Rob Winch
5b8d66e911
Extract Preface
...
Issue: gh-5836
2018-09-12 17:04:41 -05:00
Rob Winch
57359058dd
Separate Servlet and WebFlux
...
Fixes: gh-5836
2018-09-12 16:48:41 -05:00
Joe Grandja
ed9cd478ba
Polish
...
Issue gh-5776
2018-09-12 11:57:53 -04:00
Joe Grandja
8746e71b9a
Use OAuth2AuthorizationException in authorization flows
2018-09-11 14:53:42 -05:00
Joe Grandja
ef02ab2f8a
DefaultOAuth2UserService handles OAuth2AuthorizationException
2018-09-11 14:53:42 -05:00
Joe Grandja
7474d6524e
DefaultAuthorizationCodeTokenResponseClient throws OAuth2AuthorizationException
2018-09-11 14:53:42 -05:00
Joe Grandja
56b4576396
DefaultClientCredentialsTokenResponseClient throws OAuth2AuthorizationException
...
Fixes gh-5726
2018-09-11 14:53:42 -05:00
Joe Grandja
e56c048db3
Remove OAuth2ClientException
2018-09-11 14:53:42 -05:00
Joe Grandja
b3282957a8
Add OAuth2AuthorizationException
2018-09-11 14:53:42 -05:00
Jisoo Youn
3f3a3e8351
Fix convention
2018-09-11 13:57:23 -05:00
Johnny Lim
42327a0aec
Polish OAuth2ResourceServerConfigurerTests
2018-09-10 13:24:16 -06:00
Rob Winch
e5e91204fc
Next development version
...
Issue: gh-5823
2018-09-07 15:57:04 -05:00
Rob Winch
8c4ff64db0
Release Spring Security 5.1.0.RC2
...
Fixes: gh-5823
2018-09-07 15:56:22 -05:00
Rob Winch
26e577b0fa
UnauthenticatedServerOAuth2AuthorizedClientRepository->UnAuthenticatedServerOAuth2AuthorizedClientRepository
...
Issue: gh-5817
2018-09-07 15:29:35 -05:00
Rob Winch
11ea92ef1c
Add UnauthenticatedServerOAuth2AuthorizedClientRepository
...
Fixes: gh-5817
2018-09-07 15:28:40 -05:00
Rob Winch
96d85ad2b5
Polish HttpsRedirectWebFilter
...
Issue: gh-5749
2018-09-07 14:29:46 -05:00
Josh Cummings
2c982a4168
Reactive Redirect to Https
...
This introduces the capability to configure Reactive Spring Security
to upgrade requests to HTTPS
Fixes: gh-5749
2018-09-07 14:25:58 -05:00
Johnny Lim
f164f2f869
Polish FilterComparator
...
Extracts STEP incrementing into a separate helper class
2018-09-07 10:30:57 -06:00
Joe Grandja
d4576a2502
Update to Spring 5.1.0.RC3
...
Fixes gh-5798
2018-09-07 12:19:56 -04:00
Joe Grandja
c4ded37030
Update to jsp-api:2.3.3
...
Fixes gh-5795
2018-09-07 12:19:56 -04:00
Joe Grandja
f6a24afb1b
Update to selenium-support:3.14.0
...
Fixes gh-5794
2018-09-07 12:19:56 -04:00
Joe Grandja
5ace871ef1
Update to nimbus-jose-jwt:6.0.2
...
Fixes gh-5793
2018-09-07 12:19:56 -04:00
Joe Grandja
31634e25be
Update to oauth2-oidc-sdk:6.0
...
Fixes gh-5792
2018-09-07 12:19:56 -04:00
Joe Grandja
bf2484e6fa
Update to selenium-java:3.14.0
...
Fixes gh-5791
2018-09-07 12:19:56 -04:00
Joe Grandja
0e5cbd36e6
Update to jaxb-api:2.4.0-b180830.0359
...
Fixes gh-5788
2018-09-07 12:19:56 -04:00
Joe Grandja
5728108149
Update to javax.persistence:2.2.1
...
Fixes gh-5786
2018-09-07 12:19:56 -04:00
Joe Grandja
54484639bb
Update to htmlunit-driver:2.32.1
...
Fixes gh-5784
2018-09-07 12:19:56 -04:00
Joe Grandja
451fd50189
Update to hibernate-entitymanager:5.3.6.Final
...
Fixes gh-5782
2018-09-07 12:19:56 -04:00
Joe Grandja
7a24e7d648
Update to mockito-core:2.21.0
...
Fixes gh-5781
2018-09-07 12:19:56 -04:00
Joe Grandja
05b8457b5f
Update to assertj-core:3.11.1
...
Fixes gh-5780
2018-09-07 12:19:56 -04:00
Josh Cummings
21e62683ab
Polish Commit on Reactive Http Basic Test
2018-09-07 10:01:11 -06:00
Tim Koopman
6df4dfe47b
Reactive HttpBasic Support For Coloned Passwords
...
This makes so that reactive httpBasic supports passwords containing
one or more colons.
2018-09-07 10:01:11 -06:00
Josh Cummings
9e0f171d47
Jwt Claim Mapping
...
This introduces a hook for users to customize standard Jwt Claim
values in cases where the JWT issuer isn't spec compliant or where the
user needs to add or remove claims.
Fixes: gh-5223
2018-09-07 09:48:26 -05:00
Rob Winch
2495025845
authcodegrant samples->oauth2webclient samples
...
The authcodegrant samples were initially meant to be very simple
demonstration of authorization code flow. However, it has become
obvious since then that the real intent of the demo is how to use
the WebClient with OAuth (there is no other reason to do authorization
code flow unless you use the token to make a request).
The samples have been migrated to oauth2webclient and oauth2webclient-webflux
respectively. They have been improved:
* The sample demonstrates usage with annotations, webclient directly, form login
oauth2Login, and public APIs
* The samples externalize the endpoint that is requested in the sample
making it easier to try other endpoints
* The UI no longer relies on a data structure for the result of the
endpoint also making it easier to try other endpoints
Issue: gh-4921
2018-09-07 08:58:50 -05:00
Rob Winch
438d2911fb
OAuth2AuthorizedClientResolver
...
Extract out a private API for shared code between the argument resolver
and WebClient support. This makes it easier to make changes in both
locations. Later we will extract this out so it is not a copy/paste
effort.
Issue: gh-4921
2018-09-07 08:58:00 -05:00
Rob Winch
23726abb1e
ServerOAuth2AuthorizedClientExchangeFilterFunction default ServerWebExchange
...
Leverage ServerWebExchange established by ServerWebExchangeReactorContextWebFilter
Issue: gh-4921
2018-09-07 08:57:25 -05:00
Rob Winch
ac78258847
ServerOAuth2AuthorizedClientExchangeFilterFunction defaultOAuth2AuthorizedClient
...
Defaults to use the OAuth2AuthenticationToken to resolve the authorized client
Issue: gh-4921
2018-09-07 08:57:00 -05:00
Rob Winch
158b8aa6d5
ServerOAuth2AuthorizedClientExchangeFilterFunction clientRegistrationId
...
Issue: gh-4921
2018-09-07 08:56:49 -05:00
Rob Winch
28537fa3b6
WebClientReactiveClientCredentialsTokenResponseClient
...
Fixes: gh-5607
2018-09-07 08:53:35 -05:00
Rob Winch
89f2874bff
ServerOAuth2AuthorizedClientExchangeFilterFunction clientRegistrationId
...
You can now provide the clientRegistrationId and
ServerOAuth2AuthorizedClientExchangeFilterFunction will look up the authorized client automatically.
Issue: gh-4921
2018-09-07 08:52:35 -05:00
Rob Winch
5bcbb1c40f
ServerOAuth2AuthorizedClientExchangeFilterFunction uses ServerOAuth2AuthorizedClientRepository
...
Issue: gh-4921
2018-09-07 08:52:18 -05:00
Rob Winch
07b6699fd9
ServerWebExchangeReactorContextWebFilter
...
Fixes: gh-5779
2018-09-07 08:49:27 -05:00
Josh Cummings
65c81ce952
Make JwtReactiveAuthenticationManager final
2018-09-06 13:46:18 -06:00
Joe Grandja
057587ef29
ClientRegistration contains Provider Configuration Metadata
...
Fixes gh-5540
2018-09-05 17:01:23 -04:00
Sola
c60fcf263e
provide test for custom principal extractor config
...
Signed-off-by: Sola <dev@sola.love>
2018-09-05 15:51:14 -05:00
Sola
2980f96b55
Allow PrincipalExtractor to be customized.
...
Signed-off-by: Sola <dev@sola.love>
2018-09-05 15:51:14 -05:00
Josh Cummings
932ea245fb
AuthenticationManager for OAuth2ResourceServerSpec
...
This makes the AuthenticationManager used by the OAuth2 Resource
Server configurable, focusing at this point on the Jwt use case.
Fixes: gh-5750
2018-09-05 09:19:11 -05:00
Joe Grandja
dfd572a4d2
Polish
2018-09-05 07:59:00 -05:00
Joe Grandja
3b480a3a05
Provide RestOperations in CustomUserTypesOAuth2UserService
...
Fixes gh-5602
2018-09-05 07:59:00 -05:00
Joe Grandja
4a8c95a3e8
Provide RestOperations in DefaultOAuth2UserService
...
Fixes gh-5600
2018-09-05 07:59:00 -05:00
