Commit Graph

1061 Commits

Author SHA1 Message Date
Rob Winch b1d013e8f0 Fix JDK 9
Issue: gh-5160
2018-03-27 09:30:56 -05:00
Joe Grandja 59cef7d339 HttpSessionOAuth2AuthorizationRequestRepository handle multiple OAuth2AuthorizationRequest per session
Fixes gh-5110
2018-03-20 22:14:48 -05:00
Rob Winch c9ef2549b2 Update to appengine-gradle-plugin:1.3.5
Fixes: gh-5054
2018-02-27 20:45:27 -06:00
Rob Winch c5e6ee4563 Update Dependencies
Fixes: gh-4973
2018-01-24 13:48:14 -06:00
Michael J. Simons 1517e9b222 Migrate xml-contacts groovy->java
See #4939.
2018-01-24 11:06:08 -06:00
Michael J. Simons 4a3baad4f9 Migrate xml-ldap groovy->java
See #4939.
2018-01-24 11:06:08 -06:00
Michael J. Simons 8c6f965973 Migrate javaconfig-ldap groovy->java
See #4939.
2018-01-24 11:06:08 -06:00
Michael J. Simons 26f7b2f99f Migrate javaconfig-helloworld groovy->java
See #4939.
2018-01-24 11:06:08 -06:00
Michael J. Simons 2e2b22f87e Migrate xml-insecure groovy->java
See #4939.
2018-01-24 11:06:08 -06:00
Rob Winch fe40952908 Revert "webflux-form sample uses Tomcat"
This reverts commit 67bb91bb76.

We can use Netty again now that reactor/reactor-netty#248 has
been resolved.

Fixes: gh-4923
2018-01-23 08:31:41 -06:00
Michael J. Simons 6c0b510c98 Remove hardcoded Spring versions from namespaces
This fixes #4945.
2018-01-10 16:47:20 -06:00
Michael J. Simons b634b49f9f Migrate xml-jaas groovy->java 2018-01-10 16:44:59 -06:00
Michael J. Simons cd3449b312 Migrate javaconfig-form groovy->java
See #4939
2018-01-10 16:41:36 -06:00
Johnny Lim f3830eec7d Rename userDetailsRepository to userDetailsService 2018-01-10 16:04:48 -06:00
Michael J. Simons a4701bcd52 Migrate javaconfig-jdbc groovy->java
See #4939.
2018-01-10 16:03:39 -06:00
Michael J. Simons 718052932a Migrate xml-helloworld groovy->java
This is a suggestion how to migrate the GebSpec based tests to Java / Selenium based tests.

Issue: gh-4939
2018-01-03 09:35:28 -06:00
Michael J. Simons f9083614be Remove duplicate dependency 2018-01-03 09:35:28 -06:00
Johnny Lim 921157cdcd Remove explicit super() calls 2017-12-21 15:11:51 -06:00
Johnny Lim 57353d18e5 Use diamond type 2017-12-21 15:09:00 -06:00
Rob Winch 67bb91bb76 webflux-form sample uses Tomcat
Work around gh-4923
2017-12-20 15:08:49 -06:00
Joe Grandja 0c708976c6 Update oauth2Login sample to use master
Fixes gh-4910
2017-12-12 15:31:00 -05:00
Joe Grandja 86824030f2 Update oauth2Login sample guide
Fixes gh-4858
2017-11-22 14:47:31 -05:00
Rob Winch d55db837e1 CsrfWebFilter places Mono<CsrfToken>
Fixes: gh-4855
2017-11-20 16:30:29 -06:00
Johnny Lim 701933c7f7 Fix copyright start years
See gh-4655
See gh-4725
2017-11-17 10:14:32 -06:00
Johnny Lim b6895e6359 Apply Checkstyle WhitespaceAfterCheck module 2017-11-16 11:18:31 -06:00
Joe Grandja 4039cd285e oauth2Login sample depends on security RC1
Fixes gh-4828
2017-11-15 14:51:35 -05:00
Johnny Lim d900f2a623 Remove unused imports
This commit also adds UnusedImportsCheck Checkstyle module.
2017-11-14 14:41:08 -06:00
Joe Grandja 0d33864b5a Remove redundant 'provider' property from oauth2Login sample config
Fixes gh-4817
2017-11-13 17:32:44 -05:00
Joe Grandja 3661cb58d6 Polish oauth2Login sample integration test
Fixes gh-4811
2017-11-12 12:59:58 -05:00
Joe Grandja 1dac191b19 Remove custom security config from oauth2Login sample
Fixes gh-4808
2017-11-11 21:15:01 -05:00
Joe Grandja cd9e712117 Remove GlobalAuthenticationConfigurerAdapter from oauth2Login sample
Fixes gh-4665
2017-11-11 21:15:01 -05:00
Johnny Lim 99df632f24 Add missing @Override annotations
This commit also adds MissingOverrideCheck module to Checkstyle configuration.
2017-11-08 13:27:24 -06:00
Rob Winch f1245059ff Consistent Thymeleaf Version in Boot Samples
Issue gh-4802
2017-11-08 09:04:50 -06:00
Rob Winch 9d7802d71f Configure logback for webflux-form
Issue gh-4802
2017-11-08 08:32:32 -06:00
Rob Winch 1728e21804 Update Thymeleaf
We can remove PatchThymleeafReactiveView now that it is fixed and released
in Thymeleaf.

Issue gh-4802
2017-11-08 08:29:49 -06:00
Rob Winch 75e77292cf webflux-form sample
Fixes gh-4802
2017-11-07 22:25:56 -06:00
Rob Winch 91e27c1422 Add slf4jDependencies to hellowebflux
Fixes gh-4798
2017-11-07 22:24:32 -06:00
Rob Winch 5280ac40e9 WebMvcConfigurerAdapter->WebMvcConfigurer
Fixes gh-4612
2017-10-30 01:30:08 -05:00
Antoine 0771778b81 Polish more AssertJ assertions 2017-10-29 22:22:34 -05:00
Antoine e0aca04a28 Polish AssertJ assertions
Polish AssertJ assertions
2017-10-29 22:22:34 -05:00
Paul Wheeler 6decf1c8ef Allow use of non-numeric (e.g. UUID) values for ObjectIdentity.getIdentifier()
Prior to this commit, the ObjectIdentity id had to be a number. This
commit allows for domain objects to use UUIDs as their identifier. The
fully qualified class name of the identifier type can be specified
in the acl_object_identity table and a ConversionService can be provided
to BasicLookupStrategy to convert from String to the actual identifier
type.

There are the following other changes:

 - BasicLookupStrategy has a new property, aclClassIdSupported, which
 is used to retrieve the new column from the database. This preserves
 backwards-compatibility, as it is false by default.

 - JdbcMutableAclService has the same property, aclClassIdSupported,
 which is needed to modify the insert statement to write to the
 new column. Defaults to false for backwards-compatibility.

 - Tests have been updated to verify both the existing functionality
 for backwards-compatibility and the new functionality.

Fixes gh-1224
2017-10-29 21:29:12 -05:00
Joe Grandja a261c9a047 Polish OAuth2LoginConfigurer
Fixes gh-4747
2017-10-29 21:33:51 -04:00
Joe Grandja c3d2effc1d Polish OAuth2AuthorizedClientService
Fixes gh-4746
2017-10-29 20:25:03 -04:00
Joe Grandja e4887057bc Rename AuthorizationGrantTokenExchanger -> OAuth2AccessTokenResponseClient
Fixes gh-4741
2017-10-29 17:49:15 -04:00
Rob Winch fb632624d2 Update dependency versions
Fixes gh-4739
2017-10-29 14:31:57 -05:00
Rob Winch 192776858d HttpStatusServerAccessDeniedHandler write error message 2017-10-28 22:59:24 -05:00
Joe Grandja 8e0d88d3e9 Remove GitHubOAuth2User from oauth2Login sample
Fixes gh-4732
2017-10-28 18:25:45 -04:00
Joe Grandja 0c68eb1821 Re-factor OAuth2AuthorizationCodeAuthenticationToken
Fixes gh-4730
2017-10-28 17:15:31 -04:00
Joe Grandja 64d8c8b8a9 Re-factor AuthorizationGrantTokenExchanger
Fixes gh-4728
2017-10-28 17:12:14 -04:00
Joe Grandja 9afefef3b9 Polish class names in oauth2-client
Fixes gh-4722
2017-10-27 21:00:52 -04:00
Joe Grandja 34668e05af Polish class names in oauth2-core
Fixes gh-4720
2017-10-27 20:42:58 -04:00
Joe Grandja ef83bc8dd7 Move package client.authentication.userinfo -> client.userinfo
Fixes gh-4708
2017-10-26 15:39:04 -04:00
Joe Grandja 942b647c0d OAuth2LoginAuthenticationFilter processes uri /login/oauth2/code/*
Issue gh-4687
2017-10-26 14:20:19 -04:00
Joe Grandja 43d201fa3e Move OAuth2AuthenticationToken
Fixes gh-4697
2017-10-25 16:17:49 -04:00
Joe Grandja 5a584e5ccb Rename OAuth2/OIDC ClientAuthenticationToken -> AuthorizedClient
Fixes gh-4695
2017-10-25 13:47:00 -04:00
Rob Winch 8fd0ba3bc4 Fix README authorization callback URLs
Issue gh-4659
2017-10-24 15:14:58 -05:00
Joe Grandja 049080290e Refactor OAuth2 AuthenticationProvider's
Fixes gh-4689
2017-10-24 15:24:26 -04:00
Joe Grandja 0fb32a052e OAuth2LoginAuthenticationFilter processes uri /login/oauth2/*
Fixes gh-4687
2017-10-24 15:24:26 -04:00
Joe Grandja 4ae24f2fbe Rename AuthorizationCodeAuthenticationFilter -> OAuth2LoginAuthenticationFilter
Fixes gh-4686
2017-10-24 15:24:25 -04:00
Rob Winch 8291f20796 DaoAuthenticationProvider uses DelegatingPasswordEncoder
This means that passwords will be encoded with BCrypt by default

Fixes: gh-2775
2017-10-24 07:56:28 -05:00
Rob Winch d19b222b55 UserDetailsRepositoryReactiveAuthenticationManager uses DelegatingPasswordEncoder
This means passwords will be encoded with BCrypt by default

Issue: gh-2775
2017-10-24 07:56:28 -05:00
Joe Grandja f0c9f85292 spring-security-jwt-jose -> spring-security-oauth2-jose
Fixes gh-4595
2017-10-23 09:04:01 -04:00
Joe Grandja a49047dec5 Fix OAuth2LoginApplicationTests
Issue gh-4659
2017-10-20 04:41:48 -04:00
Joe Grandja ee6c1f2ddd Add temporary GlobalAuthenticationConfigurerAdapter
Fixes gh-4664
2017-10-19 12:15:35 -04:00
Joe Grandja e91da5959c Remove auto-config classes from oauth2Login sample
Fixes gh-4638
2017-10-19 11:27:22 -04:00
Joe Grandja 1e891b38ab Rename scope -> scopes for Set types
Fixes gh-4644
2017-10-18 17:56:39 -04:00
Rob Winch b81c1ce2c0 Move spring-security-webflux into spring-security-web
Fixes gh-4662
2017-10-18 16:20:09 -05:00
Joe Grandja 7b8d131386 Fix package tangles -> OAuth2/Oidc AuthenticationProvider's
Fixes gh-4614
2017-10-16 20:56:32 -04:00
Joe Grandja 3c824dc44b Fix package tangles -> OAuth2UserService
Fixes gh-4614
2017-10-13 18:59:41 -04:00
Joe Grandja cfa4858b04 Fix package tangles -> AuthorizationGrantTokenExchanger
Fixes gh-4614
2017-10-13 16:35:48 -04:00
Rob Winch 211e8eae90 Remove formLogin() and httpBasic() from defaults 2017-10-12 16:41:01 -05:00
Rob Winch 792944eee7 HttpSecurity->ServerHttpSecurity
Issue gh-4615
2017-10-11 13:58:24 -05:00
Rob Winch a5af2a07d7 HttpHeadersWriter->ServerHttpHeadersWriter
Issue gh-4615
2017-10-11 13:58:09 -05:00
Rob Winch d0de8d40dd WebFilterChainFilter -> WebFilterChainProxy
Issue gh-4615
2017-10-11 13:57:50 -05:00
Rob Winch 4681697581 UserDetailsRepository->ReactiveUserDetailsService
Issue gh-4615
2017-10-11 13:57:30 -05:00
Joe Grandja d840090cb0 Add support for implicit grant type
Fixes gh-4500
2017-10-11 13:54:59 -04:00
Joe Grandja bd4d814e4b Fix bug in oauth2Login sample 2017-10-10 14:40:11 -04:00
Joe Grandja 6b16fa0d8c Polish OAuth Security Configurers 2017-10-10 14:38:06 -04:00
Joe Grandja 97c938e7f3 Extract authentication logic from AuthorizationCodeAuthenticationFilter
Fixes gh-4590
2017-10-10 14:38:06 -04:00
Rob Winch 60b5a18a49 Update thymeleaf-layout-dialect-2.2.2
Issue: gh-4608
2017-10-09 16:12:57 -05:00
Rob Winch 72bbb27bf8 Update appengine-gradle-plugin to 1.3.3
Issue: gh-4608
2017-10-09 16:12:41 -05:00
Rob Winch 448ee08f28 Update to Boot 2.0.0.M4
Issue: gh-4608
2017-10-09 16:12:22 -05:00
Joe Grandja 5811624bbe Polish endpoint package
* Remove ErrorResponseAttributes
* Rename AuthorizationRequestAttributes -> AuthorizationRequest
* Remove AuthorizationCodeTokenRequestAttributes
* Rename TokenResponseAttributes -> TokenResponse

Issue gh-4593
2017-10-06 18:51:24 -04:00
Joe Grandja eca2b67137 ClientRegistration supports 'baseUrl' uri variable
Fixes gh-4589
2017-10-05 20:35:51 -04:00
Joe Grandja eb320bfed4 AuthorizationCodeAuthenticationProcessingFilter -> AuthorizationCodeAuthenticationFilter 2017-10-05 16:40:12 -04:00
Joe Grandja 5c14e48b18 Add OAuth2UserAuthenticationProvider
Moved logic from AuthorizationCodeAuthenticationProvider
to OAuth2UserAuthenticationProvider (new) related to
loading user attributes via OAuth2UserService.

This re-factor is part of the work required for Issue gh-4513
2017-10-05 15:15:35 -04:00
Joe Grandja 0d516ca32c Rename scopes -> scope 2017-10-02 15:50:16 -04:00
Joe Grandja fb57111ecd redirect-uri property supports 'baseRedirectUrl' uri variable
Fixes gh-4589
2017-10-02 15:29:03 -04:00
Joe Grandja 66647070ab Default login page supports Iterable<ClientRegistration>
Fixes gh-4596
2017-09-29 19:54:17 -04:00
Joe Grandja ad91adf9dc Retrieving the UserInfo is conditional
Fixes gh-4451
2017-09-29 10:51:16 -04:00
Joe Grandja 8448a54678 Remove ClientRegistrationRepository.getRegistrations()
Fixes gh-4582
2017-09-28 07:02:59 -04:00
Joe Grandja 814742fef6 Rename ClientRegistration.clientAlias -> registrationId
Fixes gh-4575
2017-09-27 09:14:55 -04:00
Joe Grandja 38be35677d Add userNameAttributeName to ClientRegistration
Fixes gh-4580
2017-09-26 21:55:19 -04:00
Joe Grandja 0e9b2807bf Split up NimbusOAuth2UserService
Fixes gh-4447
2017-09-26 11:32:49 -04:00
Rob Winch 71b1720cfe Use WebHttpHandlerBuilder in samples
DispatcherHandler.toHttpHandler was removed
2017-09-22 20:36:34 -05:00
Joe Grandja c54c622124 Re-structure OAuth2AuthenticationToken
Fixes gh-4553
2017-09-19 16:35:43 -04:00
Rob Winch c46243594a Use appengine-gradle-plugin
The com.google.appengine:gradle-appengine-plugin is deprecated
2017-09-18 12:00:50 -05:00
Rob Winch f8ee9944ff Copyright date range 2017-09-18 11:18:46 -05:00
Rob Winch 1f4082e754 Fix copyright lines 2017-09-18 11:11:25 -05:00
Rob Winch 3ecf3ea034 Fix double * in Copyright headers 2017-09-18 10:47:26 -05:00
Rob Winch 455e2bab90 Update to Gradle 4.1 2017-09-18 10:19:59 -05:00
Rob Winch 404a8e793e Add WithMockUser & mutateWith to WebFlux Samples 2017-09-18 10:18:11 -05:00
Rob Winch 21f8ee7f36 Use basicAuthenticationCredentials 2017-09-13 15:31:32 -05:00
Joe Grandja 65b968f04a Move servlet-specific classes to 'web' package
Fixes gh-4366
2017-09-13 16:13:32 -04:00
Rob Winch 0a36359f11 WebFlux HTTP Basic & Form Login Sessions
By default both HTTP Basic and form log are enabled. Now HTTP Session will
not be used for HTTP Basic, but will be for form log in.
2017-09-13 14:47:44 -05:00
Joe Grandja e31684bcf5 Update google defaults 2017-09-13 14:04:18 -04:00
Rob Winch 1fe414379c Simplify hellowebfluxfn
This sample should be absolute minimal example
2017-09-13 10:45:11 -05:00
Rob Winch 164404c7d3 Simplify hellowebflux
This sample should be absolute minimal example.
2017-09-13 10:40:50 -05:00
Joe Grandja 306f81b7f7 Minor renames to oauth2 client properties
Fixes gh-4296
2017-08-30 11:51:06 -04:00
Joe Grandja 4951550d7d Add context path to authorization request URI
Fixes gh-4510
2017-08-26 18:55:23 -04:00
Joe Grandja 91b0bd4ba5 Provide oauth2login.tokenEndpoint config
Fixes gh-4506
2017-08-23 17:18:01 -04:00
Joe Grandja 93c2b2533e Allow configuring request paths for oauth2 filters
Fixes gh-4473
2017-08-23 17:17:01 -04:00
Rob Winch 0eb0e3556b Add hellowebflux-method sample
Fixes gh-4503
2017-08-17 16:42:01 -05:00
Rob Winch e16b8e7976 Fix logback-test.xml 2017-08-17 16:42:01 -05:00
Joe Grandja c204cc2c31 Completed implementation in ClaimAccessor's
Fixes gh-4449
2017-07-28 09:31:38 -04:00
Joe Grandja e8c6a1acc8 Move user-name-attribute-name to clients-defaults.yml
Fixes gh-4456
2017-07-28 09:31:37 -04:00
Rob Winch 6590fc31cd Use withMutator
Fixes gh-4455
2017-07-14 11:01:52 -05:00
Rob Winch 03f2d654ad Fix WebTestClient Support
Fixes gh-4419
2017-07-13 21:02:07 -05:00
Joe Grandja 67f80dfadc Update oauth2Login sample doc -> user authority mapping
Fixes gh-4373
2017-07-12 17:35:16 -04:00
Joe Grandja c42b9a68b1 Update oauth2Login sample doc
Fixes gh-4452
2017-07-12 17:35:16 -04:00
Joe Grandja 9cfb890207 Use id_token for user authentication
Fixes gh-4410
2017-07-07 12:44:26 -04:00
Rob Winch 236e87fc37 Comment WebTestClient Integration
Issue gh-4419
2017-06-23 20:51:58 -05:00
Rob Winch 8130965259 Fixes for changes in SPR-15657
Fixes gh-4408
2017-06-20 16:42:24 -05:00
Rob Winch ca6348800e HttpSecurity.authorizeExchange() allows Method Chaining
Fixes gh-4397
2017-06-15 15:50:30 -05:00
Rob Winch 9141a8a7c0 Add Multiple Reactive HttpSecurity
Fixes gh-4395
2017-06-15 13:00:19 -05:00
Matt Raible 3624ba5b4e Remove Okta Add Authorization Server section
Fixes gh-4391
2017-06-15 11:51:56 -04:00
Rob Winch a34bf01754 HelloWebfluxApplicationTests do not start a server 2017-06-13 15:16:01 -05:00
Rob Winch 337317a060 WebFlux now uses ParsingPathMatcher
Fixes gh-4388
2017-06-09 22:25:45 -05:00
Rob Winch d09fb5b500 Move UserDetailsRepository to core.userdetails
Fixes gh-4383
2017-06-09 16:07:09 -05:00
Joe Grandja eb6bd9bea9 Update groupId io.projectreactor.addons -> io.projectreactor
Fixes gh-4377
2017-06-08 14:06:51 -04:00
Thai Ha 489ffcfce5 UserInfoTypeConverter is registered if client is registered
Fixes gh-4364
2017-06-02 16:03:33 -04:00
Joe Grandja 6c0ecea494 Use java.util.Function instead of Converter
Fixes gh-4323
2017-06-01 17:25:39 -04:00
Joe Grandja ae17cc255b Implement protected resource call flow in oauth2login sample
Fixes gh-4362
2017-06-01 14:32:29 -04:00
Rob Winch 915de03f42 Polish ExchangeMutatorWebFilter Support
Issue gh-4343
2017-05-31 13:23:55 -05:00
Rob Winch 6aa7f05579 Polish ExchangeMutatorWebFilter usage 2017-05-30 16:37:21 -05:00
Joe Grandja 4476df93e9 Change ResponseType from enum to class
Fixes gh-4292
2017-05-30 16:11:57 -04:00
Joe Grandja 435e389609 Change ClientAuthenticationMethod from enum to class
Fixes gh-4313
2017-05-30 14:41:59 -04:00
Joe Grandja e5ceeb4e22 Resolve compile errors -> MockServerExchangeMutator removed
Fixes gh-4356
2017-05-26 07:17:32 -04:00
Joe Grandja 86d0fd77a7 Fix HelloWebflux tests
Fixes gh-4353
2017-05-24 21:27:09 -04:00
Matt Raible dd8952f700 Update Okta instructions in oauth2Login sample
Fixes gh-4352
2017-05-24 16:15:53 -04:00
Joe Grandja 521feb9a1b Update Boot samples to 2.0.0.M1
Fixes gh-4339
2017-05-24 11:32:00 -04:00
Rob Winch bc141febdb Demo mock support with RouterFunction 2017-05-23 16:29:30 -05:00
Rob Winch a79a81cd24 Simplify webflux samples
Remove the custom user from the hellowebflux and hellowebfluxfn samples.
2017-05-23 15:59:16 -05:00
Rob Winch 247635ed92 WebFluxSecurityConfiguration defaults HTTP Basic
Fixes gh-4346
2017-05-19 21:50:06 -05:00
Rob Winch 1cec497a50 Add method chaining for AuthorizeExchangeBuilder
Fixes gh-4345
2017-05-19 21:25:50 -05:00
Rob Winch 0428cdd934 Add @EnableWebFluxSecurity
Fixes gh-4344
2017-05-19 21:11:42 -05:00
Rob Winch 7bc98db23c Add WebTestClient test support
SecurityExchangeMutators

Fixes gh-4343
2017-05-19 15:09:23 -05:00
Rob Winch d9c7f42b4c Rename Application->HelloWebFluxApplication 2017-05-17 15:34:07 -05:00
Rob Winch f01989ff49 Add hellowebfluxfn
Fixes gh-4338
2017-05-16 15:39:39 -05:00
Rob Winch d81b436e5d Remove pom.xml from build
Gradle is easy enough to import into IDEs, so pom.xml should no
longer be necessary.

This commit removes the pom.xml files from the build.

Fixes gh-4283
2017-05-11 14:32:36 -05:00