Commit Graph

964 Commits

Author SHA1 Message Date
Joe Grandja 0c68eb1821 Re-factor OAuth2AuthorizationCodeAuthenticationToken
Fixes gh-4730
2017-10-28 17:15:31 -04:00
Joe Grandja 64d8c8b8a9 Re-factor AuthorizationGrantTokenExchanger
Fixes gh-4728
2017-10-28 17:12:14 -04:00
Joe Grandja 9afefef3b9 Polish class names in oauth2-client
Fixes gh-4722
2017-10-27 21:00:52 -04:00
Joe Grandja 34668e05af Polish class names in oauth2-core
Fixes gh-4720
2017-10-27 20:42:58 -04:00
Joe Grandja ef83bc8dd7 Move package client.authentication.userinfo -> client.userinfo
Fixes gh-4708
2017-10-26 15:39:04 -04:00
Joe Grandja 942b647c0d OAuth2LoginAuthenticationFilter processes uri /login/oauth2/code/*
Issue gh-4687
2017-10-26 14:20:19 -04:00
Joe Grandja 43d201fa3e Move OAuth2AuthenticationToken
Fixes gh-4697
2017-10-25 16:17:49 -04:00
Joe Grandja 5a584e5ccb Rename OAuth2/OIDC ClientAuthenticationToken -> AuthorizedClient
Fixes gh-4695
2017-10-25 13:47:00 -04:00
Rob Winch 8fd0ba3bc4 Fix README authorization callback URLs
Issue gh-4659
2017-10-24 15:14:58 -05:00
Joe Grandja 049080290e Refactor OAuth2 AuthenticationProvider's
Fixes gh-4689
2017-10-24 15:24:26 -04:00
Joe Grandja 0fb32a052e OAuth2LoginAuthenticationFilter processes uri /login/oauth2/*
Fixes gh-4687
2017-10-24 15:24:26 -04:00
Joe Grandja 4ae24f2fbe Rename AuthorizationCodeAuthenticationFilter -> OAuth2LoginAuthenticationFilter
Fixes gh-4686
2017-10-24 15:24:25 -04:00
Rob Winch 8291f20796 DaoAuthenticationProvider uses DelegatingPasswordEncoder
This means that passwords will be encoded with BCrypt by default

Fixes: gh-2775
2017-10-24 07:56:28 -05:00
Rob Winch d19b222b55 UserDetailsRepositoryReactiveAuthenticationManager uses DelegatingPasswordEncoder
This means passwords will be encoded with BCrypt by default

Issue: gh-2775
2017-10-24 07:56:28 -05:00
Joe Grandja f0c9f85292 spring-security-jwt-jose -> spring-security-oauth2-jose
Fixes gh-4595
2017-10-23 09:04:01 -04:00
Joe Grandja a49047dec5 Fix OAuth2LoginApplicationTests
Issue gh-4659
2017-10-20 04:41:48 -04:00
Joe Grandja ee6c1f2ddd Add temporary GlobalAuthenticationConfigurerAdapter
Fixes gh-4664
2017-10-19 12:15:35 -04:00
Joe Grandja e91da5959c Remove auto-config classes from oauth2Login sample
Fixes gh-4638
2017-10-19 11:27:22 -04:00
Joe Grandja 1e891b38ab Rename scope -> scopes for Set types
Fixes gh-4644
2017-10-18 17:56:39 -04:00
Rob Winch b81c1ce2c0 Move spring-security-webflux into spring-security-web
Fixes gh-4662
2017-10-18 16:20:09 -05:00
Joe Grandja 7b8d131386 Fix package tangles -> OAuth2/Oidc AuthenticationProvider's
Fixes gh-4614
2017-10-16 20:56:32 -04:00
Joe Grandja 3c824dc44b Fix package tangles -> OAuth2UserService
Fixes gh-4614
2017-10-13 18:59:41 -04:00
Joe Grandja cfa4858b04 Fix package tangles -> AuthorizationGrantTokenExchanger
Fixes gh-4614
2017-10-13 16:35:48 -04:00
Rob Winch 211e8eae90 Remove formLogin() and httpBasic() from defaults 2017-10-12 16:41:01 -05:00
Rob Winch 792944eee7 HttpSecurity->ServerHttpSecurity
Issue gh-4615
2017-10-11 13:58:24 -05:00
Rob Winch a5af2a07d7 HttpHeadersWriter->ServerHttpHeadersWriter
Issue gh-4615
2017-10-11 13:58:09 -05:00
Rob Winch d0de8d40dd WebFilterChainFilter -> WebFilterChainProxy
Issue gh-4615
2017-10-11 13:57:50 -05:00
Rob Winch 4681697581 UserDetailsRepository->ReactiveUserDetailsService
Issue gh-4615
2017-10-11 13:57:30 -05:00
Joe Grandja d840090cb0 Add support for implicit grant type
Fixes gh-4500
2017-10-11 13:54:59 -04:00
Joe Grandja bd4d814e4b Fix bug in oauth2Login sample 2017-10-10 14:40:11 -04:00
Joe Grandja 6b16fa0d8c Polish OAuth Security Configurers 2017-10-10 14:38:06 -04:00
Joe Grandja 97c938e7f3 Extract authentication logic from AuthorizationCodeAuthenticationFilter
Fixes gh-4590
2017-10-10 14:38:06 -04:00
Rob Winch 60b5a18a49 Update thymeleaf-layout-dialect-2.2.2
Issue: gh-4608
2017-10-09 16:12:57 -05:00
Rob Winch 72bbb27bf8 Update appengine-gradle-plugin to 1.3.3
Issue: gh-4608
2017-10-09 16:12:41 -05:00
Rob Winch 448ee08f28 Update to Boot 2.0.0.M4
Issue: gh-4608
2017-10-09 16:12:22 -05:00
Joe Grandja 5811624bbe Polish endpoint package
* Remove ErrorResponseAttributes
* Rename AuthorizationRequestAttributes -> AuthorizationRequest
* Remove AuthorizationCodeTokenRequestAttributes
* Rename TokenResponseAttributes -> TokenResponse

Issue gh-4593
2017-10-06 18:51:24 -04:00
Joe Grandja eca2b67137 ClientRegistration supports 'baseUrl' uri variable
Fixes gh-4589
2017-10-05 20:35:51 -04:00
Joe Grandja eb320bfed4 AuthorizationCodeAuthenticationProcessingFilter -> AuthorizationCodeAuthenticationFilter 2017-10-05 16:40:12 -04:00
Joe Grandja 5c14e48b18 Add OAuth2UserAuthenticationProvider
Moved logic from AuthorizationCodeAuthenticationProvider
to OAuth2UserAuthenticationProvider (new) related to
loading user attributes via OAuth2UserService.

This re-factor is part of the work required for Issue gh-4513
2017-10-05 15:15:35 -04:00
Joe Grandja 0d516ca32c Rename scopes -> scope 2017-10-02 15:50:16 -04:00
Joe Grandja fb57111ecd redirect-uri property supports 'baseRedirectUrl' uri variable
Fixes gh-4589
2017-10-02 15:29:03 -04:00
Joe Grandja 66647070ab Default login page supports Iterable<ClientRegistration>
Fixes gh-4596
2017-09-29 19:54:17 -04:00
Joe Grandja ad91adf9dc Retrieving the UserInfo is conditional
Fixes gh-4451
2017-09-29 10:51:16 -04:00
Joe Grandja 8448a54678 Remove ClientRegistrationRepository.getRegistrations()
Fixes gh-4582
2017-09-28 07:02:59 -04:00
Joe Grandja 814742fef6 Rename ClientRegistration.clientAlias -> registrationId
Fixes gh-4575
2017-09-27 09:14:55 -04:00
Joe Grandja 38be35677d Add userNameAttributeName to ClientRegistration
Fixes gh-4580
2017-09-26 21:55:19 -04:00
Joe Grandja 0e9b2807bf Split up NimbusOAuth2UserService
Fixes gh-4447
2017-09-26 11:32:49 -04:00
Rob Winch 71b1720cfe Use WebHttpHandlerBuilder in samples
DispatcherHandler.toHttpHandler was removed
2017-09-22 20:36:34 -05:00
Joe Grandja c54c622124 Re-structure OAuth2AuthenticationToken
Fixes gh-4553
2017-09-19 16:35:43 -04:00
Rob Winch c46243594a Use appengine-gradle-plugin
The com.google.appengine:gradle-appengine-plugin is deprecated
2017-09-18 12:00:50 -05:00
Rob Winch f8ee9944ff Copyright date range 2017-09-18 11:18:46 -05:00
Rob Winch 1f4082e754 Fix copyright lines 2017-09-18 11:11:25 -05:00
Rob Winch 3ecf3ea034 Fix double * in Copyright headers 2017-09-18 10:47:26 -05:00
Rob Winch 455e2bab90 Update to Gradle 4.1 2017-09-18 10:19:59 -05:00
Rob Winch 404a8e793e Add WithMockUser & mutateWith to WebFlux Samples 2017-09-18 10:18:11 -05:00
Rob Winch 21f8ee7f36 Use basicAuthenticationCredentials 2017-09-13 15:31:32 -05:00
Joe Grandja 65b968f04a Move servlet-specific classes to 'web' package
Fixes gh-4366
2017-09-13 16:13:32 -04:00
Rob Winch 0a36359f11 WebFlux HTTP Basic & Form Login Sessions
By default both HTTP Basic and form log are enabled. Now HTTP Session will
not be used for HTTP Basic, but will be for form log in.
2017-09-13 14:47:44 -05:00
Joe Grandja e31684bcf5 Update google defaults 2017-09-13 14:04:18 -04:00
Rob Winch 1fe414379c Simplify hellowebfluxfn
This sample should be absolute minimal example
2017-09-13 10:45:11 -05:00
Rob Winch 164404c7d3 Simplify hellowebflux
This sample should be absolute minimal example.
2017-09-13 10:40:50 -05:00
Joe Grandja 306f81b7f7 Minor renames to oauth2 client properties
Fixes gh-4296
2017-08-30 11:51:06 -04:00
Joe Grandja 4951550d7d Add context path to authorization request URI
Fixes gh-4510
2017-08-26 18:55:23 -04:00
Joe Grandja 91b0bd4ba5 Provide oauth2login.tokenEndpoint config
Fixes gh-4506
2017-08-23 17:18:01 -04:00
Joe Grandja 93c2b2533e Allow configuring request paths for oauth2 filters
Fixes gh-4473
2017-08-23 17:17:01 -04:00
Rob Winch 0eb0e3556b Add hellowebflux-method sample
Fixes gh-4503
2017-08-17 16:42:01 -05:00
Rob Winch e16b8e7976 Fix logback-test.xml 2017-08-17 16:42:01 -05:00
Joe Grandja c204cc2c31 Completed implementation in ClaimAccessor's
Fixes gh-4449
2017-07-28 09:31:38 -04:00
Joe Grandja e8c6a1acc8 Move user-name-attribute-name to clients-defaults.yml
Fixes gh-4456
2017-07-28 09:31:37 -04:00
Rob Winch 6590fc31cd Use withMutator
Fixes gh-4455
2017-07-14 11:01:52 -05:00
Rob Winch 03f2d654ad Fix WebTestClient Support
Fixes gh-4419
2017-07-13 21:02:07 -05:00
Joe Grandja 67f80dfadc Update oauth2Login sample doc -> user authority mapping
Fixes gh-4373
2017-07-12 17:35:16 -04:00
Joe Grandja c42b9a68b1 Update oauth2Login sample doc
Fixes gh-4452
2017-07-12 17:35:16 -04:00
Joe Grandja 9cfb890207 Use id_token for user authentication
Fixes gh-4410
2017-07-07 12:44:26 -04:00
Rob Winch 236e87fc37 Comment WebTestClient Integration
Issue gh-4419
2017-06-23 20:51:58 -05:00
Rob Winch 8130965259 Fixes for changes in SPR-15657
Fixes gh-4408
2017-06-20 16:42:24 -05:00
Rob Winch ca6348800e HttpSecurity.authorizeExchange() allows Method Chaining
Fixes gh-4397
2017-06-15 15:50:30 -05:00
Rob Winch 9141a8a7c0 Add Multiple Reactive HttpSecurity
Fixes gh-4395
2017-06-15 13:00:19 -05:00
Matt Raible 3624ba5b4e Remove Okta Add Authorization Server section
Fixes gh-4391
2017-06-15 11:51:56 -04:00
Rob Winch a34bf01754 HelloWebfluxApplicationTests do not start a server 2017-06-13 15:16:01 -05:00
Rob Winch 337317a060 WebFlux now uses ParsingPathMatcher
Fixes gh-4388
2017-06-09 22:25:45 -05:00
Rob Winch d09fb5b500 Move UserDetailsRepository to core.userdetails
Fixes gh-4383
2017-06-09 16:07:09 -05:00
Joe Grandja eb6bd9bea9 Update groupId io.projectreactor.addons -> io.projectreactor
Fixes gh-4377
2017-06-08 14:06:51 -04:00
Thai Ha 489ffcfce5 UserInfoTypeConverter is registered if client is registered
Fixes gh-4364
2017-06-02 16:03:33 -04:00
Joe Grandja 6c0ecea494 Use java.util.Function instead of Converter
Fixes gh-4323
2017-06-01 17:25:39 -04:00
Joe Grandja ae17cc255b Implement protected resource call flow in oauth2login sample
Fixes gh-4362
2017-06-01 14:32:29 -04:00
Rob Winch 915de03f42 Polish ExchangeMutatorWebFilter Support
Issue gh-4343
2017-05-31 13:23:55 -05:00
Rob Winch 6aa7f05579 Polish ExchangeMutatorWebFilter usage 2017-05-30 16:37:21 -05:00
Joe Grandja 4476df93e9 Change ResponseType from enum to class
Fixes gh-4292
2017-05-30 16:11:57 -04:00
Joe Grandja 435e389609 Change ClientAuthenticationMethod from enum to class
Fixes gh-4313
2017-05-30 14:41:59 -04:00
Joe Grandja e5ceeb4e22 Resolve compile errors -> MockServerExchangeMutator removed
Fixes gh-4356
2017-05-26 07:17:32 -04:00
Joe Grandja 86d0fd77a7 Fix HelloWebflux tests
Fixes gh-4353
2017-05-24 21:27:09 -04:00
Matt Raible dd8952f700 Update Okta instructions in oauth2Login sample
Fixes gh-4352
2017-05-24 16:15:53 -04:00
Joe Grandja 521feb9a1b Update Boot samples to 2.0.0.M1
Fixes gh-4339
2017-05-24 11:32:00 -04:00
Rob Winch bc141febdb Demo mock support with RouterFunction 2017-05-23 16:29:30 -05:00
Rob Winch a79a81cd24 Simplify webflux samples
Remove the custom user from the hellowebflux and hellowebfluxfn samples.
2017-05-23 15:59:16 -05:00
Rob Winch 247635ed92 WebFluxSecurityConfiguration defaults HTTP Basic
Fixes gh-4346
2017-05-19 21:50:06 -05:00
Rob Winch 1cec497a50 Add method chaining for AuthorizeExchangeBuilder
Fixes gh-4345
2017-05-19 21:25:50 -05:00
Rob Winch 0428cdd934 Add @EnableWebFluxSecurity
Fixes gh-4344
2017-05-19 21:11:42 -05:00
Rob Winch 7bc98db23c Add WebTestClient test support
SecurityExchangeMutators

Fixes gh-4343
2017-05-19 15:09:23 -05:00