Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
16,363 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

203 Commits

Author SHA1 Message Date
MrJovanovic13 24fd19b107 Add Default Timeout to JwtDecoders RestTemplate 
Closes gh-14269
 2024-04-18 14:40:18 -06:00
Josh Cummings 8dd28b797a
Update to BouncyCastle 1.78 
Closes gh-14910
 2024-04-15 15:32:08 -06:00
Joe Grandja 644cfa9f87 Add Jwt validator for the X509Certificate thumbprint claim 
Closes gh-10538
 2024-04-11 12:35:52 -04:00
Josh Cummings ee42ad2c8c
Polish JwtValidators 
Closes gh-14831
 2024-04-02 16:04:43 -06:00
Max Batischev ff19f04fca Add JwtValidators append to default 
Implemented simplified creation of default OAuth2TokenValidator with additional validators.

Closes gh-14831
 2024-04-02 14:41:35 -07:00
Josh Cummings 84c45adc70
Merge branch '6.1.x' into 6.2.x 
Closes gh-14496
 2024-01-25 17:33:15 -07:00
Josh Cummings 44f22ee5cf
Merge branch '5.8.x' into 6.1.x 
Closes gh-14495
 2024-01-25 17:32:57 -07:00
Hans Lindner ca10187fd1 Enhance JWT decoding error handling 
Previously, the `decode` method threw a `JwtException` directly when encountering an unsupported algorithm or any exception during parsing. This commit introduces a more robust error handling mechanism. Now, instead of throwing exceptions directly, it returns a `Mono.error()` with a `BadJwtException` containing detailed error information. This approach provides more flexibility and allows the caller to handle errors in a more granular way, by being able to use project reactors onError functionality.

Closes gh-14467
 2024-01-25 17:32:10 -07:00
Josh Cummings 966c01fa90
Merge branch '6.1.x' into 6.2.x 
Closes gh-14278
 2023-12-11 10:21:00 -07:00
Josh Cummings c4a99fc942
Merge branch '5.8.x' into 6.1.x 
Closes gh-14277
 2023-12-11 10:20:38 -07:00
Candelario e896b14046 Dropped Nimbus Error Message 
Closes gh-13730
 2023-12-11 10:19:02 -07:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Steve Riesenberg 975ac10f19
Merge branch '6.1.x' 
Closes gh-14042
 2023-10-19 16:44:03 -05:00
Steve Riesenberg b4e0873b1e
Merge branch '6.0.x' into 6.1.x 
Closes gh-14041
 2023-10-19 16:43:21 -05:00
Steve Riesenberg bb732e9d35
Merge branch '5.8.x' into 6.0.x 
Closes gh-14040
 2023-10-19 16:40:34 -05:00
Steve Riesenberg 5161712c35
Polish gh-13976 
Closes gh-13757
 2023-10-19 16:40:23 -05:00
Veli Döngelci a6b872dcf3
Fix caching error state in ReactiveRemoteJWKSource 2023-10-19 16:40:13 -05:00
Valeriy Vyrva 0e30b923f8 Check for null value with the appropriate assertion method 2023-10-03 08:16:21 -06:00
Marcus Da Coregio 07b6c451fd Merge branch '6.1.x' 
Closes gh-13884
 2023-09-29 11:47:38 -03:00
Marcus Da Coregio 8adfc9b463 Merge branch '6.0.x' into 6.1.x 
Closes gh-13883
 2023-09-29 11:46:48 -03:00
Marcus Da Coregio 92c82191c9 Merge branch '5.8.x' into 6.0.x 
Closes gh-13882
 2023-09-29 11:46:00 -03:00
Marcus Da Coregio 64e2a2ff8b Apply updated Code Style 
Closes gh-13881
 2023-09-29 11:44:32 -03:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices 
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-09-12 16:18:14 -06:00
Claudio Nave 52e12ad64b Replace deprecated methods 2023-06-22 13:19:55 -06:00
Krzysztof Krason 9b603b99ab Using modern Java features 2023-06-22 11:24:25 -06:00
Josh Cummings 76eba9bd0c
Add withIssuerLocation 
Closes gh-10309
 2023-04-12 16:36:15 -06:00
Josh Cummings 9ee8202625
Merge branch '6.0.x' 
Closes gh-13006
 2023-04-12 12:50:19 -06:00
Josh Cummings b423db5f93
Merge branch '5.8.x' into 6.0.x 
Closes gh-13005
 2023-04-12 12:46:11 -06:00
Nick Meverden c4e9fb885d Delay JWSVerificationKeySelector Construction 
Updating the NimbusReactiveJwtDecoder.JwkSetUriReactiveJwtDecoderBuilder processor to execute the ConfigurableJWTProcessor customizations before holding a reference to the JWSKeySelector.

Closes gh-12960
 2023-04-12 12:45:00 -06:00
Josh Cummings 64a1ad5cd6
Merge branch '5.8.x' into 6.0.x 2023-04-04 13:32:34 -06:00
Josh Cummings 39cee36065
Use SingletonSupplier 
Issue gh-9991
 2023-04-04 13:25:31 -06:00
Josh Cummings 88540aa52f
Use SingletonSupplier 
Issue gh-9991
 2023-04-04 13:23:03 -06:00
Geon Park 613b16c247 NimbusReactiveJwtDecoder support mono chain 
Supports reactive exception handling when using PublicKeyReactiveJwtDecoderBuilder and SecretKeyReactiveJwtDecoderBuilder
 2023-02-07 13:37:23 -07:00
Josh Cummings 748e912685
Merge branch '5.8.x' into 6.0.x 
Closes gh-12495
 2023-01-06 12:56:21 -07:00
Jon Kjennbakken 225dc593a8 Polish NimbusJwtDecoderTests 
- Add missing mock

Closes gh-12238
 2023-01-06 12:53:36 -07:00
Steve Riesenberg 53a3ff8932
Refresh remote JWK when unknown KID error occurs 
Closes gh-11621
 2022-08-18 16:53:45 -05:00
tinolazreg 77d11a3f9f
Add tests for unknown KID error 
Issue gh-11621
 2022-08-18 16:53:44 -05:00
Steve Riesenberg 9c02e835e8 Refresh remote JWK when unknown KID error occurs 
Closes gh-11621
 2022-08-18 16:42:57 -05:00
tinolazreg 3e73fa6954 Add tests for unknown KID error 
Issue gh-11621
 2022-08-18 16:42:57 -05:00
Joe Grandja f5a436df80 Remove deprecated NimbusJwtDecoderJwkSupport 
Closes gh-11507
 2022-07-14 12:09:59 -04:00
Joe Grandja 7b18336c6a Change interface with constants to final class 
Closes gh-10960
 2022-07-13 15:51:58 -04:00
Rivaldi 757fb38147 Fix typo 
(cherry picked from commit 80c5ec459befd9292e08a43e30f4aae22f39eeed)
 2022-06-27 16:05:50 -06:00
Marcus Da Coregio d99c08edce Fix failing test in NimbusReactiveJwtDecoderTests 2022-01-17 11:22:05 -03:00
Jonas Erbe dec858a5b7 Fix JwtClaimValidator wrong error code 
Previously JwtClaimValidator returned the invalid_request error on claim validation failure.
But validators have to return invalid_token errors on failure according to:
https://datatracker.ietf.org/doc/html/rfc6750#section-3.1.
Also see gh-10337

Closes gh-10337
 2021-11-29 12:04:30 -07:00
Jonas Erbe 82426e20e1 Fix JwtClaimValidator wrong error code 
Previously JwtClaimValidator returned the invalid_request error on claim validation failure.
But validators have to return invalid_token errors on failure according to:
https://datatracker.ietf.org/doc/html/rfc6750#section-3.1.
Also see gh-10337

Closes gh-10337
 2021-11-29 12:02:02 -07:00
Rob Winch f836897190 Checkstyle Fixes 
- Javadoc tag ordering
- Private constructors before inner classes

Issue gh-10394
 2021-10-18 21:03:35 -05:00
Marcus Da Coregio 02b2fcc6f0 Restore ManagementConfigurationPlugin 
Issue gh-9615
 2021-10-05 11:23:29 -03:00
Marcus Da Coregio d2e5f2ae0d Update Gradle to 7.2 
Closes gh-9615
 2021-10-04 15:19:40 -03:00
Josh Cummings 0f8fa36b93 Fix OAuth2 Error Code 
Closes gh-10319
 2021-09-28 13:24:51 -06:00