Commit Graph

2496 Commits

Author SHA1 Message Date
Josh Cummings 3a53422478
Fix Failing Test
Closes gh-14467
2024-01-29 17:14:30 -07:00
Josh Cummings 27ebeefb14
Fix Failing Test
Closes gh-14467
2024-01-26 11:24:00 -07:00
y-tomida bdc0bd6b78 Add usernameParameter and passwordParameter to FormLoginDsl
Closes gh-14474
2024-01-24 09:56:38 -03:00
DingHao 3f65f600de Use AuthorizationEventPublisher Bean
- For Jsr250MethodInterceptor and SecuredMethodInterceptor

Closes gh-14401
2024-01-17 17:40:38 -07:00
Marcus Hert Da Coregio 1daa9e27e2 Merge branch '6.2.x' 2024-01-05 15:17:01 -03:00
Marcus Hert Da Coregio e2bab7b7ef Add .serialized suffix and consider them as binary in Git
Issue gh-3737
2024-01-05 15:14:22 -03:00
Marcus Hert Da Coregio 85177c0178 Merge branch '6.2.x'
Closes gh-14408
2024-01-05 14:22:49 -03:00
Marcus Hert Da Coregio 4fb6a33d36 Verify Serializable Objects Are Deserializable Between Minor Versions
This commit introduces a test that verifies that Spring Security domain classes that implements Serializable and have the same serialVersionUID as SpringSecurityCoreVersion#SERIAL_VERSION_UID can be deserialized between minor versions.

This commit also introduces another test that should be used to generate the files containing the serialized content of the objects.

Closes gh-3737
2024-01-05 12:00:02 -03:00
Steve Riesenberg eeb2f5d108
Merge branch '6.2.x' 2023-12-28 12:56:52 -06:00
Steve Riesenberg 428a3a2703
Merge branch '6.1.x' into 6.2.x 2023-12-28 12:56:36 -06:00
Steve Riesenberg 3beb583207
Merge branch '5.8.x' into 6.1.x 2023-12-28 12:56:25 -06:00
Steve Riesenberg 16dc6be3c8
Update copyright year
Issue gh-14329
2023-12-28 12:54:29 -06:00
Geir Hedemark c88aaedb48
Updated broken documentation link in javadocs 2023-12-28 12:54:29 -06:00
Marcus Hert Da Coregio 707588f870 Merge branch '6.2.x' 2023-12-26 15:58:51 -03:00
Marcus Hert Da Coregio d385b53e3c Merge branch '6.1.x' into 6.2.x 2023-12-26 15:58:39 -03:00
Marcus Hert Da Coregio 92af758f1f Make springSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor passive
Instead of excluding the bean from AOT processing, we avoid redefining the beans if they are present or in the expected state.

Issue gh-14362
2023-12-26 15:58:16 -03:00
Marcus Hert Da Coregio 778a63a763 Revert "Exclude SpringSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor from AOT processing"
This reverts commit 8a93178da7.
2023-12-26 15:10:15 -03:00
Marcus Hert Da Coregio 5ad34d1f92 Merge branch '6.2.x'
Closes gh-14381
2023-12-26 11:20:51 -03:00
Marcus Hert Da Coregio dd20f0694d Merge branch '6.1.x' into 6.2.x
Closes gh-14380
2023-12-26 11:20:41 -03:00
DingHao 7cd626fe25 Fix FilterChainProxy cannot be found when @EnableWebSecurity(debug = true)
Closes gh-14370
2023-12-26 11:20:09 -03:00
Marcus Hert Da Coregio 08d764dc84 Merge branch '6.2.x'
Closes gh-14378
2023-12-26 10:42:45 -03:00
Marcus Hert Da Coregio f95cda6be7 Merge branch '6.1.x' into 6.2.x
Closes gh-14377
2023-12-26 10:42:37 -03:00
Marcus Hert Da Coregio 364bc10e78 Add hints for CompositeFilterChainProxy
Closes gh-14359
2023-12-26 10:41:56 -03:00
Marcus Hert Da Coregio a628384d20 Merge branch '6.2.x'
Closes gh-14368
2023-12-22 08:40:24 -03:00
Marcus Hert Da Coregio 737678c66e Merge branch '6.1.x' into 6.2.x
Closes gh-14367
2023-12-22 08:40:15 -03:00
Marcus Hert Da Coregio 8a93178da7 Exclude SpringSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor from AOT processing
Closes gh-14362
2023-12-22 08:40:07 -03:00
Taehong Kim ec02c22459 Add Request Path Extraction Support
Closes gh-13256
2023-12-19 18:15:49 -07:00
Yan Kardziyaka 99218db84a Add order offset to @EnableMethodSecurity
Closes gh-13214
2023-12-19 17:57:24 -07:00
Josh Cummings c19f3d9d06
Merge branch '6.2.x' 2023-12-18 15:19:54 -07:00
Josh Cummings 74860c4aff
Merge branch '6.1.x' into 6.2.x 2023-12-18 15:19:48 -07:00
Josh Cummings fbafe41991
Merge branch '5.8.x' into 6.1.x 2023-12-18 15:19:40 -07:00
Josh Cummings b7f10cd50a
Merge branch '6.2.x' 2023-12-18 15:19:07 -07:00
Josh Cummings b031a4c0f6
Merge branch '6.1.x' into 6.2.x
Closes gh-14350
2023-12-18 15:18:48 -07:00
Josh Cummings e058b559b8
Polish Method Security Eager-Loading
Issue gh-11596
2023-12-18 15:18:09 -07:00
Josh Cummings 9a5d991383
Address eager-loading of infrastructure beans
Closes gh-11596
2023-12-18 15:16:00 -07:00
Josh Cummings 33800c0124
Address eager-loading of infrastructure beans
Closes gh-11596
2023-12-18 14:25:48 -07:00
Josh Cummings fc007aa373
Check OpenSAML Version in XML Support
Closes gh-12483
2023-12-18 11:51:15 -07:00
Josh Cummings d7a9a19161
Merge branch '6.2.x' 2023-12-18 11:47:39 -07:00
Josh Cummings 03e48905c7
Merge branch '6.1.x' into 6.2.x
Closes gh-14346
2023-12-18 11:47:23 -07:00
Josh Cummings b855ccdb09
Merge branch '5.8.x' into 6.1.x
Closes gh-14345
2023-12-18 11:46:04 -07:00
Josh Cummings eaaa813ede
Fix header value typo
Closes gh-11948
2023-12-18 10:42:50 -07:00
Josh Cummings 8a34e32a24 Polish IpAddressAuthorizationManager
Closes gh-10577
2023-12-15 16:54:58 -07:00
brunodmartins ea7c720ce7 Add hasIpAddress to Kotlin DSL
Closes gh-10577
2023-12-15 16:54:58 -07:00
Rob Winch 9f33d43097 Merge branch '6.2.x'
Use CompositeFilterChainProxy
2023-12-15 01:17:14 -06:00
Rob Winch c7047add5d Merge branch '6.1.x' into 6.2.x
Use CompositeFilterChainProxy
2023-12-15 01:16:21 -06:00
Rob Winch 142b268a21 Use CompositeFilterChainProxy
By extending FilterChainProxy CompositeFilterChainProxy is more passive since
users often depend on the type of the springSecurityFilterChain Bean being
FilterChainProxy (even though it can already be other types - when debug is
enabled).

Issue gh-14128
2023-12-15 01:15:38 -06:00
Rob Winch 465642828a Merge branch '6.2.x'
Add HandlerMappingIntrospector Caching

Closes gh-14333
2023-12-14 16:11:08 -06:00
Rob Winch 6dd29520b0 Merge branch '6.1.x' into 6.2.x
Add HandlerMappingIntrospector Caching

Closes gh-14332
2023-12-14 16:10:50 -06:00
Rob Winch 70dfb3d391 Add HandlerMappingIntrospector Caching
Closes gh-14128
2023-12-14 16:08:36 -06:00
Marcus Da Coregio 57ab15127a Add Max Sessions on WebFlux
Closes gh-6192
2023-12-11 09:48:34 -03:00
DerChris173 e6bea1cfa1 Polish RoleHierarchy Bean Usage
Issue gh-12783
2023-12-07 16:27:14 -07:00
kandaguru17 b76f7c029d Use available RoleHierachy Bean for MethodSecurity Config
Closes gh-12783
2023-12-07 16:27:14 -07:00
Josh Cummings bb6b55aca3 Add Not Support
Closes gh-14058
2023-12-07 16:24:19 -07:00
Josh Cummings d50698a269
Prepare for Spring Security 6.3
Closes gh-14210
2023-12-05 15:49:42 -07:00
Josh Cummings 3ab235cd56
Merge branch '6.1.x' 2023-12-01 15:54:44 -07:00
Josh Cummings 641722823e
Merge branch '6.0.x' into 6.1.x 2023-12-01 15:45:32 -07:00
Josh Cummings f536b2652f
Merge branch '5.8.x' into 6.0.x 2023-12-01 15:45:03 -07:00
Josh Cummings c623303ca5
Add Logging
Now if the ServletRegistration API available message is shown, it will
also be accompanied with a startup warning in the logs.

Closes gh-14221
2023-12-01 12:57:46 -07:00
Josh Cummings a98baa7522
Polish ServletRegistration API Deferral
Tomcat uses different ServletContext instances from startup- and request-time.
This commit ensures that if the programmatic API isn't available at startup-time,
then use the ServletContext attached to the HttpServletRequest at runtime.

Issue gh-13794
2023-12-01 12:57:45 -07:00
Josh Cummings 15d9b7824c
Merge branch '6.1.x' 2023-11-17 12:27:31 -07:00
Josh Cummings d958787561
Merge branch '6.0.x' into 6.1.x 2023-11-17 12:27:04 -07:00
Josh Cummings 12f074b8ce
Merge branch '5.8.x' into 6.0.x 2023-11-17 12:25:13 -07:00
Josh Cummings d961307044
Polish RequestMatcher Description
Issue gh-13794
2023-11-17 12:24:38 -07:00
Josh Cummings 4131a38f9e
Revert "Add forServletPattern"
This reverts commit 762319b6be.
2023-11-17 12:02:14 -07:00
Josh Cummings 5958828113
Merge branch '6.1.x' 2023-11-17 12:01:57 -07:00
Josh Cummings aa1a022605
Merge branch '6.0.x' into 6.1.x
Closes gh-14165
2023-11-17 11:46:20 -07:00
Josh Cummings c6c6eb4d66
Merge branch '5.8.x' into 6.0.x
Closes gh-14164
2023-11-17 11:45:59 -07:00
Josh Cummings 4ca54683ae
Defer requestMatchers Validation to Runtime
Closes gh-13794
2023-11-17 11:23:21 -07:00
Marcus Hert Da Coregio 00da9c9092 Use assertj assertions 2023-11-17 09:05:38 -03:00
Marcus Hert Da Coregio e3ab1c94d7 Use assertj assertions 2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio a7da9491d9 Use assertj assertions 2023-11-17 09:03:36 -03:00
Josh Cummings 97516727a4
Add Coroutine Support
Closes gh-12080
2023-11-15 11:48:37 -07:00
Steve Riesenberg 77acaaa3b7
Use bean factory method
Closes gh-14094
2023-11-06 12:55:57 -06:00
Josh Cummings 624dcafcf2
Merge branch '6.0.x' into 6.1.x
Closes gh-14085
2023-11-01 12:12:02 -06:00
Josh Cummings fa15c975ff
Merge branch '5.8.x' into 6.0.x
Closes gh-14084
2023-11-01 12:11:20 -06:00
Josh Cummings ffd12ee3b9
Refine requestMatcher Validation Rules
Closes gh-14078
2023-10-31 17:08:24 -06:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
2023-10-31 15:11:45 -05:00
Josh Cummings 96ebab324c
Remove Type Parameter
Closes gh-14012
2023-10-13 22:09:16 -06:00
Josh Cummings 8f829dd1d7 Refine requestMatcher Validation Rules
Closes gh-13850
2023-10-12 09:29:08 -06:00
Josh Cummings 762319b6be Add forServletPattern
Closes gh-13562
2023-10-12 09:29:08 -06:00
Marcus Da Coregio 07b6c451fd Merge branch '6.1.x'
Closes gh-13884
2023-09-29 11:47:38 -03:00
Marcus Da Coregio 8adfc9b463 Merge branch '6.0.x' into 6.1.x
Closes gh-13883
2023-09-29 11:46:48 -03:00
Marcus Da Coregio 92c82191c9 Merge branch '5.8.x' into 6.0.x
Closes gh-13882
2023-09-29 11:46:00 -03:00
Marcus Da Coregio 64e2a2ff8b Apply updated Code Style
Closes gh-13881
2023-09-29 11:44:32 -03:00
Steve Riesenberg ff374935fb
Verify ReactorContext when using Virtual Threads
Closes gh-12791
2023-09-25 12:01:31 -05:00
Steve Riesenberg d48b8697bd
Fix mockito usage
Issue gh-13810
2023-09-19 10:39:04 -05:00
Josh Cummings cb33fd7850
Add OIDC Back-Channel Logout Support
Closes gh-12570
2023-09-16 15:12:21 -06:00
Rob Winch 91c89451e7 Merge branch '6.1.x'
Automate spring-security.xsd

Closes gh-13826
2023-09-14 23:44:34 -05:00
Rob Winch 7627c2df46 Merge branch '6.0.x' into 6.1.x
Automate spring-security.xsd

Closes gh-13825
2023-09-14 23:43:27 -05:00
Rob Winch 342735043d Merge branch '5.8.x' into 6.0.x
Automate spring-security.xsd

Closes gh-13824
2023-09-14 23:42:31 -05:00
Rob Winch 779541b340 Merge branch '5.7.x' into 5.8.x
Automate spring-security.xsd

Closes gh-13823
2023-09-14 23:37:53 -05:00
Rob Winch 5b293d2116 Automate spring-security.xsd
Closes gh-13819
2023-09-14 16:01:50 -05:00
Marcus Da Coregio 9a06885247 Merge branch '6.1.x'
Closes gh-13815
2023-09-14 14:50:11 +01:00
Marcus Da Coregio 59a9aa3268 Merge branch '6.0.x' into 6.1.x
Closes gh-13814
2023-09-14 14:49:29 +01:00
Marcus Da Coregio aeafcc1377 Defer MethodSecurityExpressionHandler Resolution
When using Spring Security ACL and compiling to Native, in order to create the '*AuthorizationMethodInterceptor' Proxy beans during build time, Spring tries to resolve the DataSource bean since the DataSource can be a dependency of some AclService implementations, and fails because some required data source properties are not available during build time.

This commit defers the initialization of the MethodSecurityExpressionHandler to the runtime.

Closes gh-12653
2023-09-14 14:48:24 +01:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
2023-09-12 16:18:14 -06:00
Steve Riesenberg 92256f0522 Support nested suspend calls for Kotlin coroutines
Closes gh-13764
2023-09-05 00:23:30 -05:00
Steve Riesenberg 1a45602dbb
Fix mockito usage 2023-09-01 15:27:54 -05:00
Steve Riesenberg ea1ec646b2
Fix test failures related to response headers
These tests began failing on snapshots after changes in
Spring Framework's `DispatcherServlet` to reset the response
on an error.

For now, we can have these tests operate with a 200 OK response.
An issue was opened in the spring-framework issuer tracker to
discuss this and address `CorsFilter` (and any other filter) that
writes headers that would be cleared on an error.

See spring-projects/spring-framework#31154
2023-09-01 15:27:54 -05:00
Josh Cummings fe5a55fc13
Merge branch '6.1.x'
Closes gh-13723
2023-08-20 23:15:57 -06:00
Josh Cummings 0df1884372
Merge branch '6.0.x' into 6.1.x
Closes gh-13722
2023-08-20 23:10:00 -06:00
Josh Cummings 5fb6f5768c
Merge branch '5.8.x' into 6.0.x
Closes gh-13666 in 6.0.x
Closes gh-13721
2023-08-20 23:07:36 -06:00
Josh Cummings 28f98b3351
Improve Error Message
Closes gh-13667
2023-08-20 22:53:57 -06:00
Josh Cummings ed96e2cddf
Ignore Unmappable Servlets
Closes gh-13666
2023-08-20 22:53:55 -06:00
Josh Cummings 8d58113b61
Merge branch '6.1.x'
Closes gh-13656
2023-08-16 17:54:55 -06:00
Josh Cummings d2d1f19133
Merge branch '6.0.x' into 6.1.x
Closes gh-13655
2023-08-16 17:54:37 -06:00
Josh Cummings ca0140c586
saml2Login Honors AuthenticationProvider bean
Closes gh-13654
2023-08-16 17:54:14 -06:00
Josh Cummings 3ba5cc0e40
Add CSRF Exception
Issue gh-13653
2023-08-16 16:54:50 -06:00
Josh Cummings 87ae2d41b3
Update Mockito Usage
Issue gh-13542
2023-08-16 16:30:43 -06:00
Steve Riesenberg 985e569685
Polish gh-13608 2023-08-10 17:30:54 -05:00
Olivier Vanekem 6353d90047
Add integrity attribute for signin.css
Closes gh-13486
2023-08-10 17:30:52 -05:00
Steve Riesenberg 5828e4e65c Simplify OAuth2 Client configuration
Issue gh-11783
2023-08-09 14:14:09 -05:00
Joe Grandja f3d90b38e2 Add OAuth2AuthorizedClientManager Registrar 2023-08-09 14:14:09 -05:00
Josh Cummings 75e0068925
Merge branch '6.1.x' 2023-08-07 16:03:55 -06:00
Josh Cummings 8d4a024809
Update Copyright
PR gh-13472
2023-08-07 16:00:56 -06:00
Seongguk Jeong cd6f33c03e Using putIfAbsent instead of put 2023-08-07 16:00:18 -06:00
Josh Cummings 33d904d708
Merge branch '6.1.x'
Closes gh-13581
2023-07-24 11:32:23 -06:00
Josh Cummings 442d3fb99d
Merge branch '6.0.x' into 6.1.x
Closes gh-13580
2023-07-24 11:31:52 -06:00
Josh Cummings ee13216882
Merge branch '5.8.x' into 6.0.x
Closes gh-13579
2023-07-24 11:31:29 -06:00
Josh Cummings c4f061c63d
Do Not Re-register Method Security Advisors
Closes gh-13572
2023-07-24 11:24:03 -06:00
Josh Cummings 9dc7bdd329
Merge branch '6.1.x' 2023-07-17 11:21:06 -06:00
Josh Cummings cf2c8da3d5
Merge branch '6.0.x' into 6.1.x 2023-07-17 11:10:04 -06:00
Josh Cummings fe7bee9236
Merge branch '5.8.x' into 6.0.x 2023-07-17 11:09:38 -06:00
Josh Cummings bb46a54270
Add DispatcherServlet to Tests
Issue gh-13551
2023-07-17 10:58:30 -06:00
Josh Cummings df239b6448
Improve RequestMatcher Validation
Closes gh-13551
2023-07-17 08:41:30 -06:00
Marcus Da Coregio 8f5793afb1 Merge branch '6.1.x' 2023-07-17 09:17:10 -03:00
Marcus Da Coregio aaa31312bd Merge branch '6.0.x' into 6.1.x 2023-07-17 09:16:45 -03:00
Marcus Da Coregio cbef118026 Merge branch '5.8.x' into 6.0.x 2023-07-17 09:16:20 -03:00
Marcus Da Coregio a939f17890 Merge branch '5.7.x' into 5.8.x 2023-07-17 09:15:56 -03:00
Marcus Da Coregio fe9bc26bdc Merge branch '5.6.x' into 5.7.x 2023-07-17 09:13:28 -03:00
Marcus Da Coregio 7813a9ba26 Use default PathPatternParser instance 2023-07-17 09:12:28 -03:00
Josh Cummings b3ad2b0dc5
Don't Mock OAuth2AuthorizedClientRepository
Issue gh-13542
Issue gh-13546
2023-07-14 18:44:35 -06:00
Josh Cummings b0022a0ae8
Update Mockito Usage
Issue gh-13542
2023-07-14 18:44:34 -06:00
Josh Cummings cf79af2386
Update Kotlin Test Usage
Issue gh-13539
2023-07-14 18:38:58 -06:00
Josh Cummings 6c3636d780
Update Removed Usages
Issue gh-13544
2023-07-14 18:38:58 -06:00
Marcus Da Coregio 30d09c5192 Merge branch '6.1.x'
Closes gh-13495
2023-07-12 14:31:56 -03:00
Marcus Da Coregio f62c9d3be6 Merge branch '6.0.x' into 6.1.x
Closes gh-13494
2023-07-12 14:31:45 -03:00
Marcus Da Coregio 933b302979 Fix once-per-request="true" not taking any effect
Closes gh-13491
2023-07-12 14:30:18 -03:00
Josh Cummings 8d0e426654
Generate Shared Test SAML Response
Issue gh-13433
2023-07-11 10:36:06 -06:00
Josh Cummings f2f19270da
Update to OpenSAML 4.3.0
Closes gh-13433
2023-07-10 17:56:42 -06:00
Marcus Da Coregio a0540f5c65 Deprecate AbstractConfiguredSecurityBuilder#apply
Closes gh-13436
2023-06-30 11:53:47 -03:00
Marcus Da Coregio 1ff5eb6b57 Add with() method to apply SecurityConfigurerAdapter
This method is intended to replace .apply() because it will not be possible to chain configurations when .and() gets removed

Closes gh-13204
2023-06-29 14:52:30 -03:00
Josh Cummings 4855290a76
Merge branch '6.1.x' 2023-06-29 10:31:25 -06:00
Josh Cummings 87e07d59da
Merge branch '6.0.x' into 6.1.x
Closes gh-13199
2023-06-29 10:08:10 -06:00
Josh Cummings 1abfd2c801
Only Register as Advisor in Proxy Mode
Now that https://github.com/spring-projects/spring-framework/issues/30689
is addressed.

Closes gh-13198
2023-06-29 10:07:11 -06:00
Marcus Da Coregio 618847418f Automatically enable .cors() if CorsConfigurationSource bean is present
Closes gh-5011
2023-06-23 09:51:46 -03:00
Claudio Nave 52e12ad64b Replace deprecated methods 2023-06-22 13:19:55 -06:00
Marcus Da Coregio 8efdc5c926 Polish Contribution
Issue gh-13215
2023-06-22 16:00:47 -03:00
kandaguru17 401058d5ff Implemented AuthorizeHttpRequestsConfigurer to consider GrantedAuthorityDefaults for custom rolePrefix
Closes gh-13215
2023-06-22 16:00:46 -03:00
Evgeniy Cheban c5461b17de EnableMethodSecurity annotation does not get imported when defined as a meta-annotation
Closes gh-12870
2023-06-22 15:15:25 -03:00
Josh Cummings 208fb62db9 Update Deprecated Usage
Issue gh-12629
2023-06-22 11:24:25 -06:00
Krzysztof Krason 9b603b99ab Using modern Java features 2023-06-22 11:24:25 -06:00
Kandaguru17 7e01ebdd92 Remove LazyCsrfTokenRepository usage
Closes gh-13194
2023-06-22 11:23:35 -06:00
Josh Cummings fb910e2997
Prepare for Spring Security 6.2
Closes gh-14316
2023-06-22 11:03:28 -06:00
Marcus Da Coregio acf1d34d94 Merge branch '6.0.x' 2023-06-19 11:13:57 -03:00
Marcus Da Coregio 2686af0c4d Revert "Only Register as Advisor in Proxy Mode"
This reverts commit 35ad1f85
2023-06-19 11:13:39 -03:00
Marcus Da Coregio a939fa63a1 Merge branch '6.0.x'
Closes gh-13282
2023-06-05 16:04:27 -03:00
Marcus Da Coregio 4e3517e03a Merge branch '5.8.x' into 6.0.x
Closes gh-13281
2023-06-05 16:03:58 -03:00
Marcus Da Coregio b47420f8a2 Merge branch '5.7.x' into 5.8.x
Closes gh-13280
2023-06-05 16:02:30 -03:00
Marcus Da Coregio 7250abc185 Does not apply a Configurer when disabled from another DSL
Closes gh-13203
2023-06-05 16:01:20 -03:00
Marcus Da Coregio 537e10cf9c Improve javadoc adding how to stick with defaults and link to documentation
Closes gh-13273
2023-06-02 15:05:17 -03:00
Josh Cummings f566ed0afd
Update Symlink for 6.1
Issue gh-13131
2023-05-24 14:44:42 -06:00
Josh Cummings ff0c82b019
Merge branch '6.0.x' 2023-05-24 14:41:55 -06:00
Josh Cummings 71703dc371
Update Symlink for 6.0
Issue gh-13131
2023-05-24 14:40:50 -06:00
Josh Cummings 90b37d6d07
Merge branch '5.8.x' into 6.0.x 2023-05-24 14:38:23 -06:00
Josh Cummings 73cb9862ad
Update Symlink for 5.8
Issue gh-13131
2023-05-24 14:37:18 -06:00
Josh Cummings be409ada10
Merge branch '6.0.x'
Closes gh-13209
2023-05-22 15:43:43 -06:00
Josh Cummings 7c54c0e4fa
Merge branch '5.8.x' into 6.0.x
Closes gh-13208
2023-05-22 15:43:27 -06:00
Josh Cummings 62ede47d86
Merge branch '5.7.x' into 5.8.x
Closes gh-13207
2023-05-22 15:42:36 -06:00
Josh Cummings 1eefd433b6
Add spring-security.xsd symlink
Closes gh-13131
2023-05-22 15:42:02 -06:00
Josh Cummings 31f1604f66
Merge branch '6.0.x'
Closes gh-13199
2023-05-19 16:44:18 -06:00
Josh Cummings 7efa275abc
Merge branch '5.8.x' into 6.0.x
Closes gh-13198
2023-05-19 16:43:57 -06:00
Josh Cummings 35ad1f857e
Only Register as Advisor in Proxy Mode
Closes gh-13160
2023-05-19 16:33:46 -06:00
Josh Cummings 49366907e2
Merge branch '6.0.x'
Closes gh-13183
2023-05-15 17:31:48 -06:00
Josh Cummings b438bc5384
Merge branch '5.8.x' into 6.0.x
Closes gh-13182
2023-05-15 17:30:14 -06:00
lukasz.migdalek f4915890cc
Use Spec Order for Verifying Signatures
Closes gh-12346
2023-05-15 17:24:22 -06:00
Josh Cummings 5814f614c7
Merge branch '6.0.x'
Closes gh-13128
2023-05-02 16:56:37 -06:00
Josh Cummings 46ad9c122e
Merge branch '5.8.x' into 6.0.x
Closes gh-13127
2023-05-02 16:56:06 -06:00
Josh Cummings e9a02bc6e9
RememberMeConfigurer Picks Up SecurityContextRepository
Closes gh-13104
2023-05-02 16:46:35 -06:00
Marcus Da Coregio 45efd48b93 Merge branch '6.0.x'
Closes gh-13122
2023-05-02 10:13:24 -03:00
Marcus Da Coregio 69338ecdfa Only Observe AuthenticationManager if it is not null
Closes gh-13084
2023-05-02 10:12:46 -03:00
SeasonPan a44e91d044 fix javadoc typo 2023-04-24 16:41:17 -06:00
Josh Cummings f261242db1
Merge branch '5.7.x' into 5.8.x 2023-04-24 16:33:29 -06:00
Ruslan Stelmachenko caa4093619 Fix javadoc for migration from WebSecurityConfigurerAdapter 2023-04-24 16:32:16 -06:00
Josh Cummings dd14bbb365
Merge branch '6.0.x' 2023-04-18 12:42:55 -06:00
Josh Cummings 1e25756ee6
Fix Import Order 2023-04-18 12:42:25 -06:00
Josh Cummings 68b198f091
Merge branch '6.0.x' 2023-04-18 12:20:44 -06:00
Josh Cummings 64542b4059
Polish X509 SecurityContextRepository
Like Basic and Bearer authentication, X509 is
stateless by default. As such, it is better to not
pick up the global SecurityContextRepository bean.

The better fix is to change the default from
HttpSessionSecurityContextRepository to
RequestAttributeSecurityContextRepository.

Issue gh-13008
2023-04-18 12:18:20 -06:00
Josh Cummings c79f04cd11
Merge branch '6.0.x'
Closes gh-13063
2023-04-17 17:07:32 -06:00
Josh Cummings c3479ddb45
Pick Up SecurityContextRepository
Closes gh-13008
2023-04-17 17:06:06 -06:00
Marcus Da Coregio 04b3d07319 Merge branch '6.0.x' 2023-04-17 07:30:54 -03:00
Marcus Da Coregio a484044591 Merge branch '5.8.x' into 6.0.x 2023-04-17 07:29:42 -03:00
Marcus Da Coregio 6cf8c53aaa Merge branch '5.7.x' into 5.8.x 2023-04-17 07:16:47 -03:00
Marcus Da Coregio 2d52fb8e4b Clear Repository on Logout 2023-04-17 06:47:57 -03:00
Marcus Da Coregio 82a149207d Deprecate .and() and non lambda DSL methods
Closes gh-12629
2023-04-14 15:50:58 -03:00
Marcus Da Coregio 1a4a2a9055 Merge branch '5.8.x' into 6.0.x 2023-04-14 13:32:10 -03:00
Marcus Da Coregio 54117d7d27 Fix test suffix to align with checkstyle 2023-04-14 13:29:15 -03:00
Marcus Da Coregio 01d1e20dc3 Deprecate shouldFilterAllDispatcherTypes
Closes gh-12138
2023-04-13 15:05:10 -03:00
Marcus Da Coregio 57e134cc5f Merge branch '6.0.x' 2023-03-22 10:12:28 -03:00