Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
15,948 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

2631 Commits

Author SHA1 Message Date
Josh Cummings d50698a269
Prepare for Spring Security 6.3 
Closes gh-14210
 2023-12-05 15:49:42 -07:00
Josh Cummings 3ab235cd56
Merge branch '6.1.x' 2023-12-01 15:54:44 -07:00
Josh Cummings 641722823e
Merge branch '6.0.x' into 6.1.x 2023-12-01 15:45:32 -07:00
Josh Cummings f536b2652f
Merge branch '5.8.x' into 6.0.x 2023-12-01 15:45:03 -07:00
Josh Cummings c623303ca5
Add Logging 
Now if the ServletRegistration API available message is shown, it will
also be accompanied with a startup warning in the logs.

Closes gh-14221
 2023-12-01 12:57:46 -07:00
Josh Cummings a98baa7522
Polish ServletRegistration API Deferral 
Tomcat uses different ServletContext instances from startup- and request-time.
This commit ensures that if the programmatic API isn't available at startup-time,
then use the ServletContext attached to the HttpServletRequest at runtime.

Issue gh-13794
 2023-12-01 12:57:45 -07:00
Josh Cummings 15d9b7824c
Merge branch '6.1.x' 2023-11-17 12:27:31 -07:00
Josh Cummings d958787561
Merge branch '6.0.x' into 6.1.x 2023-11-17 12:27:04 -07:00
Josh Cummings 12f074b8ce
Merge branch '5.8.x' into 6.0.x 2023-11-17 12:25:13 -07:00
Josh Cummings d961307044
Polish RequestMatcher Description 
Issue gh-13794
 2023-11-17 12:24:38 -07:00
Josh Cummings 4131a38f9e
Revert "Add forServletPattern" 
This reverts commit 762319b6be.
 2023-11-17 12:02:14 -07:00
Josh Cummings 5958828113
Merge branch '6.1.x' 2023-11-17 12:01:57 -07:00
Josh Cummings aa1a022605
Merge branch '6.0.x' into 6.1.x 
Closes gh-14165
 2023-11-17 11:46:20 -07:00
Josh Cummings c6c6eb4d66
Merge branch '5.8.x' into 6.0.x 
Closes gh-14164
 2023-11-17 11:45:59 -07:00
Josh Cummings 4ca54683ae
Defer requestMatchers Validation to Runtime 
Closes gh-13794
 2023-11-17 11:23:21 -07:00
Marcus Hert Da Coregio 00da9c9092 Use assertj assertions 2023-11-17 09:05:38 -03:00
Marcus Hert Da Coregio e3ab1c94d7 Use assertj assertions 2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio a7da9491d9 Use assertj assertions 2023-11-17 09:03:36 -03:00
Josh Cummings 97516727a4
Add Coroutine Support 
Closes gh-12080
 2023-11-15 11:48:37 -07:00
Steve Riesenberg 77acaaa3b7
Use bean factory method 
Closes gh-14094
 2023-11-06 12:55:57 -06:00
Josh Cummings 624dcafcf2
Merge branch '6.0.x' into 6.1.x 
Closes gh-14085
 2023-11-01 12:12:02 -06:00
Josh Cummings fa15c975ff
Merge branch '5.8.x' into 6.0.x 
Closes gh-14084
 2023-11-01 12:11:20 -06:00
Josh Cummings ffd12ee3b9
Refine requestMatcher Validation Rules 
Closes gh-14078
 2023-10-31 17:08:24 -06:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Josh Cummings 96ebab324c
Remove Type Parameter 
Closes gh-14012
 2023-10-13 22:09:16 -06:00
Josh Cummings 8f829dd1d7 Refine requestMatcher Validation Rules 
Closes gh-13850
 2023-10-12 09:29:08 -06:00
Josh Cummings 762319b6be Add forServletPattern 
Closes gh-13562
 2023-10-12 09:29:08 -06:00
Marcus Da Coregio 07b6c451fd Merge branch '6.1.x' 
Closes gh-13884
 2023-09-29 11:47:38 -03:00
Marcus Da Coregio 8adfc9b463 Merge branch '6.0.x' into 6.1.x 
Closes gh-13883
 2023-09-29 11:46:48 -03:00
Marcus Da Coregio 92c82191c9 Merge branch '5.8.x' into 6.0.x 
Closes gh-13882
 2023-09-29 11:46:00 -03:00
Marcus Da Coregio 64e2a2ff8b Apply updated Code Style 
Closes gh-13881
 2023-09-29 11:44:32 -03:00
Steve Riesenberg ff374935fb
Verify ReactorContext when using Virtual Threads 
Closes gh-12791
 2023-09-25 12:01:31 -05:00
Steve Riesenberg d48b8697bd
Fix mockito usage 
Issue gh-13810
 2023-09-19 10:39:04 -05:00
Steve Riesenberg d6ff58bb7f
Update Mockito to 5.5.0 
Closes gh-13810
 2023-09-19 10:39:03 -05:00
Marcus Da Coregio 0e8d04ab40 Merge branch '6.1.x' 2023-09-19 14:20:25 +01:00
Marcus Da Coregio 94bba79834 Merge branch '6.0.x' into 6.1.x 2023-09-19 14:20:17 +01:00
Marcus Da Coregio 0c3f154f38 Merge branch '5.8.x' into 6.0.x 2023-09-19 14:20:01 +01:00
Eric Haag ac04c2e675 Add dependency between rncToXsd and sourcesJar 
Since processResources is configured directly instead of via the source
set container, an explicit dependency task between rncToXsd and
sourcesJar must be defined.

Issue gh-13845
 2023-09-19 14:19:45 +01:00
Eric Haag e63d7fd9e9 Add dependency between rncToXsd and versionlessXsd 
Since processResources is configured directly instead of via the source
set container, an explicit dependency task between rncToXsd and
versionlessXsd must be defined.

Issue gh-13845
 2023-09-19 14:19:33 +01:00
Eric Haag 718c470910 Prevent creating duplicate .xsd entries 
This change removes .xsd entries that would appear in the top level of
the assembled artifacts. This occurred because the output of the
rncToXsd task does not consider the path beneath the resources
directory. To fix this, the processResources task is directly
configured with a copy spec so the required path can be set.

Issue gh-13845
 2023-09-19 14:19:19 +01:00
Josh Cummings cb33fd7850
Add OIDC Back-Channel Logout Support 
Closes gh-12570
 2023-09-16 15:12:21 -06:00
Rob Winch 91c89451e7 Merge branch '6.1.x' 
Automate spring-security.xsd

Closes gh-13826
 2023-09-14 23:44:34 -05:00
Rob Winch 7627c2df46 Merge branch '6.0.x' into 6.1.x 
Automate spring-security.xsd

Closes gh-13825
 2023-09-14 23:43:27 -05:00
Rob Winch 342735043d Merge branch '5.8.x' into 6.0.x 
Automate spring-security.xsd

Closes gh-13824
 2023-09-14 23:42:31 -05:00
Rob Winch 779541b340 Merge branch '5.7.x' into 5.8.x 
Automate spring-security.xsd

Closes gh-13823
 2023-09-14 23:37:53 -05:00
Rob Winch 5b293d2116 Automate spring-security.xsd 
Closes gh-13819
 2023-09-14 16:01:50 -05:00
Marcus Da Coregio 9a06885247 Merge branch '6.1.x' 
Closes gh-13815
 2023-09-14 14:50:11 +01:00
Marcus Da Coregio 59a9aa3268 Merge branch '6.0.x' into 6.1.x 
Closes gh-13814
 2023-09-14 14:49:29 +01:00
Marcus Da Coregio aeafcc1377 Defer MethodSecurityExpressionHandler Resolution 
When using Spring Security ACL and compiling to Native, in order to create the '*AuthorizationMethodInterceptor' Proxy beans during build time, Spring tries to resolve the DataSource bean since the DataSource can be a dependency of some AclService implementations, and fails because some required data source properties are not available during build time.

This commit defers the initialization of the MethodSecurityExpressionHandler to the runtime.

Closes gh-12653
 2023-09-14 14:48:24 +01:00
Marcus Da Coregio f5942aac73 Merge branch '6.1.x' 2023-09-13 14:23:51 +01:00
Marcus Da Coregio b4ce77c028 Merge branch '6.0.x' into 6.1.x 2023-09-13 14:23:28 +01:00
Marcus Da Coregio 48babb7efa Merge branch '5.8.x' into 6.0.x 2023-09-13 14:23:01 +01:00
Eric Haag 620e6e0c34 Add rncToXsd task to resources set 
This addresses a deprecation warning causing build caching to be
disabled for some tasks. With this change, we tell Gradle that the
rncToXsd task produces output that should be considered a resource.
This clears up ambiguities when computing the task graph.
 2023-09-13 13:58:42 +01:00
Eric Haag 4ebfa2c804 Use lazy API to configure rncToXsd task 
This avoids configuring the task eagerly.
 2023-09-13 13:58:05 +01:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices 
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-09-12 16:18:14 -06:00
Steve Riesenberg 92256f0522 Support nested suspend calls for Kotlin coroutines 
Closes gh-13764
 2023-09-05 00:23:30 -05:00
Steve Riesenberg 1a45602dbb
Fix mockito usage 2023-09-01 15:27:54 -05:00
Steve Riesenberg ea1ec646b2
Fix test failures related to response headers 
These tests began failing on snapshots after changes in
Spring Framework's `DispatcherServlet` to reset the response
on an error.

For now, we can have these tests operate with a 200 OK response.
An issue was opened in the spring-framework issuer tracker to
discuss this and address `CorsFilter` (and any other filter) that
writes headers that would be cleared on an error.

See spring-projects/spring-framework#31154
 2023-09-01 15:27:54 -05:00
Josh Cummings fe5a55fc13
Merge branch '6.1.x' 
Closes gh-13723
 2023-08-20 23:15:57 -06:00
Josh Cummings 0df1884372
Merge branch '6.0.x' into 6.1.x 
Closes gh-13722
 2023-08-20 23:10:00 -06:00
Josh Cummings 5fb6f5768c
Merge branch '5.8.x' into 6.0.x 
Closes gh-13666 in 6.0.x
Closes gh-13721
 2023-08-20 23:07:36 -06:00
Josh Cummings 28f98b3351
Improve Error Message 
Closes gh-13667
 2023-08-20 22:53:57 -06:00
Josh Cummings ed96e2cddf
Ignore Unmappable Servlets 
Closes gh-13666
 2023-08-20 22:53:55 -06:00
Josh Cummings 8d58113b61
Merge branch '6.1.x' 
Closes gh-13656
 2023-08-16 17:54:55 -06:00
Josh Cummings d2d1f19133
Merge branch '6.0.x' into 6.1.x 
Closes gh-13655
 2023-08-16 17:54:37 -06:00
Josh Cummings ca0140c586
saml2Login Honors AuthenticationProvider bean 
Closes gh-13654
 2023-08-16 17:54:14 -06:00
Josh Cummings 3ba5cc0e40
Add CSRF Exception 
Issue gh-13653
 2023-08-16 16:54:50 -06:00
Josh Cummings 87ae2d41b3
Update Mockito Usage 
Issue gh-13542
 2023-08-16 16:30:43 -06:00
Steve Riesenberg 985e569685
Polish gh-13608 2023-08-10 17:30:54 -05:00
Olivier Vanekem 6353d90047
Add integrity attribute for signin.css 
Closes gh-13486
 2023-08-10 17:30:52 -05:00
Steve Riesenberg 5828e4e65c Simplify OAuth2 Client configuration 
Issue gh-11783
 2023-08-09 14:14:09 -05:00
Joe Grandja f3d90b38e2 Add OAuth2AuthorizedClientManager Registrar 2023-08-09 14:14:09 -05:00
Josh Cummings 75e0068925
Merge branch '6.1.x' 2023-08-07 16:03:55 -06:00
Josh Cummings 8d4a024809
Update Copyright 
PR gh-13472
 2023-08-07 16:00:56 -06:00
Seongguk Jeong cd6f33c03e Using putIfAbsent instead of put 2023-08-07 16:00:18 -06:00
Rob Winch 12c64a9b1d Merge branch '6.1.x' 
Dependencies are resolved from appropriate repositories

Closes gh-13624
 2023-08-07 09:55:18 -05:00
Rob Winch d4d715d8e1 Merge branch '6.0.x' into 6.1.x 
Dependencies are resolved from appropriate repositories

Closes gh-13623
 2023-08-07 09:54:27 -05:00
Rob Winch 4257a97504 Merge branch '5.8.x' into 6.0.x 
Dependencies are resolved from appropriate repositories

Closes gh-13622
 2023-08-07 09:51:55 -05:00
Eric Haag 30bc2634d7 Optimize configuration of project repositories 
This change applies repository content filtering to configured
repositories, reducing the time spent during dependency resolution.

This fixes an issue where requests for 'org.opensaml',
'net.shibboleth.utilities' and 'net.minidev' dependencies were being
made in the Spring releases repositories, resulting in many failed
requests during dependency resolution and increased resolution times.

Closes gh-13582
 2023-08-07 09:51:42 -05:00
Josh Cummings 33d904d708
Merge branch '6.1.x' 
Closes gh-13581
 2023-07-24 11:32:23 -06:00
Josh Cummings 442d3fb99d
Merge branch '6.0.x' into 6.1.x 
Closes gh-13580
 2023-07-24 11:31:52 -06:00
Josh Cummings ee13216882
Merge branch '5.8.x' into 6.0.x 
Closes gh-13579
 2023-07-24 11:31:29 -06:00
Josh Cummings c4f061c63d
Do Not Re-register Method Security Advisors 
Closes gh-13572
 2023-07-24 11:24:03 -06:00
Josh Cummings 9dc7bdd329
Merge branch '6.1.x' 2023-07-17 11:21:06 -06:00
Josh Cummings cf2c8da3d5
Merge branch '6.0.x' into 6.1.x 2023-07-17 11:10:04 -06:00
Josh Cummings fe7bee9236
Merge branch '5.8.x' into 6.0.x 2023-07-17 11:09:38 -06:00
Josh Cummings bb46a54270
Add DispatcherServlet to Tests 
Issue gh-13551
 2023-07-17 10:58:30 -06:00
Josh Cummings df239b6448
Improve RequestMatcher Validation 
Closes gh-13551
 2023-07-17 08:41:30 -06:00
Marcus Da Coregio 8f5793afb1 Merge branch '6.1.x' 2023-07-17 09:17:10 -03:00
Marcus Da Coregio aaa31312bd Merge branch '6.0.x' into 6.1.x 2023-07-17 09:16:45 -03:00
Marcus Da Coregio cbef118026 Merge branch '5.8.x' into 6.0.x 2023-07-17 09:16:20 -03:00
Marcus Da Coregio a939f17890 Merge branch '5.7.x' into 5.8.x 2023-07-17 09:15:56 -03:00
Marcus Da Coregio fe9bc26bdc Merge branch '5.6.x' into 5.7.x 2023-07-17 09:13:28 -03:00
Marcus Da Coregio 7813a9ba26 Use default PathPatternParser instance 2023-07-17 09:12:28 -03:00
Josh Cummings b3ad2b0dc5
Don't Mock OAuth2AuthorizedClientRepository 
Issue gh-13542
Issue gh-13546
 2023-07-14 18:44:35 -06:00
Josh Cummings b0022a0ae8
Update Mockito Usage 
Issue gh-13542
 2023-07-14 18:44:34 -06:00
Josh Cummings cf79af2386
Update Kotlin Test Usage 
Issue gh-13539
 2023-07-14 18:38:58 -06:00
Josh Cummings 6c3636d780
Update Removed Usages 
Issue gh-13544
 2023-07-14 18:38:58 -06:00
Marcus Da Coregio 30d09c5192 Merge branch '6.1.x' 
Closes gh-13495
 2023-07-12 14:31:56 -03:00
Marcus Da Coregio f62c9d3be6 Merge branch '6.0.x' into 6.1.x 
Closes gh-13494
 2023-07-12 14:31:45 -03:00
Marcus Da Coregio 933b302979 Fix once-per-request="true" not taking any effect 
Closes gh-13491
 2023-07-12 14:30:18 -03:00
Josh Cummings 8d0e426654
Generate Shared Test SAML Response 
Issue gh-13433
 2023-07-11 10:36:06 -06:00
Josh Cummings f2f19270da
Update to OpenSAML 4.3.0 
Closes gh-13433
 2023-07-10 17:56:42 -06:00
Marcus Da Coregio a0540f5c65 Deprecate AbstractConfiguredSecurityBuilder#apply 
Closes gh-13436
 2023-06-30 11:53:47 -03:00
Marcus Da Coregio 1ff5eb6b57 Add with() method to apply SecurityConfigurerAdapter 
This method is intended to replace .apply() because it will not be possible to chain configurations when .and() gets removed

Closes gh-13204
 2023-06-29 14:52:30 -03:00
Josh Cummings 4855290a76
Merge branch '6.1.x' 2023-06-29 10:31:25 -06:00
Josh Cummings 87e07d59da
Merge branch '6.0.x' into 6.1.x 
Closes gh-13199
 2023-06-29 10:08:10 -06:00
Josh Cummings 1abfd2c801
Only Register as Advisor in Proxy Mode 
Now that https://github.com/spring-projects/spring-framework/issues/30689
is addressed.

Closes gh-13198
 2023-06-29 10:07:11 -06:00
Marcus Da Coregio 618847418f Automatically enable .cors() if CorsConfigurationSource bean is present 
Closes gh-5011
 2023-06-23 09:51:46 -03:00
Claudio Nave 52e12ad64b Replace deprecated methods 2023-06-22 13:19:55 -06:00
Marcus Da Coregio 8efdc5c926 Polish Contribution 
Issue gh-13215
 2023-06-22 16:00:47 -03:00
kandaguru17 401058d5ff Implemented AuthorizeHttpRequestsConfigurer to consider GrantedAuthorityDefaults for custom rolePrefix 
Closes gh-13215
 2023-06-22 16:00:46 -03:00
Evgeniy Cheban c5461b17de EnableMethodSecurity annotation does not get imported when defined as a meta-annotation 
Closes gh-12870
 2023-06-22 15:15:25 -03:00
Josh Cummings 208fb62db9 Update Deprecated Usage 
Issue gh-12629
 2023-06-22 11:24:25 -06:00
Krzysztof Krason 9b603b99ab Using modern Java features 2023-06-22 11:24:25 -06:00
Kandaguru17 7e01ebdd92 Remove LazyCsrfTokenRepository usage 
Closes gh-13194
 2023-06-22 11:23:35 -06:00
Josh Cummings fb910e2997
Prepare for Spring Security 6.2 
Closes gh-14316
 2023-06-22 11:03:28 -06:00
Marcus Da Coregio acf1d34d94 Merge branch '6.0.x' 2023-06-19 11:13:57 -03:00
Marcus Da Coregio 2686af0c4d Revert "Only Register as Advisor in Proxy Mode" 
This reverts commit 35ad1f85
 2023-06-19 11:13:39 -03:00
Josh Cummings fc1e465fd0
Merge branch '6.0.x' 2023-06-05 13:34:58 -06:00
Janne Valkealahti c053f6f0c6 Make eclipse/vscode project import work 
- Gradle projects contain cycles which comes from dependencies to
  test sources which is not a problem in gradle but eclipse metadata
  generation is getting confused. Thus we need settings to relax errors
  org.eclipse.jdt.core.circularClasspath=warning
  org.eclipse.jdt.core.incompleteClasspath=warning
- Additionally .classpath entries needs to be changes having
  without_test_code=false
  test=false
- Aspects end up getting source dirs `build/classes/java/main`
  and `build/resources/main` which never have sources. Vscode complains
  about that, eclipse is fine. Remove those from entries.
- In tests `htmlunit` depends on `xml-apis`. `xml-apis` are now part
  of jdk and eclipse complains about that. Excluse these in a gradle build.
- Both eclipse and vscode don't currently work with buildship, due to
  project cycles and buildship cannot be configured. It's possible to
  create metadata from `eclipse` task manually which then can be imported.
  For this we need to disable automatic import in vscode using buildship.
  This goes to `.vscode/settings.json` workspace config.
- Then with these changes user can do something like
  git clean -fxd && ./gradlew clean build cleanEclipse eclipse -x checkstyleNohttp -x test -x integrationTest
  and import projects manually.
 2023-06-05 13:34:30 -06:00
Marcus Da Coregio a939fa63a1 Merge branch '6.0.x' 
Closes gh-13282
 2023-06-05 16:04:27 -03:00
Marcus Da Coregio 4e3517e03a Merge branch '5.8.x' into 6.0.x 
Closes gh-13281
 2023-06-05 16:03:58 -03:00
Marcus Da Coregio b47420f8a2 Merge branch '5.7.x' into 5.8.x 
Closes gh-13280
 2023-06-05 16:02:30 -03:00
Marcus Da Coregio 7250abc185 Does not apply a Configurer when disabled from another DSL 
Closes gh-13203
 2023-06-05 16:01:20 -03:00
Marcus Da Coregio 537e10cf9c Improve javadoc adding how to stick with defaults and link to documentation 
Closes gh-13273
 2023-06-02 15:05:17 -03:00
Josh Cummings f566ed0afd
Update Symlink for 6.1 
Issue gh-13131
 2023-05-24 14:44:42 -06:00
Josh Cummings ff0c82b019
Merge branch '6.0.x' 2023-05-24 14:41:55 -06:00
Josh Cummings 71703dc371
Update Symlink for 6.0 
Issue gh-13131
 2023-05-24 14:40:50 -06:00
Josh Cummings 90b37d6d07
Merge branch '5.8.x' into 6.0.x 2023-05-24 14:38:23 -06:00
Josh Cummings 73cb9862ad
Update Symlink for 5.8 
Issue gh-13131
 2023-05-24 14:37:18 -06:00
Josh Cummings be409ada10
Merge branch '6.0.x' 
Closes gh-13209
 2023-05-22 15:43:43 -06:00
Josh Cummings 7c54c0e4fa
Merge branch '5.8.x' into 6.0.x 
Closes gh-13208
 2023-05-22 15:43:27 -06:00
Josh Cummings 62ede47d86
Merge branch '5.7.x' into 5.8.x 
Closes gh-13207
 2023-05-22 15:42:36 -06:00
Josh Cummings 1eefd433b6
Add spring-security.xsd symlink 
Closes gh-13131
 2023-05-22 15:42:02 -06:00
Josh Cummings 31f1604f66
Merge branch '6.0.x' 
Closes gh-13199
 2023-05-19 16:44:18 -06:00
Josh Cummings 7efa275abc
Merge branch '5.8.x' into 6.0.x 
Closes gh-13198
 2023-05-19 16:43:57 -06:00
Josh Cummings 35ad1f857e
Only Register as Advisor in Proxy Mode 
Closes gh-13160
 2023-05-19 16:33:46 -06:00
Josh Cummings 49366907e2
Merge branch '6.0.x' 
Closes gh-13183
 2023-05-15 17:31:48 -06:00
Josh Cummings b438bc5384
Merge branch '5.8.x' into 6.0.x 
Closes gh-13182
 2023-05-15 17:30:14 -06:00
lukasz.migdalek f4915890cc
Use Spec Order for Verifying Signatures 
Closes gh-12346
 2023-05-15 17:24:22 -06:00
Josh Cummings 5814f614c7
Merge branch '6.0.x' 
Closes gh-13128
 2023-05-02 16:56:37 -06:00
Josh Cummings 46ad9c122e
Merge branch '5.8.x' into 6.0.x 
Closes gh-13127
 2023-05-02 16:56:06 -06:00
Josh Cummings e9a02bc6e9
RememberMeConfigurer Picks Up SecurityContextRepository 
Closes gh-13104
 2023-05-02 16:46:35 -06:00
Marcus Da Coregio 45efd48b93 Merge branch '6.0.x' 
Closes gh-13122
 2023-05-02 10:13:24 -03:00
Marcus Da Coregio 69338ecdfa Only Observe AuthenticationManager if it is not null 
Closes gh-13084
 2023-05-02 10:12:46 -03:00
SeasonPan a44e91d044 fix javadoc typo 2023-04-24 16:41:17 -06:00
Josh Cummings f261242db1
Merge branch '5.7.x' into 5.8.x 2023-04-24 16:33:29 -06:00
Ruslan Stelmachenko caa4093619 Fix javadoc for migration from WebSecurityConfigurerAdapter 2023-04-24 16:32:16 -06:00
Josh Cummings dd14bbb365
Merge branch '6.0.x' 2023-04-18 12:42:55 -06:00
Josh Cummings 1e25756ee6
Fix Import Order 2023-04-18 12:42:25 -06:00
Josh Cummings 68b198f091
Merge branch '6.0.x' 2023-04-18 12:20:44 -06:00
Josh Cummings 64542b4059
Polish X509 SecurityContextRepository 
Like Basic and Bearer authentication, X509 is
stateless by default. As such, it is better to not
pick up the global SecurityContextRepository bean.

The better fix is to change the default from
HttpSessionSecurityContextRepository to
RequestAttributeSecurityContextRepository.

Issue gh-13008
 2023-04-18 12:18:20 -06:00
Josh Cummings c79f04cd11
Merge branch '6.0.x' 
Closes gh-13063
 2023-04-17 17:07:32 -06:00
Josh Cummings c3479ddb45
Pick Up SecurityContextRepository 
Closes gh-13008
 2023-04-17 17:06:06 -06:00
Marcus Da Coregio 04b3d07319 Merge branch '6.0.x' 2023-04-17 07:30:54 -03:00
Marcus Da Coregio a484044591 Merge branch '5.8.x' into 6.0.x 2023-04-17 07:29:42 -03:00
Marcus Da Coregio 6cf8c53aaa Merge branch '5.7.x' into 5.8.x 2023-04-17 07:16:47 -03:00
Marcus Da Coregio 2d52fb8e4b Clear Repository on Logout 2023-04-17 06:47:57 -03:00
Marcus Da Coregio 82a149207d Deprecate .and() and non lambda DSL methods 
Closes gh-12629
 2023-04-14 15:50:58 -03:00
Marcus Da Coregio 1a4a2a9055 Merge branch '5.8.x' into 6.0.x 2023-04-14 13:32:10 -03:00
Marcus Da Coregio 54117d7d27 Fix test suffix to align with checkstyle 2023-04-14 13:29:15 -03:00
Marcus Da Coregio 01d1e20dc3 Deprecate shouldFilterAllDispatcherTypes 
Closes gh-12138
 2023-04-13 15:05:10 -03:00
Marcus Da Coregio 57e134cc5f Merge branch '6.0.x' 2023-03-22 10:12:28 -03:00
Marcus Da Coregio 67645b32f4 Merge branch '5.8.x' into 6.0.x 2023-03-22 10:12:11 -03:00
Marcus Da Coregio fd65dc6756 Merge branch '5.7.x' into 5.8.x 2023-03-22 10:08:17 -03:00
Martin Tarjányi 5eefe9dcff Fix typo in SessionManagementConfigurer javadoc 2023-03-22 10:07:44 -03:00
Josh Cummings ca9139b68f
Merge branch '6.0.x' 2023-03-20 17:02:15 -06:00
twosom cbb4e40166 fix typo in RequestCacheResultMatcher 2023-03-20 17:02:00 -06:00
Josh Cummings a4bc0a6f3c Polish 
- Add POST /login assertion
- Rearrange test and config class

Issue gh-12552
 2023-03-20 14:31:13 -06:00
Clayton Walker e2332d9620 Add disable to FormLoginDsl 
Closes gh-12552
 2023-03-20 14:31:13 -06:00
Josh Cummings a7562ad950
Update io.spring.javaformat to 0.0.38 
Closes gh-12891
 2023-03-20 10:44:35 -06:00
Josh Cummings 3ad6c6ce06 Use EntityId-lookup Components 
Closes gh-12880
 2023-03-17 18:00:02 -06:00
Josh Cummings 46452c0cae Add saml2Metadata 
Closes gh-11828
 2023-03-17 18:00:02 -06:00
hdeadman e0284a4503 Fix CAS packages for 4.0.1 and Jasig references 
Issue gh-11674
 2023-03-01 17:21:24 -03:00
hdeadman b4d3ac6665 Revert "Remove CAS module" 
This reverts commit caf4c471
 2023-03-01 17:21:23 -03:00
Josh Cummings f5a4b520d1
Merge branch '6.0.x' 
Closes gh-12781
 2023-02-24 11:04:03 -07:00
Josh Cummings bbd31f0e33
Defer ObservationRegistry Lookup 
Closes gh-12780
 2023-02-24 11:03:32 -07:00
Marcus Da Coregio 963a18a27f Merge branch '6.0.x' 
Closes gh-12778
 2023-02-23 15:17:47 -03:00
Marcus Da Coregio 7d22e02593 Merge branch '5.8.x' into 6.0.x 
Closes gh-12777
 2023-02-23 15:17:25 -03:00
Marcus Da Coregio 97ba596ca3 Merge branch '5.7.x' into 5.8.x 
Closes gh-12776
 2023-02-23 15:17:04 -03:00
Marcus Da Coregio 1c3ce1e401 Fix entity-id ignored in RelyingPartyRegistration XML config 
Closes gh-11898
 2023-02-23 15:16:40 -03:00
Josh Cummings afb5a4ae2c
Merge branch '6.0.x' 
Closes gh-12688
 2023-02-16 14:56:55 -07:00
Josh Cummings cedb9fd199
Merge branch '5.8.x' into 6.0.x 
Closes gh-12687
 2023-02-16 14:56:32 -07:00
Josh Cummings 0baf650f38
Merge branch '5.7.x' into 5.8.x 
Closes gh-12686
 2023-02-16 14:55:22 -07:00
Leonid Rozenblyum 000b4bc495 Fix NPE in HttpSecurity#addFilterBefore, HttpSecurity#addFilterAfter 
Before the fix, these methods would throw a NPE in case when the filter class passed as the second parameter, is not registered yet.

In particular, this exception can occur when mixing standard and custom DSL to register filters.

The fix doesn't change the situation that standard DSL for registration of filters cannot refer to filters that are registered via custom DSL even though those calls were done earlier.

It just provides more user-friendly error handling for this and most likely other scenarios of calls of HttpSecurity#addFilterBefore, HttpSecurity#addFilterAfter.

The error handling is implemented similarly to HttpSecurity#addFilter.

Closes gh-12637
 2023-02-16 14:54:44 -07:00
twosom cef13a6a16 Fix Javadoc Type Parameter 2023-02-15 15:31:09 -07:00
twosom c79dac49ca Fix Typo 2023-02-15 15:31:09 -07:00
Josh Cummings d91837eadc
Merge branch '6.0.x' 
Closes gh-12641
 2023-02-07 12:46:42 -07:00
Tobias Meurer 7dd5cc6082 Pick Up Custom SecurityContextRespository 
Closes gh-12579
 2023-02-07 12:46:12 -07:00
twosom c66370c092 Update javadoc in EnableWebSecurity 2023-02-07 12:45:23 -07:00
Marcus Da Coregio eb35d3055f Merge branch '6.0.x' 
Closes gh-12640
 2023-02-07 09:25:33 -03:00
Marcus Da Coregio 52ed165476 Move classpath checks to class member variable 
Closes gh-11437
 2023-02-07 09:25:06 -03:00
Marcus Da Coregio da28a426f2 Merge branch '6.0.x' 
Closes gh-12625
 2023-02-03 14:35:08 -03:00
Marcus Da Coregio 3572111cf5 Add JwtDecoder hint for oauth2Login 
Closes gh-12615
 2023-02-03 14:34:32 -03:00
Evgeniy Cheban 59829321a8
Allow configuring SecurityContextRepository for BasicAuthenticationFilter 
Closes gh-12031
 2023-02-03 10:09:16 -06:00
Steve Riesenberg 6abbdd3654
Merge branch '6.0.x' 2023-01-26 15:55:41 -06:00
Steve Riesenberg 13487be268
Default to XorCsrfChannelInterceptor in 6.0.x 
Closes gh-12378
 2023-01-26 15:45:04 -06:00
Steve Riesenberg 1363a4eece
Merge branch '5.8.x' into 6.0.x 2023-01-26 15:44:47 -06:00