasicLookupStrategy Javadoc
Closes gh-11336
2022-06-06 14:16:28 -05:00
Rob Winch
592db9180d Enable BackportBot on 5.6.x 2022-06-06 14:16:28 -05:00
Rob Winch
6c3f53ac0a Fix typo in BasicLookupStrategy Javadoc
Issue gh-11336
2022-06-06 14:09:24 -05:00
Rob Winch
f3590519c1 Fix typo in BasicLookupStrategy Javadoc
Closes gh-11336
2022-06-06 14:08:55 -05:00
shirohoo
b274431c07 Fix typo in BasicLookupStrategy Javadoc
Closes gh-11336
2022-06-06 13:55:43 -05:00
Rob Winch
3d5e5ff556 Enable BackportBot on 5.7.x 2022-06-06 13:54:36 -05:00
Rob Winch
66592c1e66 Enable BackportBot on 5.8.x 2022-06-06 13:53:58 -05:00
shirohoo
742d7535bb Fix typo in BasicLookupStrategy Javadoc
Closes gh-11336
2022-06-06 13:52:17 -05:00
Houssem BELHADJ AHMED
fc653bb81a
make SAML authentication request uri configurable
Closes gh-10840
2022-06-06 12:49:29 -06:00
Kuby
759d799ddd Change phoneNumberVerified with type Boolean
Closes: gh-11315
2022-06-03 09:46:00 -05:00
Marcus Da Coregio
4d65d96b8a Fix saml2Tests always running after a single test
This commit makes the check task depend on the saml2Tests task.
The test task was also configured to run after saml2Tests, to make sure that the
compileTestJava runs after the compileSaml2TestJava

Issue gh-10816
2022-06-03 11:22:46 -03:00
Marcus Da Coregio
3dd54bcda7 Run SAML 2.0 tests in an exclusive task
Issue gh-10816
2022-06-02 19:24:42 +02:00
Marcus Da Coregio
23903b5f18 Use Reflection to instantiate OpenSAML4 classes
Because the OpenSAML4 classes are compiled using Java 11, we have to rely on reflection to instante those classes since the config module should be compatible with Java 8

Issue gh-10816
2022-06-02 19:24:42 +02:00
Marcus Da Coregio
e20323e0a8 Use Java 11 Toolchain for OpenSaml4 compile
Issue gh-10816
2022-06-02 19:24:42 +02:00
Marcus Da Coregio
4631375270 Use Java 8 Toolchain for modules
Issue gh-10816
2022-06-02 19:24:42 +02:00
Marcus Da Coregio
ccb1f68bfe Fix member variable using Java 9+ feature
This causes compile errors when trying to build using JDK 8

Issue gh-10695
2022-06-02 19:24:42 +02:00
Marcus Da Coregio
4c2401a576 Revert "Make source code compatible with JDK 8"
This reverts commit 60ed3602f6281d1a34c643484dfcb3440e2243d5.
2022-06-02 19:24:42 +02:00
sKai.fun
a3e996a66b Fix title render issue of Digest Authentication document
Closes gh-11272
2022-06-01 17:33:41 -05:00
sKai.fun
953b54f63d Fix title render issue of Digest Authentication document
Closes gh-11272
2022-06-01 15:15:03 -05:00
Evgeniy Cheban
d557d2d0eb Add RoleHierarchy to AuthorityAuthorizationManager
Added roleHierarchy field to AuthorityAuthorizationManager
that defaults to NullRoleHierarchy along with setter method to override.

Closes gh-11304
2022-06-01 08:28:16 -06:00
André Luis Gomes
aca3fc2412 Update opaque-token.adoc
Fixing yaml sample in Servlet and Reactive pages
2022-06-01 08:51:44 -03:00
André Luis Gomes
0c31cb21dc Update opaque-token.adoc
Fixing yaml sample in Servlet and Reactive pages
2022-06-01 08:50:56 -03:00
André Luis Gomes
24701b547f Update opaque-token.adoc
Fixing yaml sample in Servlet and Reactive pages
2022-06-01 08:49:47 -03:00
Claudio Consolmagno
07f9afe057
Use 'md:' prefix in EntityDescriptor XML
Create the EntityDescriptor object with
EntityDescriptor.DEFAULT_ELEMENT_NAME instead of
EntityDescriptor.ELEMENT_QNAME. That ensures the EntityDescriptor tag
is marshalled to xml with the 'md:' prefix, consistent with all other
metadata tags.

Closes #11283
2022-05-31 17:11:02 -06:00
Claudio Consolmagno
c39d39b35f
Use 'md:' prefix in EntityDescriptor XML
Create the EntityDescriptor object with
EntityDescriptor.DEFAULT_ELEMENT_NAME instead of
EntityDescriptor.ELEMENT_QNAME. That ensures the EntityDescriptor tag
is marshalled to xml with the 'md:' prefix, consistent with all other
metadata tags.

Closes #11283
2022-05-31 17:08:51 -06:00
Claudio Consolmagno
b1004aff4e
Use 'md:' prefix in EntityDescriptor XML
Create the EntityDescriptor object with
EntityDescriptor.DEFAULT_ELEMENT_NAME instead of
EntityDescriptor.ELEMENT_QNAME. That ensures the EntityDescriptor tag
is marshalled to xml with the 'md:' prefix, consistent with all other
metadata tags.

Closes #11283
2022-05-31 17:07:18 -06:00
Josh Cummings
38d481eba6
Make Internal Class Package-Private
Issue gh-11305
2022-05-31 16:04:26 -06:00
Josh Cummings
d994ddc9b8
Polish InterceptUrlConfigTests
Issue gh-11305
2022-05-31 16:04:02 -06:00
Josh Cummings
9dbd1f3e25
Use AuthorizationManager in <http>
Closes gh-11305
2022-05-31 15:10:00 -06:00
Josh Cummings
7c0ba58019
Fix rnc typo
Issue gh-11076
2022-05-27 16:59:23 -06:00
Josh Cummings
d7077b441a
Correct access(String) reference
Closes gh-11280
2022-05-27 15:00:15 -06:00
Josh Cummings
292585080a
Correct access(String) reference
Closes gh-11280
2022-05-27 14:59:06 -06:00
Josh Cummings
0abc54c7de
Correct access(String) reference
Closes gh-11280
2022-05-27 14:52:20 -06:00
Josh Cummings
101f11ba94
Improve ContextConfiguration Docs
Point to updated Spring Reference

Issue gh-10934
2022-05-27 13:12:56 -06:00
Josh Cummings
18b903f6e3
Polish ExtendWith Docs
Use spring-framework-reference-url placeholder

Issue gh-10934
2022-05-27 13:12:56 -06:00
nor-ek
038266a94f
Update JUnit 5 annotations in documentation
- replace Before with BeforeEach
- replace RunWith with ExtendWith

Closes gh-10934
2022-05-27 13:12:55 -06:00
Josh Cummings
8690accd57
Improve ContextConfiguration Docs
Point to updated Spring Reference

Issue gh-10934
2022-05-27 12:57:57 -06:00
Josh Cummings
e3c15260e7
Polish ExtendWith Docs
Use spring-framework-reference-url placeholder

Issue gh-10934
2022-05-27 12:57:57 -06:00