7b07ef5ff3
Add Support JdbcUserCredentialRepository
...
Closes gh-16224
2024-12-20 16:54:51 -06:00
38523faaa0
Remove Unused loggers
...
Closes gh-16319
2024-12-20 16:51:38 -06:00
e9bdb5b96e
Polish SecurityFilterChain Validation
...
Issue gh-15982
2024-12-19 15:04:01 -07:00
1104b45832
Polish SessionLimit
...
- Move to the web.authentication.session package since it is only needed
by web.authentication.session elements and does not access any other web
element itself.
- Add Kotlin support
- Add documentation
Issue gh-16206
2024-12-18 18:32:28 -07:00
1864577e98
Address SessionLimitStrategy
...
Closes gh-16206
2024-12-18 18:32:12 -07:00
3eeb4317f6
Add setFavorRelativeUris
...
This places the new functionality behind a setting so that
we can remain passive until we can change the setting in
the next major release.
Issue gh-7273
2024-12-17 22:35:41 -07:00
7848b959da
Use relative URLs in /login redirects
...
Closes gh-7273
2024-12-17 22:35:41 -07:00
27c2a8ad11
Add Serializable Compatibility to Web Authentication Exceptions
...
Issue gh-16276
2024-12-17 13:05:23 -07:00
d7d5253607
Change attestation in PublicKeyCredentialCreationOptions to none
...
The attestation option in PublicKeyCredentialCreationOptions is a
parameter that controls whether to request attestation from the security key.
However, Spring Security Passkeys currently doesn't implement attestation verification.
Therefore, requesting attestation is unnecessary.
Specifying `direct` to request attestation may trigger browsers to
display additional privacy related dialog to users, so it is best to
avoid specifying `direct` unnecessarily.
2024-12-11 17:18:18 -06:00
cb4c7e5886
Merge branch '6.3.x'
...
Closes gh-16261
2024-12-11 15:48:18 -06:00
6a0b683e60
StrictFirewallHttpRequest.buid returns StrictFirewallHttpRequest
...
Closes gh-16069
2024-12-11 15:46:31 -06:00
4cbaabb239
Added Testing
...
Issue gh-16177
2024-12-10 14:09:46 -07:00
f565b23b51
Restore Method Parameter Inheritance Support
...
Closes gh-16177
2024-12-10 14:09:46 -07:00
d39e329234
Add @inheritDoc to sessionIdChanged method
...
Closes gh-16211
2024-12-05 12:31:47 -07:00
d3a95c5c1e
Merge branch '6.3.x'
2024-12-05 09:52:55 -07:00
0f85da77be
Merge branch '6.2.x' into 6.3.x
...
Closes gh-16219
2024-12-05 09:52:32 -07:00
96a9cf0d2d
Restore Previous Behavior for Servlet 5
...
Closes gh-16173
2024-12-05 09:52:06 -07:00
9c3b11914d
webauthn registerCredential returns transports
...
The webauthn support previously did not pass the transports to webauthn4j.
This meant that the result of
Webauthn4jRelyingPartyOperations.registerCredential did not have any
transports either.
This commit ensures that the transports are passed to the webauth4j lib
and then returned in the result of registerCredential.
Closes gh-16084
2024-12-04 15:22:26 -06:00
dc82a6e97e
Remove the cache since UniqueSecurityAnnotationScanner has cached annotations internally
2024-12-04 09:18:12 -07:00
46fe0124ba
Add RuntimeHints for webauthn Javascript resource
2024-11-25 13:06:50 -06:00
c2cfe92a02
Merge branch '6.3.x'
2024-11-18 05:16:16 -05:00
fa5fc6dd62
Fix checkstyle errors for toLower/toUpperCase usage
2024-11-18 04:56:17 -05:00
709103e38c
Merge branch '6.2.x' into 6.3.x
2024-11-18 04:45:38 -05:00
a8c4d6cead
Require Locale argument for toLower/toUpperCase usage
2024-11-18 04:22:26 -05:00
285d16b046
Polish IpAddressMatcher
...
(cherry picked from commit 83a79159b8
2024-11-15 10:17:39 -06:00
ddf4542a9e
Add hasText assertion to IpAddressMatcher constructor
...
Issue gh-15527
(cherry picked from commit 3a29819651
2024-11-15 10:17:39 -06:00
554df6fab6
Fix NPE in IpAddressMatcher
...
Closes gh-15527
(cherry picked from commit 52de894c3c
2024-11-15 10:17:38 -06:00
83a79159b8
Polish IpAddressMatcher
2024-11-15 09:33:31 -06:00
3a29819651
Add hasText assertion to IpAddressMatcher constructor
...
Issue gh-15527
2024-11-15 09:33:31 -06:00
52de894c3c
Fix NPE in IpAddressMatcher
...
Closes gh-15527
2024-11-15 09:33:30 -06:00
a1526361b6
webauthn: introduce DefaultResourcesFilter#webauthn
2024-11-14 12:11:43 -06:00
8f1c892fb7
Remove unnecessary parentheses and add static final field
2024-11-13 15:06:58 -06:00
055ec57737
Fix not exist class in WebFilterChainProxy java doc
2024-11-07 13:03:49 -07:00
f46e56de78
Improve Error Message for Conflicting Filter Chains
...
Closes gh-15874
2024-11-07 13:01:16 -07:00
571c7c81a4
Fix typo
2024-11-04 10:23:38 -06:00
ab93541926
Simplify condition in some methods
2024-10-25 13:42:33 -07:00
e76de931ce
Polish Optional usage
2024-10-25 13:42:33 -07:00
ffed4ea1dc
Polish diamond usage
2024-10-25 13:42:33 -07:00
981fbd5c2c
Polish Tests
...
Closes gh-14768
2024-10-24 20:51:34 -07:00
6dbbe89b83
Merge remote-tracking branch 'origin/6.3.x'
2024-10-24 21:48:10 -06:00
308e408b13
Polish DelegatingAuthenticationConverter
2024-10-24 20:47:46 -07:00
cf03f2fed9
Merge branch '6.3.x'
2024-10-24 11:57:13 -06:00
5048a68ab7
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15986
2024-10-24 11:56:41 -06:00
addc7c53b2
Merge branch '5.8.x' into 6.2.x
...
Closes gh-15985
2024-10-24 11:56:16 -06:00
1399a82ea9
Return Null Request When Cookie Is Malformed
...
Closes gh-15905
2024-10-24 10:55:36 -07:00
fc5719d8d6
Merge branch '6.3.x'
...
Add Firewall for WebFlux
Closes gh-15967
2024-10-21 12:11:42 -05:00
ec38848b20
Fix invalid windows character
2024-10-21 11:34:56 -04:00
1528c421bd
Merge branch '6.2.x' into 6.3.x
...
Add Firewall for WebFlux
Closes gh-15967
2024-10-21 09:43:48 -05:00
0e257b56ce
Add Firewall for WebFlux
...
Closes gh-15967
2024-10-21 09:42:24 -05:00
542071b1f8
Merge Add Firewall for WebFlux
...
Closes gh-15967
2024-10-21 08:56:42 -05:00
Max Batischev
Josh Cummings
Claudenir Machado
Michal Okosy
Yoshikazu Nojima
Rob Winch
DingHao
12OneTwo12
Daniel Garnier-Moiroux
Joe Grandja
Steve Riesenberg
nomoreFt
Josh Cummings
Tran Ngoc Nhan