7637 Commits

Author SHA1 Message Date
Evgeniy Cheban
6f4d05193e DefaultWebSecurityExpressionHandler uses RoleHierarchy bean
Fixes gh-7059
2020-06-10 17:20:52 -04:00
Joe Grandja
e146a7c16b OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException
Issue gh-8609
2020-06-09 17:10:07 -04:00
Joe Grandja
a372ec9ef5 OAuth2AuthorizationCodeGrantWebFilter should handle OAuth2AuthorizationException
Fixes gh-8609
2020-06-09 17:10:07 -04:00
Eleftheria Stein
0b0abfb911 Next development version 2020-06-03 18:04:07 -04:00
Eleftheria Stein
37568780a1 Release 5.1.11.RELEASE 5.1.11.RELEASE 2020-06-03 17:48:40 -04:00
Josh Cummings
d80b1865a5
Polish setAllowedHostnames
Added JavaDoc to method, including @since attribute

Issue gh-4310
2020-06-03 08:54:06 -06:00
Eddú Meléndez
52c80c78e5
Add support for allowedHostnames in StrictHttpFirewall
Introduce a new method `setAllowedHostnames` which perform the validation
against untrusted hostnames.

Fixes gh-4310
2020-06-03 08:53:59 -06:00
Eleftheria Stein
ded83cc1b3 Update to jaxb-impl 2.3.3
Fixes gh-8634
2020-06-02 18:45:14 -04:00
Eleftheria Stein
7a1833c1df Update to okhttp 3.12.12
Fixes gh-8635
2020-06-02 18:45:14 -04:00
Eleftheria Stein
e6630ea0f1 Update to mockwebserver 3.12.12
Fixes gh-8633
2020-06-02 18:45:14 -04:00
Eleftheria Stein
2400e8fde2 Update to Spring Boot 2.1.14.RELEASE
Fixes gh-8632
2020-06-02 18:45:14 -04:00
justmehyp
f05d70a4a5 Remove unused field 'digester' in Md4PasswordEncoder
`private Digester digester;`  defined in Md4PasswordEncoder is never used. So remove it.

Closes gh-8553
2020-05-21 11:21:40 -05:00
Maksim Vinogradov
8bb4e72aff Prevent StackOverflowError for AccessControlEntryImpl.hashCode
Getting StackOverflowError when invoke AclImpl.hashCode because of
cross-references between AclImpl and AccessControlEntryImpl

Remove from AccessControlEntryImpl.hashCode method invocation of
acl.hashCode

fixes gh-5401
2020-05-21 10:08:56 -05:00
Rob Winch
f58a262eb4 Revert "Create the CSRF token on the bounded elactic scheduler"
Reactor did not add bounded elastic until a later version.

This reverts commit c0154f2315a40e36b1c319b74c91a9953c9dfe34.
2020-05-18 11:10:41 -05:00
cbornet
c0154f2315 Create the CSRF token on the bounded elactic scheduler
The CSRF token is created with a call to UUID.randomUUID which is blocking.
This change ensures this blocking call is done on the bounded elastic scheduler which supports blocking calls.

Fixes gh-8128
2020-05-18 11:07:08 -05:00
Artyom Tarynin
cea2b556d6 Update AntPathRequestMatcher.java
Fixes gh-8512
2020-05-14 10:36:30 -04:00
Dávid Kovács
faa02e8bc0 Document NoOpPasswordEncoder will not be removed
This commit adds extension to deprecation notice.

Fixes gh-8506
2020-05-13 12:56:22 -05:00
Rob Winch
d9f57492d4 Fix non-standard HTTP method for CsrfWebFilter
Closes gh-8452
2020-05-12 13:21:22 -05:00
Eleftheria Stein
b007fdc333 Next development version 2020-05-06 16:27:44 -04:00
Eleftheria Stein
16c350a7bc Release 5.1.10.RELEASE 5.1.10.RELEASE 2020-05-06 15:55:12 -04:00
Eleftheria Stein
6d6a22eda1 Update to org.powermock 2.0.7
Closes gh-8475
2020-05-06 09:23:32 -04:00
Eleftheria Stein
1e957e96b9 Update to Spring Data Lovelace-SR17
Closes gh-8474
2020-05-06 09:22:47 -04:00
Eleftheria Stein
9986a33177 Update to Reactor Californium-SR18
Closes gh-8473
2020-05-06 09:21:59 -04:00
Eleftheria Stein
ecf58c9549 Update to Spring Framework 5.1.15.RELEASE
Closes gh-8472
2020-05-06 09:21:22 -04:00
Eleftheria Stein
497ee84537 Update to GAE 1.9.80
Closes gh-8470
2020-05-06 09:20:39 -04:00
Eleftheria Stein
30a68b6c10 Clean up Javadoc
Fixes gh-8480
2020-05-05 17:34:29 -04:00
Rob Winch
aa118466e5 Add ROLE_INFRASTRUCTURE to infrastructure beans
Closes gh-8407
2020-04-27 09:19:58 -05:00
Dávid Kovács
f98db2d866 ActiveDirectoryLdapAuthenticationProvider uses InternalAuthenticationServiceException
Closes gh-2884
2020-04-24 10:25:09 -05:00
Souphorn
52af3998c8 Fix typo with correct capitalization
Closes gh-8406
2020-04-17 14:19:58 -04:00
Rob Winch
1b91259412 Logout defaults to use Global SecurityContextServerLogoutHandler
Closes gh-8375
2020-04-13 16:46:00 -05:00
Rob Winch
9d3ea58bb1 Fix example in javadoc of FilterChainProxy
Closes gh-8344
2020-04-08 09:14:32 -05:00
Alan Czajkowski
c2296b0376 BCryptPasswordEncoder rawPassword cannot be null
Closes gh-8317
2020-04-07 13:47:37 -05:00
hotire
24d251f232 Fix typo in Javadoc of ServerHttpSecurity#hasAuthority
Closes gh-8336
2020-04-06 14:20:57 -05:00
Eleftheria Stein
18610eab6f Fix HttpSecurity Javadoc
Fixes gh-4404
2020-04-02 11:50:13 -04:00
Eleftheria Stein
1964cfdfaa Next Development Version 2020-04-01 16:24:58 -04:00
Eleftheria Stein
0ae7ceef70 Release 5.1.9.RELEASE 5.1.9.RELEASE 2020-04-01 14:37:37 -04:00
Eleftheria Stein
b3c7f0a79f Update to httpclient 4.5.12
Fixes gh-8294
2020-04-01 11:19:49 -04:00
Eleftheria Stein
4df4f9a63d Update to hibernate-validator 6.0.19.Final
Fixes gh-8293
2020-04-01 11:19:09 -04:00
Eleftheria Stein
9d25c2d2f8 Update to reactive-streams 1.0.3
Fixes gh-8292
2020-04-01 11:18:35 -04:00
Eleftheria Stein
94b116c8c8 Update to hibernate-core 5.2.18.Final
Fixes gh-8291
2020-04-01 11:18:05 -04:00
Eleftheria Stein
3c6f08ede0 Update to groovy 2.4.19
Fixes gh-8290
2020-04-01 11:04:53 -04:00
Eleftheria Stein
9a94234dae Update to unboundid-ldapsdk 4.0.14
Fixes gh-8289
2020-04-01 11:03:25 -04:00
Eleftheria Stein
017044bf93 Update to okhttp 3.12.10
Fixes gh-8288
2020-04-01 11:02:52 -04:00
Eleftheria Stein
ae99097723 Update to mockwebserver 3.12.10
Fixes gh-8287
2020-04-01 11:01:53 -04:00
Eleftheria Stein
acb7e63cf7 Update to org.powermock 2.0.6
Fixes gh-8286
2020-04-01 11:01:12 -04:00
Eleftheria Stein
0256439a50 Update to Spring Boot 2.1.13.RELEASE
Fixes gh-8285
2020-04-01 11:00:28 -04:00
Eleftheria Stein
c8f72a1b87 Update to GAE 1.9.79
Fixes gh-8284
2020-04-01 11:00:00 -04:00
Eleftheria Stein
332e8ce07a Update to Spring Data Lovelace-SR16
Fixes gh-8282
2020-04-01 10:59:11 -04:00
Eleftheria Stein
7aea459535 Update to Reactor Californium-SR17
Fixes gh-8283
2020-04-01 10:58:44 -04:00
Eleftheria Stein
c91389ff8b Update to Spring Framework 5.1.14.RELEASE
Fixes gh-8281
2020-04-01 10:58:04 -04:00