12280 Commits

Author SHA1 Message Date
Eleftheria Stein
429caeacc9 Fix bug with multiple AuthenticationManager beans
Closes gh-9256
2021-01-06 18:19:13 +01:00
Eleftheria Stein
8cefc8a792 Fix bug with multiple AuthenticationManager beans
Closes gh-9256
2021-01-06 16:26:26 +01:00
Josh Cummings
7dde7cffda
Add Status Check
Closes gh-8955
2021-01-05 17:32:47 -07:00
Josh Cummings
337d24e6db
Update Copyright Messages
Issue gh-9202
2021-01-05 15:30:51 -07:00
Mazen Aissa
c907838440
Make max-session configurable
Closes gh-9202
2021-01-05 15:30:51 -07:00
Nelson Osacky
6d59b1044a Add Revved up by Gradle Enterprise badge to README
Similar to: https://github.com/spring-projects/spring-boot/pull/24640
2021-01-05 11:00:41 -07:00
Josh Cummings
0fc80a6a65
Renew Sample Certificate
Closes gh-9320
2021-01-04 12:12:29 -07:00
Josh Cummings
6dc22835fd
Renew Sample Certificate
Closes gh-9320
2021-01-04 12:12:17 -07:00
Josh Cummings
8c93d95818
Renew Sample Certificate
Closes gh-9320
2021-01-04 12:11:19 -07:00
Josh Cummings
cb10c9cfb6
Renew Sample Certificate
Closes gh-9320
2021-01-04 12:06:55 -07:00
Zeeshan Adnan
848bd44837
Remove unused code
Issue gh-9203
2020-12-18 11:49:52 -07:00
Rob Winch
40e027c56d Constant Time Comparison for CSRF tokens
Closes gh-9291
2020-12-17 15:01:43 -06:00
Josh Cummings
c066e23a86
Add @since attributes
Issue gh-8900
2020-12-16 15:58:53 -07:00
Evgeniy Cheban
34b4b1054f Add AuthorizationManager
Closes gh-8900
2020-12-16 15:58:36 -07:00
Nick McKinney
5306d4c4d5 Minor cleanup on Ant / Regex Request Matchers
- Removed duplicative code for transforming String into HttpMethod
 - Removed an unnecessary array initialization
2020-12-14 14:19:23 +01:00
Nick McKinney
6be25df1db Introduced DispatcherType request matcher
Created a DispatcherTypeRequestMatcher and corresponding methods
for configuring an HttpSecurity object. This enables filtering of
security rules based on the dispatcher type of the incoming servlet
request.

Closes gh-9205
2020-12-14 14:19:23 +01:00
Josh Cummings
2566abec31
Add Type Parameter
Closes gh-8412
2020-12-11 10:20:18 -07:00
Christophe Gilles
54d3839f63 Add permissionsPolicy http header 2020-12-11 12:32:18 +01:00
Serdar Kuzucu
48ef27b80a Make assertion messages in CookieCsrfTokenRepository clearer
Changes assertion message format from 'X is not null' to
'X cannot be null' since this is more meaningful when the error
occurs and the message is printed in the logs.

Closes gh-9195
2020-12-09 10:45:22 -06:00
Serdar Kuzucu
76e117a67a Allow maximum age of csrf cookie to be configured
Allows maxAge of the generated cookie by CookieCsrfTokenRepository
to be configurable.

Prior to this commit, maximum age was set with a value of -1.

After this commit, it will be configured by the user with an either
positive or negative value. If the user does not provide a value,
it will be set -1.

An IllegalArgumentException will be thrown when
this value is set to zero.

Closes gh-9195
2020-12-09 10:45:22 -06:00
Eleftheria Stein
90b48554e4 Fix Custom DSL sample in docs 2020-12-09 10:48:15 +01:00
Josh Cummings
f614a8230c
Polish getRemoteUser
- Corrected instanceof check

Issue gh-3357
2020-12-03 13:08:40 -07:00
Stephen Joyner
9c373ef4f8
getRemoteUser() returns principal name
Closes gh-3357
2020-12-03 13:08:40 -07:00
Ovidiu Popa
174b71c017 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 11:42:00 -05:00
Ovidiu Popa
7d31837af3 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 11:20:11 -05:00
Ovidiu Popa
b8175bccd2 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 10:54:00 -05:00
Ovidiu Popa
d5d0be36f4 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 09:58:30 -05:00
Eleftheria Stein
d3ef340b26 Fix typos 2020-12-03 11:05:22 +01:00
Josh Cummings
00375da173
Next Development Version 2020-12-02 22:21:21 -07:00
Josh Cummings
1af21a9d02
Revert "Lock Dependencies for 5.4.2"
This reverts commit 046bc9789f97804b04324b99a9c4f3a7041c68e9.
2020-12-02 22:21:02 -07:00
Josh Cummings
17276ad787
Next Development Version 2020-12-02 19:32:48 -07:00
Josh Cummings
7c2010f507
Revert "Lock Dependencies for 5.3.6"
This reverts commit a153012056d4678109a0085ae43b1b146d203fa6.
2020-12-02 19:32:03 -07:00
Josh Cummings
c7b4e4a493
Next Development Version 2020-12-02 19:09:04 -07:00
Josh Cummings
9effebe934
Release 5.4.2 5.4.2 2020-12-02 17:36:26 -07:00
Josh Cummings
046bc9789f
Lock Dependencies for 5.4.2 2020-12-02 17:36:26 -07:00
Josh Cummings
423d3682d0
Update to Google App Engine 1.9.83
Closes gh-9250
2020-12-02 17:36:08 -07:00
Josh Cummings
1f5591198e
Update to Kotlin 1.4.20
Closes gh-9249
2020-12-02 17:36:02 -07:00
Josh Cummings
0a95d3cfa8
Update to Spring Boot 2.4.0
Closes gh-9248
2020-12-02 16:37:41 -07:00
Josh Cummings
2975923a1d
Release 5.3.6.RELEASE 5.3.6.RELEASE 2020-12-02 16:31:52 -07:00
Josh Cummings
a153012056
Lock Dependencies for 5.3.6 2020-12-02 16:31:52 -07:00
Josh Cummings
a8fe846e7f
Update to Google App Engine 1.9.83
Closes gh-9247
2020-12-02 16:31:46 -07:00
Josh Cummings
02a9ee54a2
Update to Spring Boot 2.2.11
Closes gh-9246
2020-12-02 16:31:40 -07:00
olivier.antoine
808b8c3256 Avoid ClassCastException if principalClaim value is not a String
Closes gh-9212
2020-12-02 16:15:10 -07:00
Josh Cummings
d03d31c2e7
Release 5.2.8.RELEASE 5.2.8.RELEASE 2020-12-02 16:06:32 -07:00
Josh Cummings
9976eb9e3a
Update to Spring LDAP Core 2.3.3
Closes gh-9245
2020-12-02 16:04:41 -07:00
Josh Cummings
7cf1ca7ab1
Update to Powermock 2.0.9
Closes gh-9244
2020-12-02 16:04:36 -07:00
Josh Cummings
664d9f1ba6
Update to HSQLDB 2.5.1
Closes gh-9243
2020-12-02 16:04:31 -07:00
Josh Cummings
f7b160d7a8
Update to Hibernate EntityManager 5.4.25
Closes gh-9242
2020-12-02 16:04:26 -07:00
Josh Cummings
5b60098548
Update to Jetty 9.4.35
Closes gh-9241
2020-12-02 16:04:13 -07:00
Josh Cummings
e6b383a9c4
Update to HttpComponents HttpClient 4.5.13
Closes gh-9240
2020-12-02 16:04:07 -07:00