Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
11,636 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

11636 Commits

Author SHA1 Message Date
Rob Winch 3da03e27f7 Update hibernate-core to 6.1.4.Final 
Closes gh-12038
 2022-10-17 18:02:24 -05:00
Rob Winch 9e90990e6d Update htmlunit to 2.65.1 
Closes gh-12039
 2022-10-17 18:02:14 -05:00
Rob Winch cceb03f47f Update io.spring.javaformat to 0.0.35 
Closes gh-12040
 2022-10-17 18:02:01 -05:00
Rob Winch aa87426c8f Update mockk to 1.13.2 
Closes gh-12041
 2022-10-17 18:01:48 -05:00
Rob Winch 4e5332033e Update jackson-bom to 2.13.4.20221013 
Closes gh-12042
 2022-10-17 18:01:38 -05:00
Rob Winch 692b5e7ea3 Update logback-classic to 1.4.4 
Closes gh-12043
 2022-10-17 18:01:25 -05:00
Josh Cummings f2ddeaface
Merge remote-tracking branch 'origin/5.8.x' 2022-10-17 15:01:30 -06:00
Josh Cummings cfb7c87dfd
Merge remote-tracking branch 'origin/5.7.x' into 5.8.x 2022-10-17 15:00:40 -06:00
Josh Cummings d5354db6f4
Next Development Version 2022-10-17 14:59:47 -06:00
Josh Cummings 6b25307339
Merge remote-tracking branch 'origin/5.6.x' into 5.7.x 2022-10-17 14:57:39 -06:00
Josh Cummings 730359f144
Next Development Version 2022-10-17 14:56:34 -06:00
Josh Cummings 89c815032c
Fix Index Out of Bounds 2022-10-17 14:52:03 -06:00
Josh Cummings 154f6d7316
Merge remote-tracking branch 'origin/5.6.x' into 5.7.x 2022-10-17 14:30:39 -06:00
Josh Cummings ff055cf07a
Remote antoraUpdateVersion task from CI 2022-10-17 14:24:13 -06:00
github-actions[bot] b08a06aa76 Release 5.6.8 2022-10-17 18:55:50 +00:00
github-actions[bot] 53cdec799b Release 5.7.4 2022-10-17 18:55:41 +00:00
Marcus Da Coregio 3d92e22891 Merge branch '5.8.x' 2022-10-17 15:52:00 -03:00
Marcus Da Coregio 7994222436 Merge branch '5.7.x' into 5.8.x 2022-10-17 15:51:39 -03:00
Marcus Da Coregio 31fd098b8e Merge branch '5.6.x' into 5.7.x 2022-10-17 15:51:19 -03:00
Marcus Da Coregio 465d80c162 Remove antoreUpdateVersion task from release automation 2022-10-17 15:50:44 -03:00
Josh Cummings 4ba8f8bfe0
Update What's New 
Closes gh-12024
 2022-10-13 20:08:31 -06:00
Josh Cummings f4cc27c375
Change Default for (Server)AuthenticationEntryPointFailureHandler 
Closes gh-9429
 2022-10-13 20:03:03 -06:00
Josh Cummings 5afc7cb04f
Merge remote-tracking branch 'origin/5.8.x' 2022-10-13 19:48:05 -06:00
Josh Cummings 099aaa33ff
Remove Deprecation Markers 
Since Spring Security still needs these methods and classes, we
should wait on deprecating them if we can.

Instead, this commit changes the original classes to have a
boolean property that is currently false, but will switch to true
in 6.0.

At that time, BearerTokenAuthenticationFilter can change to use
the handler.

Closes gh-11932
 2022-10-13 19:47:22 -06:00
Daniel Garnier-Moiroux 200b7fecd3
Add (Server)AuthenticationEntryPointFailureHandlerAdapter 
Issue gh-11932, gh-9429

(Server)AuthenticationEntryPointFailureHandler should produce HTTP 500 instead
when an AuthenticationServiceException is thrown, instead of HTTP 401.
This commit deprecates the current behavior and introduces an opt-in
(Server)AuthenticationEntryPointFailureHandlerAdapter with the expected
behavior.

BearerTokenAuthenticationFilter uses the new adapter, but with a closure
to keep the current behavior re: entrypoint.
 2022-10-13 19:25:04 -06:00
Steve Riesenberg 9090f62d9b
Merge branch '5.8.x' 2022-10-13 16:46:53 -05:00
Evgeniy Cheban 56b9badcfe
AnonymousAuthenticationFilter should cache its Supplier<SecurityContext> 
Closes gh-11900
 2022-10-13 16:44:48 -05:00
Steve Riesenberg d6356415f9
Polish whats-new.adoc 2022-10-13 13:42:04 -05:00
Steve Riesenberg 74e0616451
Update What's New for 6.0 2022-10-13 13:42:04 -05:00
Steve Riesenberg 46538ff33d
Merge branch '5.8.x' 
Merged using the ours strategy.
 2022-10-13 12:53:22 -05:00
Steve Riesenberg 5a55987d6e
Add links to reference in What's New for 5.8 
Issue gh-4001
Issue gh-11959
 2022-10-13 12:52:01 -05:00
Steve Riesenberg 45a963a011
Remove CsrfWebFilter.setTokenFromMultipartDataEnabled 
Closes gh-12019
 2022-10-13 11:29:16 -05:00
Steve Riesenberg 819529f5ea
Remove CsrfSpec.tokenFromMultipartDataEnabled 
Also removed ServerCsrfDsl.tokenFromMultipartDataEnabled

Closes gh-12020
 2022-10-13 11:29:15 -05:00
Josh Cummings db7732dd4a
Merge remote-tracking branch 'origin/5.8.x' 2022-10-13 10:19:54 -06:00
Josh Cummings 59c4538798
Update What's New 
Closes gh-12021
 2022-10-13 10:13:20 -06:00
Joe Grandja 753e113a13 RequestMatcherDelegatingAuthorizationManager defaults to deny 
Closes gh-11958
 2022-10-13 11:12:00 -04:00
Josh Cummings d0653afec3
Remove Duplicate Property 2022-10-13 09:02:35 -06:00
Steve Riesenberg 2407d07890
Default to Xor CSRF tokens in CsrfWebFilter 
Closes gh-11960
 2022-10-13 09:39:57 -05:00
Steve Riesenberg 2a2051cd7b
Default to Xor CSRF tokens in CsrfFilter 
Issue gh-11960
 2022-10-13 09:39:55 -05:00
Marcus Da Coregio 60aa799498 Merge branch '5.8.x' 2022-10-13 09:37:58 -03:00
Marcus Da Coregio 445833295b Merge branch '5.7.x' into 5.8.x 2022-10-13 09:37:33 -03:00
Marcus Da Coregio 0c239813e5 Merge branch '5.6.x' into 5.7.x 2022-10-13 09:36:09 -03:00
Marcus Da Coregio 717320a9ba Update org.springframework.data to 2021.2.4 
Closes gh-12018
 2022-10-13 09:30:50 -03:00
Marcus Da Coregio 601fafd3de Update org.springframework to 5.3.23 
Closes gh-12017
 2022-10-13 09:30:47 -03:00
Marcus Da Coregio 0f5c23ab17 Update hibernate-entitymanager to 5.6.12.Final 
Closes gh-12016
 2022-10-13 09:30:43 -03:00
Marcus Da Coregio a73b8de0f4 Update org.eclipse.jetty to 9.4.49.v20220914 
Closes gh-12015
 2022-10-13 09:30:40 -03:00
Marcus Da Coregio 2d7813be6e Update io.rsocket to 1.1.3 
Closes gh-12014
 2022-10-13 09:30:37 -03:00
Marcus Da Coregio 655a1e345e Update io.projectreactor to 2020.0.24 
Closes gh-12012
 2022-10-13 09:30:31 -03:00
Marcus Da Coregio 4fc00b74a9 Update mockk to 1.12.8 
Closes gh-12011
 2022-10-13 09:30:28 -03:00
Marcus Da Coregio 0521bb1af5 Update jackson-bom to 2.13.4.20221012 
Closes gh-12008
 2022-10-13 09:30:17 -03:00