Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
16,365 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

16365 Commits

Author SHA1 Message Date
Steve Riesenberg 435b46727b
Merge branch '6.3.x' 2024-08-09 10:51:39 -05:00
Steve Riesenberg 8ecd89b451
Merge branch '6.2.x' into 6.3.x 2024-08-09 10:51:23 -05:00
Steve Riesenberg 5be8322f7a
Merge branch '5.8.x' into 6.2.x 
# Conflicts:
#	.github/workflows/continuous-integration-workflow.yml
#	.github/workflows/update-scheduled-release-version.yml
 2024-08-09 10:48:08 -05:00
Steve Riesenberg 7149622efd
Revert "Migrate slack notifications to GChat" 
This reverts commits:
- 5d335ccf8d
- a5b1dec99a
 2024-08-09 10:39:34 -05:00
dependabot[bot] 37ad9a81e3 Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.15 
Bumps org.slf4j:slf4j-api from 2.0.13 to 2.0.15.

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-09 07:38:14 -07:00
Josh Cummings e52c6de39c
Repair Flaky Tests 
- Applying changes to OpenSaml4 tests that were already applied
to OpenSaml5 tests

Issue gh-15395
 2024-08-09 08:22:05 -06:00
dependabot[bot] 6da485ae20 Bump org-apache-maven-resolver from 1.9.21 to 1.9.22 
Bumps `org-apache-maven-resolver` from 1.9.21 to 1.9.22.

Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.21...maven-resolver-1.9.22)

Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.21...maven-resolver-1.9.22)

Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.21 to 1.9.22

---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-08 21:01:35 -07:00
github-actions[bot] 21fd6c9785 Merge branch '6.3.x' 2024-08-09 03:43:56 +00:00
dependabot[bot] e66464344f Bump org.slf4j:slf4j-api from 2.0.14 to 2.0.15 
Bumps org.slf4j:slf4j-api from 2.0.14 to 2.0.15.

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-08 20:43:07 -07:00
github-actions[bot] 5dea2339ba Merge branch '6.3.x' 2024-08-09 03:42:25 +00:00
dependabot[bot] 892c4e5468 Bump org-apache-maven-resolver from 1.9.21 to 1.9.22 
Bumps `org-apache-maven-resolver` from 1.9.21 to 1.9.22.

Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.21...maven-resolver-1.9.22)

Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.21...maven-resolver-1.9.22)

Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.21 to 1.9.22

---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-08 20:41:36 -07:00
github-actions[bot] 0add3b70ea Merge branch '6.3.x' 2024-08-09 03:26:53 +00:00
github-actions[bot] 845c6a04a7 Merge branch '6.2.x' into 6.3.x 2024-08-09 03:26:53 +00:00
dependabot[bot] 41bec3c838 Bump org.slf4j:slf4j-api from 2.0.14 to 2.0.15 
Bumps org.slf4j:slf4j-api from 2.0.14 to 2.0.15.

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-08 20:26:02 -07:00
github-actions[bot] 317ef95f43 Merge branch '6.3.x' 2024-08-09 03:25:20 +00:00
github-actions[bot] 308f4e5029 Merge branch '6.2.x' into 6.3.x 2024-08-09 03:25:19 +00:00
dependabot[bot] 1490061bc1 Bump org-apache-maven-resolver from 1.9.21 to 1.9.22 
Bumps `org-apache-maven-resolver` from 1.9.21 to 1.9.22.

Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.21...maven-resolver-1.9.22)

Updates `org.apache.maven.resolver:maven-resolver-impl` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.21...maven-resolver-1.9.22)

Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.21 to 1.9.22

---
updated-dependencies:
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-impl
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-08 20:24:34 -07:00
Rob Winch 71f40f2bc4 Merge branch '6.3.x' 
Use explicit types instead of var

Closes gh-155537
 2024-08-08 15:30:16 -05:00
Daniel Garnier-Moiroux 3b8cdc323f Remove unused method 2024-08-08 15:29:41 -05:00
Daniel Garnier-Moiroux 109da2719f Use explicit types everywhere instead of var 2024-08-08 15:29:41 -05:00
Josh Cummings c3e010fe90
Remove Unused opensaml-core Dependency Constraints 
Issue gh-11658
 2024-08-07 14:59:05 -06:00
Josh Cummings ee4fa739d4
Merge branch '6.3.x' 2024-08-07 14:53:09 -06:00
Josh Cummings 34d964eb08
Default Handler Resolution to Reflection-Based 
Closes gh-15496
 2024-08-07 14:50:33 -06:00
Josh Cummings de77e054fd
Default Handler Resolution to Reflection-Based 
Closes gh-15496
 2024-08-07 14:34:40 -06:00
Josh Cummings 02cca6f737
Polish AuthorizationAdvisorProxyFactory advisor configuration 
Closes gh-15497
 2024-08-07 10:09:51 -06:00
dependabot[bot] f90394d8d9 Bump org.hibernate.orm:hibernate-core from 6.4.9.Final to 6.4.10.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.4.9.Final to 6.4.10.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.4.10/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.4.9...6.4.10)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 21:08:45 -07:00
github-actions[bot] 3610217270 Merge branch '6.3.x' 2024-08-07 03:43:36 +00:00
dependabot[bot] 35695de2d3 Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.14 
Bumps org.slf4j:slf4j-api from 2.0.13 to 2.0.14.

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 20:42:49 -07:00
github-actions[bot] 9a2d78b340 Merge branch '6.3.x' 2024-08-07 03:42:24 +00:00
dependabot[bot] 528e9f3e6b Bump org.hibernate.orm:hibernate-core from 6.4.9.Final to 6.4.10.Final 
Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.4.9.Final to 6.4.10.Final.
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.4.10/changelog.txt)
- [Commits](https://github.com/hibernate/hibernate-orm/compare/6.4.9...6.4.10)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 20:41:35 -07:00
github-actions[bot] 77c5b6e09f Merge branch '6.3.x' 2024-08-07 03:24:40 +00:00
github-actions[bot] 7da5af1c3d Merge branch '6.2.x' into 6.3.x 2024-08-07 03:24:39 +00:00
dependabot[bot] f1bcdd2a41 Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.14 
Bumps org.slf4j:slf4j-api from 2.0.13 to 2.0.14.

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 20:23:55 -07:00
Josh Cummings f75cb17f35
Add Missing Delegate Call 
Issue gh-11658
 2024-08-06 18:14:12 -06:00
Josh Cummings 816ebe38b5
Add OpenSAML to Config Build 
Issue gh-11658
 2024-08-06 18:14:12 -06:00
Josh Cummings 08d1be5774
Fix Build to Add Missing Tests 
Issue gh-11658
 2024-08-06 18:14:12 -06:00
Josh Cummings 96682a1d5c
Document OpenSAML 4 vs OpenSAML 5 Support 
Closes gh-11658
 2024-08-06 18:14:12 -06:00
Josh Cummings 1da383b360
Add OpenSAML 5 Support 
Issue gh-11658
 2024-08-06 18:14:11 -06:00
Josh Cummings c6d6bfd74f
Move OpenSAML 4 Support to Separate Source Directory 
Issue gh-11658
 2024-08-06 18:14:11 -06:00
Josh Cummings 1be596bb2f
Use OpenSAML API for registration 
Issue gh-11658
 2024-08-06 18:14:11 -06:00
Josh Cummings 78a0173cc1
Use OpenSAML API for web 
Issue gh-11658
 2024-08-06 18:14:11 -06:00
Josh Cummings bf5b334531
Use OpenSAML API for web.authentication 
Issue gh-11658
 2024-08-06 18:14:10 -06:00
Josh Cummings 51fc05630d
Use OpenSAML API for web.authentication.logout 
Issue gh-11658
 2024-08-06 18:14:10 -06:00
Josh Cummings ff9a925e88
Use OpenSAML API for metadata 
Issue gh-11658
 2024-08-06 18:14:10 -06:00
Josh Cummings 80b31820cd
Use OpenSAML API in authentication 
Issue gh-11658
 2024-08-06 18:14:10 -06:00
Josh Cummings 416859e70e
Use OpenSAML API in authentication.logout 
Issue gh-11658
 2024-08-06 18:14:10 -06:00
Josh Cummings 94431d1650
Add Internal OpenSAML API 
This will be useful for exposing OpenSAML functionality at
a higher level. Each OpenSAML major version release should
provide a new implementation.

Issue gh-11658
 2024-08-06 18:14:09 -06:00
Josh Cummings 54a4792b7a
Remove Unneeded OpenSAML 4 References 
This will reduce the number of components that need to be
duplicated between the OpenSAML 4 and 5 support

Issue gh-11658
 2024-08-06 18:14:09 -06:00
Josh Cummings ab842b74b9
Use OpenSAML ParserPool Defaults 
Originally, Spring Security turned off various features
XML parsing feature for the underlying DocumentBuilderFactory
that OpenSAML uses.

Both OpenSAML 4 and 5 set these values by default, so we
can safely accept the defaults at this point.

Issue gh-11658
 2024-08-06 18:14:09 -06:00
Daniel Garnier-Moiroux bc8ba7f3b7 Inline CSS for default login and logout page 
- Remove the dependency on Bootstrap CSS. Results in faster load times, no failures
  in air-gapped or offline scenarios, and no dependency on an external CDN that may
  go away some day.
 2024-08-05 09:27:18 -05:00