Daniel Garnier-Moiroux
7e41785dfc
Remove trailing spaces in default UIs
...
- Default UIs had blank lines with only spaces. These get deleted by the
spring-javaformat plugin. In order to avoid this behavior, an extra \s
had been inserted in the tests. The reason for those \s is not obvious.
- This commit cleans up the \s but changing the HTML templates.
2024-09-11 10:44:45 -07:00
Daniel Garnier-Moiroux
98975a9b83
Add runtime hints for CSS resource
2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux
c1b9035544
Use static CSS in OneTimeToken default UI
2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux
e958ff2d4a
Use static CSS in reactive default UI
2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux
45d53973ab
Serve static content (css, js) for reactive default UIs from DefaultResourcesWebFilter
2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux
11616a1d78
Use static CSS in servlet default UI
2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux
c5c5cd5ed0
Serve static content (css, js) for default UIs from DefaultResourcesFilter
2024-09-10 12:46:13 -07:00
Daniel Garnier-Moiroux
4660e042d9
Remove unused <script> and <noscript> tags in One-Time-Token submit page
2024-09-06 09:13:30 -03:00
Daniel Garnier-Moiroux
528d739a60
Use contextPath in One-Time-Token default submit UI
2024-09-06 09:13:30 -03:00
Daniel Garnier-Moiroux
ef31ae1a98
Render One Time Token UIs using lightweight templates
2024-09-05 15:02:42 -07:00
Daniel Garnier-Moiroux
a642a1bb66
Render reactive default UIs using lightweight templates
2024-09-05 15:02:42 -07:00
Daniel Garnier-Moiroux
8d47906191
Render default UIs using lightweight templates
2024-09-05 15:02:42 -07:00
Daniel Garnier-Moiroux
33495441b5
Hardcode ott-username input name in DefaultLoginPageGeneratingFilter
...
- GenerateOneTimeTokenFilter uses `"username"`, the default UI should use the same parameter name
2024-09-05 09:42:45 -03:00
Marcus Hert Da Coregio
00e4a8fb54
Add support for One-Time Token Login
...
Closes gh-15114
2024-09-03 10:07:56 -03:00
Florian Bernard
008cbc2cae
Add cookie customizer to CookieRequestCache and CookieServerRequestCache
...
Issue gh-15204
2024-09-03 09:41:30 -03:00
Ilpyo-Yang
095929f6e8
Include FilterChain in SessionInformationExpiredEvent
...
Closes gh-14077
2024-08-29 13:12:27 -03:00
DingHao
ed16c86115
Improve @CurrentSecurityContext meta-annotations
...
Closes gh-15551
2024-08-13 13:18:15 -06:00
Josh Cummings
08b8b09066
Update Copyright
...
Issue gh-15286
2024-08-10 11:48:14 -06:00
DingHao
9aaf959400
Improve @AuthenticationPrincipal meta-annotations
...
Closes gh-15286
2024-08-10 11:46:51 -06:00
Daniel Garnier-Moiroux
bc8ba7f3b7
Inline CSS for default login and logout page
...
- Remove the dependency on Bootstrap CSS. Results in faster load times, no failures
in air-gapped or offline scenarios, and no dependency on an external CDN that may
go away some day.
2024-08-05 09:27:18 -05:00
baezzys
4169c0cf36
Publish Constants for Firewall Header and Parameter Predicates
...
Introduced public static final Predicates for allowed header names,
header values, parameter names, and parameter values for building
expressions.
Closes gh-13639
2024-07-18 17:24:38 -07:00
Josh Cummings
773e86701e
Add ParameterRequestMatcher
...
Closes gh-15342
2024-07-02 15:17:54 -06:00
Max Batischev
44f9396bad
Add support remember-me cookie customization
...
Closes gh-14990
2024-06-05 11:47:20 -03:00
Steve Riesenberg
1e4aff2bdb
Merge branch '6.2.x' into 6.3.x
...
Closes gh-15186
2024-05-31 19:02:31 -05:00
Steve Riesenberg
3fc7b6e921
Merge branch '5.8.x' into 6.2.x
...
Closes gh-15185
2024-05-31 18:34:14 -05:00
Steve Riesenberg
dcb8c563e8
Fix ArrayIndexOutOfBoundsException
...
Issue gh-13310
Closes gh-15184
2024-05-31 18:12:21 -05:00
Josh Cummings
7288fecc24
Verify ipAddress Not A Hostname
...
Closes gh-15172
2024-05-30 17:50:56 -06:00
Joaquin Santana
927840fe88
Do Not Invalidate Current Session When It Is Registered
...
Closes gh-15066
2024-05-14 10:01:54 -03:00
Marcus Hert Da Coregio
08f11f06ab
Revert unnecessary commits from main
...
Issue gh-15016
2024-05-08 13:49:18 -03:00
Marcus Hert Da Coregio
b3c7f3ff19
Rename CompromisedPasswordCheckResult to CompromisedPasswordDecision
...
Issue gh-7395
2024-04-30 08:38:03 -03:00
Marcus Hert Da Coregio
61eba00654
Move HaveIBeenPwnedRestApiPasswordChecker to spring-security-web
...
Prior to this commit, the implementation was placed in spring-security-core, however we do not want to introduce a dependency on spring-web and spring-webflux for that module.
Issue gh-7395
2024-04-10 14:58:01 -03:00
ruabtmh
c0928bf198
Add DelegatingAuthenticationConverter
...
Closes gh-14644
2024-03-13 14:33:45 -06:00
DingHao
8885707674
Add DelegatingServerAuthenticationConverter
...
Closes gh-14644
2024-03-05 08:21:59 -07:00
Steve Riesenberg
bd345fb2a8
Polish gh-11758
2024-02-29 12:15:30 -06:00
Markus Heiden
5c5503924b
Add SwitchUserGrantedAuthorityMixIn
...
Closes gh-11775
2024-02-29 11:07:21 -06:00
Marcus Hert Da Coregio
f8ff056eb6
Update Max Sessions on WebFlux
...
Delete WebSessionStoreReactiveSessionRegistry.java and gives the responsibility to remove the sessions from the WebSessionStore to the handler
Issue gh-6192
2024-02-28 10:06:45 -03:00
Marcus Hert Da Coregio
a5ce8ae87f
Polish Max Sessions on WebFlux
...
This commit changes the PreventLoginServerMaximumSessionsExceededHandler to invalidate the WebSession in addition to throwing the error, this is needed otherwise the session would still be saved with the security context. It also changes the SessionRegistryWebSession to first perform the operation on the delegate and then invoke the needed method on the ReactiveSessionRegistry
Issue gh-6192
2024-02-27 11:12:50 -03:00
Josh Cummings
4d039e515f
Merge branch '6.2.x'
2024-02-22 13:21:22 -07:00
Josh Cummings
9c48546883
Merge branch '6.1.x' into 6.2.x
2024-02-22 13:21:14 -07:00
Josh Cummings
7f106f0419
Merge branch '5.8.x' into 6.1.x
2024-02-22 13:20:29 -07:00
Christian Becker
5f80468de3
Updated copyright date
2024-02-22 13:19:05 -07:00
Christian Becker
2f762fefe1
Allow tab in HTTP header values.
...
Closes gh-14573
2024-02-22 13:19:05 -07:00
Marcus Hert Da Coregio
21580fd27d
Merge branch '6.2.x'
2024-02-16 13:31:20 -03:00
Marcus Hert Da Coregio
15306c1007
Merge branch '6.1.x' into 6.2.x
2024-02-16 13:21:15 -03:00
Rob Winch
750cb30ce4
Add AuthenticationTrustResolver.isAuthenticated
2024-02-16 13:08:29 -03:00
Marcus Hert Da Coregio
915d68e216
Remove includeExpiredSessions parameter
...
The reactive implementation of max sessions does not keep track of expired sessions, therefore we do not need such parameter
Issue gh-6192
2024-02-06 10:43:00 -03:00
Federico Herrera
c1adeef0da
Add validation IpAddressMatcher
...
Closes gh-13621
2024-01-30 17:16:18 -07:00
Nermin Karapandzic
6e1bcfed11
Add argument resolver for SecurityContext
...
Closes gh-13425
2024-01-29 17:30:38 -07:00
Marcus Hert Da Coregio
06278157fa
Merge branch '6.2.x'
...
Closes gh-14471
2024-01-17 16:16:40 -03:00
Marcus Hert Da Coregio
148e0b41d2
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14470
2024-01-17 16:16:27 -03:00
