13078 Commits

Author SHA1 Message Date
Marcus Da Coregio
8174ed2291 Update org.aspectj to 1.9.19
Closes gh-12706
2023-02-17 14:53:31 -03:00
Marcus Da Coregio
e7c1e2d78d Update maven-resolver-provider to 3.8.7
Closes gh-12705
2023-02-17 14:53:28 -03:00
Marcus Da Coregio
3f2ff0572e Update jakarta.servlet.jsp-api to 3.1.1
Closes gh-12704
2023-02-17 14:53:24 -03:00
Marcus Da Coregio
d127ad310f Update io.spring.nohttp to 0.0.11
Closes gh-12703
2023-02-17 14:53:21 -03:00
Marcus Da Coregio
b0c823970b Update io.projectreactor to 2022.0.3
Closes gh-12701
2023-02-17 14:53:14 -03:00
Marcus Da Coregio
67a0a1a010 Update mockk to 1.13.4
Closes gh-12700
2023-02-17 14:53:10 -03:00
Marcus Da Coregio
bb644fe371 Update micrometer-observation to 1.10.4
Closes gh-12699
2023-02-17 14:53:07 -03:00
Marcus Da Coregio
eef519adc5 Update jackson-bom to 2.14.2
Closes gh-12696
2023-02-17 14:52:58 -03:00
Josh Cummings
cedb9fd199
Merge branch '5.8.x' into 6.0.x
Closes gh-12687
2023-02-16 14:56:32 -07:00
Josh Cummings
0baf650f38
Merge branch '5.7.x' into 5.8.x
Closes gh-12686
2023-02-16 14:55:22 -07:00
Leonid Rozenblyum
000b4bc495 Fix NPE in HttpSecurity#addFilterBefore, HttpSecurity#addFilterAfter
Before the fix, these methods would throw a NPE in case when the filter class passed as the second parameter, is not registered yet.

In particular, this exception can occur when mixing standard and custom DSL to register filters.

The fix doesn't change the situation that standard DSL for registration of filters cannot refer to filters that are registered via custom DSL even though those calls were done earlier.

It just provides more user-friendly error handling for this and most likely other scenarios of calls of HttpSecurity#addFilterBefore, HttpSecurity#addFilterAfter.

The error handling is implemented similarly to HttpSecurity#addFilter.

Closes gh-12637
2023-02-16 14:54:44 -07:00
Steve Riesenberg
c4f68d83bf
Document default CsrfTokenRequestHandler in 6.0
Closes gh-12651
2023-02-16 13:26:23 -06:00
Marcus Da Coregio
5ccf414f02 Merge branch '5.8.x' into 6.0.x 2023-02-16 10:57:33 -03:00
Marcus Da Coregio
82c86b822f Polish session-management.adoc
Remove unresolved anchor

Issue gh-12519
2023-02-16 10:57:02 -03:00
Marcus Da Coregio
e59f71f036 Polish session-management.adoc
Remove default values from configuration

Issue gh-12519
2023-02-16 10:52:55 -03:00
Marcus Da Coregio
ce222de7e6 Merge branch '5.8.x' into 6.0.x
Closes gh-12680
2023-02-16 10:42:56 -03:00
Marcus Da Coregio
4f3faa78f7 Revisit Session Management docs
Closes gh-12519
2023-02-16 10:39:59 -03:00
Steve Riesenberg
8ab0bf76a3
Merge branch '5.8.x' into 6.0.x 2023-02-15 17:18:40 -06:00
Steve Riesenberg
2876605324
Polish migration doc
Issue gh-12675
2023-02-15 17:18:09 -06:00
Steve Riesenberg
bf2951b5af
Add sections for migrating exploit protection in 6.0
Issue gh-12462
2023-02-15 17:18:09 -06:00
Steve Riesenberg
ca1961d35e
Link to the latest 6.0.x release
Issue gh-12675
2023-02-15 17:01:28 -06:00
Steve Riesenberg
821db0a1ea
Polish migration doc
Issue gh-12675
2023-02-15 17:00:49 -06:00
Tao Sun
6f5c633241
Fix typo in Authentication Migrations page 2023-02-15 15:14:09 -07:00
Steve Riesenberg
45b81b194b
Expand migration docs regarding CSRF
Closes gh-12462
2023-02-15 14:53:28 -06:00
Josh Cummings
8ca726f4fa
Specify query string
Issue gh-12665
2023-02-14 08:24:07 -07:00
Josh Cummings
e7d65966fd
Merge branch '5.8.x' into 6.0.x
Closes gh-12671
2023-02-14 08:01:31 -07:00
Josh Cummings
0d4c619648
Include continue in query string
Closes gh-12665
2023-02-14 08:00:19 -07:00
Dmitriy Grushin
2b36499700 Update expression-based.adoc
Removed a duplicate paragraph that was phrased a bit differently.
2023-02-07 13:00:59 -07:00
Tobias Meurer
7dd5cc6082 Pick Up Custom SecurityContextRespository
Closes gh-12579
2023-02-07 12:46:12 -07:00
Marcus Da Coregio
52ed165476 Move classpath checks to class member variable
Closes gh-11437
2023-02-07 09:25:06 -03:00
Marcus Da Coregio
c15f45d9ee Only register hints for servlet applications
Closes gh-12622
2023-02-03 16:37:33 -03:00
Marcus Da Coregio
3572111cf5 Add JwtDecoder hint for oauth2Login
Closes gh-12615
2023-02-03 14:34:32 -03:00
luamas
7409d14504 fix javax.json.bind.Jsonb to jakarta.json.bind.Jsonb
Closes gh-12616
2023-02-03 12:30:17 -03:00
Josh Cummings
7dc3759f5d
Merge branch '5.8.x' into 6.0.x 2023-02-01 15:25:47 -07:00
Josh Cummings
4a8961bc80
Merge branch '5.7.x' into 5.8.x 2023-02-01 15:24:48 -07:00
jongwooo
aad3e61f4d chore: Use cache in continuous-integration-workflow.yml
Signed-off-by: jongwooo <jongwooo.han@gmail.com>
2023-02-01 14:26:25 -07:00
Rob Winch
4264258c31 Merge branch '5.8.x' into 6.0.x 2023-01-30 16:06:23 -06:00
Rob Winch
eaa9692c0c Merge branch '5.7.x' into 5.8.x 2023-01-30 16:05:56 -06:00
Dan Allen
51d5fb9c03 upgrade the Gradle Antora Plugin to 1.0.0 2023-01-30 16:04:40 -06:00
Steve Riesenberg
179428f7da
Add section for migrating WebSocket support
Issue gh-12378
2023-01-26 15:45:09 -06:00
Steve Riesenberg
13487be268
Default to XorCsrfChannelInterceptor in 6.0.x
Closes gh-12378
2023-01-26 15:45:04 -06:00
Steve Riesenberg
1363a4eece
Merge branch '5.8.x' into 6.0.x 2023-01-26 15:44:47 -06:00
Josh Cummings
c3563df25a
Include HttpStatusRequestRequestedHandler
Closes gh-12548
2023-01-26 14:07:22 -07:00
Josh Cummings
66711f2365
Add RequestRejectedHandler Test
Issue gh-12548
2023-01-26 13:07:16 -07:00
Steve Riesenberg
33e72b35f9
Add section for migrating WebSocket support
Issue gh-12378
2023-01-23 16:00:36 -06:00
Steve Riesenberg
c306df9b46
Add XorCsrfChannelInterceptor
Issue gh-12378
2023-01-23 16:00:35 -06:00
Rob Winch
9603a68e8f Merge branch '5.8.x' into 6.0.x 2023-01-17 17:07:20 -06:00
Rob Winch
d42405de42 Merge branch '5.7.x' into 5.8.x 2023-01-17 17:06:03 -06:00
Rob Winch
7db357d36a Use io.spring.antora.generate-antora-yml 2023-01-17 17:05:55 -06:00
Rob Winch
1084cdb75a Merge branch '5.8.x' into 6.0.x 2023-01-17 15:10:05 -06:00