1032 Commits

Author SHA1 Message Date
Rob Winch
5280ac40e9 WebMvcConfigurerAdapter->WebMvcConfigurer
Fixes gh-4612
2017-10-30 01:30:08 -05:00
Kazuki Shimizu
3d5989dea4 Change a default realm name
Change a default realm name of Basic Authentication for XML namespace to 'Realm'.

Fixes gh-4220
2017-10-30 00:59:39 -05:00
Rob Winch
4295461830 ServerHttpSecurity extracts WebFilter from OrderedWebFilter
Fixes gh-4736
2017-10-30 00:45:26 -05:00
Antoine
e0aca04a28 Polish AssertJ assertions
Polish AssertJ assertions
2017-10-29 22:22:34 -05:00
Eddú Meléndez
70165869b1 Add UnboundId LDAP inmemory support
This commit adds the capability to run a LDAP inmemory different than
apacheds. Both providers `apacheds` and `unboundid` are supported.
2017-10-29 21:59:55 -05:00
Joe Grandja
9a4513356d Configure default OAuth2AuthorizedClientService
Fixes gh-4751
2017-10-29 22:45:57 -04:00
Rob Winch
4fa9b4dd15 Add ServerHttpSecurity.exceptionHandling()
Fixes gh-4750
2017-10-29 21:00:10 -05:00
Joe Grandja
5fa822d114 Expose custom config for OidcUserService
Fixes gh-4715
2017-10-29 21:33:51 -04:00
Joe Grandja
a261c9a047 Polish OAuth2LoginConfigurer
Fixes gh-4747
2017-10-29 21:33:51 -04:00
Rob Winch
a3e38fec47 Remove AuthorizationRequestUriBuilder
Make this API private since we don't have concrete use cases for exposing
it yet.

Fixes gh-4742
2017-10-29 19:50:02 -05:00
Joe Grandja
c3d2effc1d Polish OAuth2AuthorizedClientService
Fixes gh-4746
2017-10-29 20:25:03 -04:00
Joe Grandja
e4887057bc Rename AuthorizationGrantTokenExchanger -> OAuth2AccessTokenResponseClient
Fixes gh-4741
2017-10-29 17:49:15 -04:00
Rob Winch
e2dd037b4a Default WebFlux headers and Logout 2017-10-29 15:06:06 -05:00
Joe Grandja
6fbd435bdf OAuth2LoginAuthenticationFilter requires collaborators
Fixes gh-4661
2017-10-29 04:41:23 -04:00
Joe Grandja
5a7466512e Expose default constructor in AbstractAuthenticationFilterConfigurer
Fixes gh-4737
2017-10-29 04:41:23 -04:00
Rob Winch
5a5ec58ca4 Add LogoutPageGeneratingWebFilter
Fixes gh-4735
2017-10-29 00:12:23 -05:00
Rob Winch
0734d70d02 Logout requires POST
Issue: gh-4734
2017-10-29 00:11:59 -05:00
Rob Winch
8da2c7f657 Add WebFlux CSRF Protection
Fixes gh-4734
2017-10-28 22:59:24 -05:00
Rob Winch
f040bd054d Javadoc @EnableWebFluxSecurity 2017-10-28 22:59:24 -05:00
Rob Winch
b394ae5d5e Polish
Restructure WebFluxSecurityConfiguration for easier copy paste of
default ServerHttpSecurity Bean
2017-10-28 22:59:24 -05:00
Rob Winch
77acb34bcd Add spring-security-test to spring-security-config test dependencies 2017-10-28 22:58:55 -05:00
Joe Grandja
b471dd1c54 Remove OAuth2TokenRepository
Fixes gh-4727
2017-10-28 21:40:33 -04:00
Joe Grandja
83dc902ff7 Map CustomUserTypesOAuth2UserService using clientRegistrationId
Fixes gh-4692
2017-10-28 18:11:39 -04:00
Joe Grandja
ddf87b54f7 Polish OAuth2LoginConfigurer
Fixes gh-4731
2017-10-28 17:48:45 -04:00
Joe Grandja
0c68eb1821 Re-factor OAuth2AuthorizationCodeAuthenticationToken
Fixes gh-4730
2017-10-28 17:15:31 -04:00
Joe Grandja
64d8c8b8a9 Re-factor AuthorizationGrantTokenExchanger
Fixes gh-4728
2017-10-28 17:12:14 -04:00
Joe Grandja
16e69d06b4 Add OAuth2AuthorizedClientService
Fixes gh-4726
2017-10-28 17:12:14 -04:00
Joe Grandja
67bac28481 OAuth2UserService uses OAuth2UserRequest
Fixes gh-4724
2017-10-27 22:34:25 -04:00
Joe Grandja
3d319f7592 Make AuthorizationRequestRepository a Generic
Fixes gh-4723
2017-10-27 21:31:45 -04:00
Joe Grandja
9afefef3b9 Polish class names in oauth2-client
Fixes gh-4722
2017-10-27 21:00:52 -04:00
Joe Grandja
34668e05af Polish class names in oauth2-core
Fixes gh-4720
2017-10-27 20:42:58 -04:00
Rob Winch
2060125ebd ServerWebExchangeAttributeServerSecurityContextRepository->NoOpNoOpServerSecurityContextRepository
Issue: gh-4719
2017-10-27 18:17:52 -05:00
Rob Winch
3281cea46a Default use WebSessionServerSecurityContextRepository
Issue: gh-4719
2017-10-27 18:17:47 -05:00
Rob Winch
faa0bd7143 Update WebFilter ordering
Issue: gh-4719
2017-10-27 18:17:44 -05:00
Rob Winch
9c31041dce EnableWebFluxSecurityTests fixes
Issue: gh-4719
2017-10-27 18:17:25 -05:00
Rob Winch
437ba56415 ReactorContextWebFilter & SecurityContextServerWebExchangeWebFilter
Issue: gh-4719
2017-10-27 18:17:10 -05:00
Joe Grandja
8527daa22a Make OAuth2UserService Generic using OAuth2AuthorizedClient and OAuth2User types
Fixes gh-4706
2017-10-27 11:49:29 -04:00
Joe Grandja
3b80b6ded8 Move AuthorizationRequestUriBuilder to oauth2-client
Fixes gh-4703
2017-10-26 21:23:06 -04:00
Rob Winch
747473257f Use ReactorSecurityContextHolder
Issue gh-4713
2017-10-26 20:11:42 -05:00
Rob Winch
e23134c3ed Add LogoutBuilder ServerLogoutSuccessHandler
Fixes gh-4714
2017-10-26 20:11:42 -05:00
Joe Grandja
ef197d8215 Move JwtDecoderRegistry to oauth2.client.jwt package
Fixes gh-4705
2017-10-26 21:06:28 -04:00
Joe Grandja
70543dcb30 Move oidc package in oauth2-core and oauth2-client
Fixes gh-4710
2017-10-26 21:06:28 -04:00
Rob Winch
86875e117b Prevent ServerHttpSecurity from being built twice
Issue: gh-4711
2017-10-26 19:48:38 -05:00
Rob Winch
36501f4530 Remove ServerHttpSecurity duplicate build
WebFluxSecurityConfiguration invoked build twice
which caused each WebFilter to be added twice

Fixes gh-4711
2017-10-26 19:48:32 -05:00
Joe Grandja
ef83bc8dd7 Move package client.authentication.userinfo -> client.userinfo
Fixes gh-4708
2017-10-26 15:39:04 -04:00
Joe Grandja
027ea78dab Revert "Move OAuth2LoginAuthenticationProvider into userinfo package"
This reverts commit 54547f35b7bb2a35657dfd2713cbdd6543bc9597.
2017-10-26 14:55:25 -04:00
Joe Grandja
942b647c0d OAuth2LoginAuthenticationFilter processes uri /login/oauth2/code/*
Issue gh-4687
2017-10-26 14:20:19 -04:00
Rob Winch
54547f35b7 Move OAuth2LoginAuthenticationProvider into userinfo package
Fix package tangles. OAuth2LoginAuthenticationProvider requires
OAuth2UserService which is in a child package. We should move
OAuth2LoginAuthenticationProvider to the same package.

Issue: gh-4614
2017-10-26 11:22:21 -05:00
Johnny Lim
875aae012b Polish 2017-10-26 07:50:32 -05:00
Joe Grandja
d0a4e49870 Map custom OAuth2User types using String
Fixes gh-4691
2017-10-25 17:13:44 -04:00