Commit Graph

9805 Commits

Author SHA1 Message Date
Eleftheria Stein 442c9cbf38 Disable default logout page when logout disabled
Closes gh-9475
2021-06-18 10:31:50 +02:00
Eleftheria Stein 0c1bce5c82 Disable default logout page when logout disabled
Closes gh-9475
2021-06-17 17:17:06 +02:00
Arnaud Mergey 1cd4ffeeb7
fix typo preventing full exception to be displayed in log
closes gh-9901
2021-06-17 08:40:55 -06:00
Christian Frommeyer 7cf538cba6
Replace StringUtils from oauth2-oidc-sdk
SecurityMockServerConfigurers.java previously used the StringUtils from
the optional oauth2-oidc-sdk dependency. Replacing this with the
StringUtils from the spring framework this should not force adding the
dependency in cases where it is not actually used.

Closes gh-9923
2021-06-16 14:15:14 -06:00
Christian Frommeyer 1d48f31e4b
Replace StringUtils from oauth2-oidc-sdk
SecurityMockServerConfigurers.java previously used the StringUtils from
the optional oauth2-oidc-sdk dependency. Replacing this with the
StringUtils from the spring framework this should not force adding the
dependency in cases where it is not actually used.

Closes gh-9923
2021-06-16 13:23:23 -06:00
Steve Riesenberg 67a18f564a Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository
Related to gh-9649
Closes gh-9857
2021-06-15 12:14:37 -05:00
Steve Riesenberg b6ae11295f Commit missing compile fix from cherry-pick conflict 2021-06-15 12:10:06 -05:00
Steve Riesenberg ee9c8e2fd0 Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository
Related to gh-9649
Closes gh-9857
2021-06-15 12:06:22 -05:00
Steve Riesenberg a108868529 Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository
Related to gh-9649
Closes gh-9857
Closes gh-9912
2021-06-15 11:44:34 -05:00
Marcus Hert da Coregio 5a4cfe1226 Fix Adding Filter Relative to Custom Filter
Closes gh-9787
2021-06-14 17:36:52 -03:00
Marcus Hert da Coregio e16b88c9d5 Fix Adding Filter Relative to Custom Filter
Closes gh-9787
2021-06-14 16:56:33 -03:00
Marcus Hert da Coregio ac371d5de6 Fix Adding Filter Relative to Custom Filter
Closes gh-9787
2021-06-14 15:57:52 -03:00
Josh Cummings 08f7a97ae7
Anonymous Authentication Argument Resolution Docs
Closes gh-3338
2021-06-08 16:31:08 -06:00
Josh Cummings 0ad2d90a72
Anonymous Authentication Argument Resolution Docs
Closes gh-3338
2021-06-08 16:23:50 -06:00
Josh Cummings e601d9692e
Anonymous Authentication Argument Resolution Docs
Closes gh-3338
2021-06-08 16:22:49 -06:00
Josh Cummings c41aeed6cb
Fix Getting Started Link
Closes gh-6502
2021-06-08 13:54:02 -06:00
Josh Cummings ba9b4d8cc6
Fix Getting Started Link
Closes gh-6502
2021-06-08 13:51:35 -06:00
Josh Cummings 18d04f2551
Fix Getting Started Link
Closes gh-6502
2021-06-08 13:49:14 -06:00
Steve Riesenberg c0200512a7 URL encode client credentials
Closes gh-9610
2021-06-08 08:27:20 -05:00
Josh Cummings d5062bb828
PayloadInterceptorRSocket retains all payloads
Flux#skip discards its corresponding elements, meaning that they
aren't intended for reuse. When using RSocket's ByteBufPayloads,
this means that the bytes are releaseed back into RSocket's pool.

Since the downstream request may still need the skipped payload,
we should construct the publisher in a different way so as to
avoid the preemptive release.

Deferring Spring JavaFormat to clarify what changed.

Closes gh-9345
2021-06-04 13:47:48 -06:00
Josh Cummings b189e0370a
PayloadInterceptorRSocket retains all payloads
Flux#skip discards its corresponding elements, meaning that they
aren't intended for reuse. When using RSocket's ByteBufPayloads,
this means that the bytes are releaseed back into RSocket's pool.

Since the downstream request may still need the skipped payload,
we should construct the publisher in a different way so as to
avoid the preemptive release.

Deferring Spring JavaFormat to clarify what changed.

Closes gh-9345
2021-06-04 13:45:30 -06:00
Josh Cummings b9e1901f19
Format PayloadInterceptorRSocket
Issue gh-9345
2021-06-04 12:56:37 -06:00
Josh Cummings 5666246187
PayloadInterceptorRSocket retains all payloads
Flux#skip discards its corresponding elements, meaning that they
aren't intended for reuse. When using RSocket's ByteBufPayloads,
this means that the bytes are releaseed back into RSocket's pool.

Since the downstream request may still need the skipped payload,
we should construct the publisher in a different way so as to
avoid the preemptive release.

Deferring Spring JavaFormat to clarify what changed.

Closes gh-9345
2021-06-04 12:55:33 -06:00
Steve Riesenberg 6cafa48369 URL encode client credentials
Closes gh-9610
2021-06-03 09:39:00 -05:00
Steve Riesenberg 5243b1b8a8 URL encode client credentials
Closes gh-9610
2021-06-03 09:29:25 -05:00
Eleftheria Stein 898bdeb0fd Fix Resource Server clock skew default value in docs
Closes gh-6611
2021-06-02 13:19:30 +03:00
Eleftheria Stein 5b802a45f5 Fix Resource Server clock skew default value in docs
Closes gh-6611
2021-06-02 12:56:37 +03:00
Eleftheria Stein 43f3de7de1 Fix Resource Server clock skew default value in docs
Closes gh-6611
2021-06-02 12:46:52 +03:00
Josh Cummings 6d816fbf85
Polish postLogoutRedirectUri encoding
Issue gh-9511
2021-05-26 14:38:20 -06:00
Hans Hosea Schaefer e52b104636
Encode postLogoutRedirectUri query params
Now encodes already encoded queryparameters in postLogoutRedirectUrl
correctly

Closes gh-9511
2021-05-26 14:36:05 -06:00
Josh Cummings 24c3c52254
Polish postLogoutRedirectUri encoding
Issue gh-9511
2021-05-26 13:58:28 -06:00
Hans Hosea Schaefer 499701e67a
Encode postLogoutRedirectUri query params
Now encodes already encoded queryparameters in postLogoutRedirectUrl
correctly

Closes gh-9511
2021-05-26 13:58:23 -06:00
Marcus Hert da Coregio 02285708eb Adjust createNewSessionIfAllowed to prevent NPE
Ensure that isTransientAuthentication reuses the same authentication object from saveContext

Closes gh-8947
2021-05-26 15:13:55 -03:00
Steve Riesenberg c79cb8eff6 Handle encoded spaces in the root dn
Fixes an issue where provider URLs passed to the constructor of the
DefaultSpringSecurityContextSource can be URL encoded, resulting in
an invalid base dn. Additionally adds support for list constructor
to support spaces in base dn.

Closes gh-9742

# Conflicts:
#	ldap/src/integration-test/java/org/springframework/security/ldap/DefaultSpringSecurityContextSourceTests.java
#	ldap/src/main/java/org/springframework/security/ldap/DefaultSpringSecurityContextSource.java
2021-05-26 12:57:48 -05:00
Steve Riesenberg 4f31e42fbc Handle encoded spaces in the root dn
Fixes an issue where provider URLs passed to the constructor of the
DefaultSpringSecurityContextSource can be URL encoded, resulting in
an invalid base dn. Additionally adds support for list constructor
to support spaces in base dn.

Closes gh-9742

# Conflicts:
#	ldap/src/integration-test/java/org/springframework/security/ldap/DefaultSpringSecurityContextSourceTests.java
#	ldap/src/main/java/org/springframework/security/ldap/DefaultSpringSecurityContextSource.java
2021-05-26 12:53:16 -05:00
Marcus Hert da Coregio 4d18d06d9c Adjust createNewSessionIfAllowed to prevent NPE
Ensure that isTransientAuthentication reuses the same authentication object from saveContext

Closes gh-8947
2021-05-26 13:51:52 -03:00
Steve Riesenberg 9d0db200eb Handle encoded spaces in the root dn
Fixes an issue where provider URLs passed to the constructor of the
DefaultSpringSecurityContextSource can be URL encoded, resulting in
an invalid base dn. Additionally adds support for list constructor
to support spaces in base dn.

Closes gh-9742
2021-05-26 11:26:24 -05:00
Steve Riesenberg d3a3c36ad3 Handle custom status codes in error handler
Fixes an issue where custom status codes in the error response cause an
IllegalArgumentException to be thrown when resolving an HttpStatus.

Closes gh-9741
2021-05-25 16:14:35 -05:00
Steve Riesenberg 22272321f2 Handle custom status codes in error handler
Fixes an issue where custom status codes in the error response cause an
IllegalArgumentException to be thrown when resolving an HttpStatus.

Closes gh-9741
2021-05-25 15:37:37 -05:00
Steve Riesenberg 589eccc547 Handle custom status codes in error handler
Fixes an issue where custom status codes in the error response cause an
IllegalArgumentException to be thrown when resolving an HttpStatus.

Closes gh-9741
2021-05-25 15:08:05 -05:00
Rob Winch c9a8419e22 Additional HttpSessionOAuth2AuthorizationRequestRepository tests
Issue gh-5145
2021-05-13 20:12:15 -04:00
Craig Andrews ecb4a5749a HttpSessionOAuth2AuthorizationRequestRepository: store one request by default
Add setAllowMultipleAuthorizationRequests allowing applications to
revert to the previous functionality should they need to do so.

Closes gh-5145
Intentionally regresses gh-5110
2021-05-13 20:12:00 -04:00
Rob Winch a4216d0ea5 Additional HttpSessionOAuth2AuthorizationRequestRepository tests
Issue gh-5145
2021-05-13 19:52:00 -04:00
Craig Andrews b8eee2002f HttpSessionOAuth2AuthorizationRequestRepository: store one request by default
Add setAllowMultipleAuthorizationRequests allowing applications to
revert to the previous functionality should they need to do so.

Closes gh-5145
Intentionally regresses gh-5110
2021-05-13 19:50:47 -04:00
Rob Winch f3436f25fb Additional HttpSessionOAuth2AuthorizationRequestRepository tests
Issue gh-5145
2021-05-13 14:01:04 -04:00
Craig Andrews e447a35cf2 HttpSessionOAuth2AuthorizationRequestRepository: store one request by default
Add setAllowMultipleAuthorizationRequests allowing applications to
revert to the previous functionality should they need to do so.

Closes gh-5145
Intentionally regresses gh-5110
2021-05-13 14:00:53 -04:00
Rob Winch 362855b8b8 docs.af.pivotal.io->docs-ip.spring.io
The build conventions plugin does not support a property, so we must
override the configuration for docs.host to docs-ip.spring.io

Closes gh-9686
2021-04-27 10:26:51 -05:00
Rob Winch 0a56dc4ef5 docs.af.pivotal.io->docs-ip.spring.io
Closes gh-9686
2021-04-27 09:54:05 -05:00
Rob Winch b1c021ec56 docs.af.pivotal.io->docs-ip.spring.io
Closes gh-9686
2021-04-27 09:52:20 -05:00
Rob Winch 4a2f493be0 docs.af.pivotal.io->docs-ip.spring.io
Closes gh-9686
2021-04-27 09:30:41 -05:00