Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
15,703 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

1217 Commits

Author SHA1 Message Date
Marcus Hert Da Coregio e3ab1c94d7 Use assertj assertions 2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio a7da9491d9 Use assertj assertions 2023-11-17 09:03:36 -03:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Steve Riesenberg 975ac10f19
Merge branch '6.1.x' 
Closes gh-14042
 2023-10-19 16:44:03 -05:00
Steve Riesenberg b4e0873b1e
Merge branch '6.0.x' into 6.1.x 
Closes gh-14041
 2023-10-19 16:43:21 -05:00
Steve Riesenberg bb732e9d35
Merge branch '5.8.x' into 6.0.x 
Closes gh-14040
 2023-10-19 16:40:34 -05:00
Steve Riesenberg 5161712c35
Polish gh-13976 
Closes gh-13757
 2023-10-19 16:40:23 -05:00
Veli Döngelci a6b872dcf3
Fix caching error state in ReactiveRemoteJWKSource 2023-10-19 16:40:13 -05:00
Valeriy Vyrva 0e30b923f8 Check for null value with the appropriate assertion method 2023-10-03 08:16:21 -06:00
Josh Cummings c7ea8c6ac7
Fix Formatting 
Issue gh-13654
 2023-10-02 17:47:37 -06:00
Josh Cummings a3227f041c
Polish OAuth2AuthorizationManagers 
- Add OAuth2ReactiveAuthorizationManagers
- Code to interfaces
- Align error message with the same in
AuthorityAuthorizationManager
- Adjust expectations in tests to confirm an
appropriately constructed authorizaion manager
- Add JavaDoc and reference documentation

Issue gh-13654
 2023-10-02 17:26:06 -06:00
Mario Petrovski 2ee8f27997 Fix imports 2023-10-02 17:23:49 -06:00
Mario Petrovski 97ec5c921e Fix imports in tests 2023-10-02 17:23:49 -06:00
Mario Petrovski e1db108cb9 Improvements and unit tests. 2023-10-02 17:23:49 -06:00
Mario Petrovski 5e0ea6ce8a Fix formatting 2023-10-02 17:23:49 -06:00
Mario Petrovski 35e5533a4b Fix formatting 2023-10-02 17:23:49 -06:00
Mario Petrovski e99b37a6cb Fix build 2023-10-02 17:23:49 -06:00
Mario Petrovski 19ae3a765d Make class final 2023-10-02 17:23:49 -06:00
Mario Petrovski 141605cb24 Fix check build issues 2023-10-02 17:23:49 -06:00
Mario Petrovski 926f4a75ba Set the import order correctly 2023-10-02 17:23:49 -06:00
Mario Petrovski 81a708e25f Closes #13754 Add hasScope and hasAnyScope for authorization rules 2023-10-02 17:23:49 -06:00
Marcus Da Coregio 07b6c451fd Merge branch '6.1.x' 
Closes gh-13884
 2023-09-29 11:47:38 -03:00
Marcus Da Coregio 8adfc9b463 Merge branch '6.0.x' into 6.1.x 
Closes gh-13883
 2023-09-29 11:46:48 -03:00
Marcus Da Coregio 92c82191c9 Merge branch '5.8.x' into 6.0.x 
Closes gh-13882
 2023-09-29 11:46:00 -03:00
Marcus Da Coregio 64e2a2ff8b Apply updated Code Style 
Closes gh-13881
 2023-09-29 11:44:32 -03:00
Josh Cummings cb33fd7850
Add OIDC Back-Channel Logout Support 
Closes gh-12570
 2023-09-16 15:12:21 -06:00
Steve Riesenberg 5535d17172
Merge branch '6.1.x' 
Closes gh-13807
Closes gh-13803
Closes gh-13802
 2023-09-12 18:55:42 -05:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices 
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-09-12 16:18:14 -06:00
Steve Riesenberg 74dc3fd7b1
Merge branch '6.0.x' into 6.1.x 
Closes gh-13799 in 6.1.x
Closes gh-13801
 2023-09-12 17:02:48 -05:00
Steve Riesenberg 771d9cd8b6
Merge branch '5.8.x' into 6.0.x 
Closes gh-13799
 2023-09-12 17:00:47 -05:00
Steve Riesenberg 9b7a110704
Fix OAuth2AuthenticationExceptionMixinTests on JDK 17 
Closes gh-11893
 2023-09-12 16:51:47 -05:00
Josh Cummings fed3de8dce Remove Logging of Untrusted Data 2023-08-08 10:02:42 -06:00
Josh Cummings 3307c656f4 Polish 
- Added JavaDoc @since attribute
- Added Predicate based test
- Adjusted test names

Issue gh-13427
 2023-08-08 10:02:42 -06:00
Baljit Singh e1bae73703 add factory methods for Jwt issuer resolvers 
Closes gh-13427
 2023-08-08 10:02:42 -06:00
Baljit Singh 7a713cab6f improve performance of Jwt issuer resolvers 2023-08-08 10:02:42 -06:00
Baljit Singh da35fa0485 make logging consistent for Jwt issuer resolvers 2023-08-08 10:02:42 -06:00
Baljit Singh af00be8a3d fix Javadocs for Jwt issuer resolvers 2023-08-08 10:02:42 -06:00
Josh Cummings 6c3636d780
Update Removed Usages 
Issue gh-13544
 2023-07-14 18:38:58 -06:00
Justin Tay 4c33d53385 Add SupplierClientRegistrationRepository 
Closes gh-12967
 2023-07-12 15:53:22 -06:00
Josh Cummings a77ef9ecf4
Add ClientAuthenticationMethod#toString 
Closes gh-13497
 2023-07-12 14:24:26 -06:00
Josh Cummings 80a0ade3e3
Merge branch '6.1.x' 
Closes gh-13499
 2023-07-12 14:16:08 -06:00
Josh Cummings 8642a170e8
Merge branch '6.0.x' into 6.1.x 
Closes gh-13498
 2023-07-12 14:15:53 -06:00
Josh Cummings dbf0c66301
Fix Client Authentication Method Error Message 
Closes gh-13496
 2023-07-12 14:15:31 -06:00
Claudio Nave 52e12ad64b Replace deprecated methods 2023-06-22 13:19:55 -06:00
Krzysztof Krason 9b603b99ab Using modern Java features 2023-06-22 11:24:25 -06:00
Kevin Yue b09a228eaf Make class `OidcClientInitiatedLogoutSuccessHandler` extensible 2023-06-22 11:19:39 -06:00
Josh Cummings 00cf5edef2
Merge branch '6.0.x' 
Closes gh-13309
 2023-06-12 15:14:24 -06:00
Josh Cummings 5f26daedcb Error On Unsupported Client Authentication Methods 
Closes gh-13144
 2023-06-12 15:13:13 -06:00
Josh Cummings f843232d84
Merge branch '6.0.x' 
Closes gh-13223
 2023-05-24 15:32:12 -06:00
Josh Cummings 69b17f3d3f
Merge branch '5.8.x' into 6.0.x 
Closes gh-13222
 2023-05-24 15:29:39 -06:00
Josh Cummings c1002ff745
Improve Error Handling 
Closes gh-13143
 2023-05-24 15:29:15 -06:00
Josh Cummings 76eba9bd0c
Add withIssuerLocation 
Closes gh-10309
 2023-04-12 16:36:15 -06:00
Josh Cummings 9ee8202625
Merge branch '6.0.x' 
Closes gh-13006
 2023-04-12 12:50:19 -06:00
Josh Cummings b423db5f93
Merge branch '5.8.x' into 6.0.x 
Closes gh-13005
 2023-04-12 12:46:11 -06:00
Josh Cummings 28be37238d
Merge branch '5.7.x' into 5.8.x 
Closes gh-13004
 2023-04-12 12:45:28 -06:00
Nick Meverden c4e9fb885d Delay JWSVerificationKeySelector Construction 
Updating the NimbusReactiveJwtDecoder.JwkSetUriReactiveJwtDecoderBuilder processor to execute the ConfigurableJWTProcessor customizations before holding a reference to the JWSKeySelector.

Closes gh-12960
 2023-04-12 12:45:00 -06:00
Vedran Pavic 6f8ec3df60
Ensure access token isn't resolved from query for form-encoded requests 
Closes gh-5668
 2023-04-10 17:06:47 -06:00
Josh Cummings 64a1ad5cd6
Merge branch '5.8.x' into 6.0.x 2023-04-04 13:32:34 -06:00
Josh Cummings 5ffebaf12b
Merge branch '5.7.x' into 5.8.x 2023-04-04 13:32:04 -06:00
Josh Cummings 39cee36065
Use SingletonSupplier 
Issue gh-9991
 2023-04-04 13:25:31 -06:00
Josh Cummings 88540aa52f
Use SingletonSupplier 
Issue gh-9991
 2023-04-04 13:23:03 -06:00
Marcus Kainth f0ef54050e Add ability to set principalClaimName in ReactiveJwtAuthenticationConverter 
Closes #12907
 2023-03-27 16:43:30 -06:00
Joe Grandja 55224b58e0 Polish gh-12853 2023-03-20 15:47:00 -04:00
Josh Cummings a7562ad950
Update io.spring.javaformat to 0.0.38 
Closes gh-12891
 2023-03-20 10:44:35 -06:00
Steve Riesenberg 8c17b978c8
Add support for device authorization response 
Closes gh-12852
 2023-03-08 17:07:56 -06:00
Geon Park 613b16c247 NimbusReactiveJwtDecoder support mono chain 
Supports reactive exception handling when using PublicKeyReactiveJwtDecoderBuilder and SecretKeyReactiveJwtDecoderBuilder
 2023-02-07 13:37:23 -07:00
Marcus Da Coregio b237d7ee38 Merge branch '6.0.x' 
Closes gh-12621
 2023-02-03 12:31:08 -03:00
luamas 7409d14504 fix javax.json.bind.Jsonb to jakarta.json.bind.Jsonb 
Closes gh-12616
 2023-02-03 12:30:17 -03:00
Josh Cummings e7fb6d2e14
Merge branch '6.0.x' 
Closes gh-12496
 2023-01-06 12:56:45 -07:00
Josh Cummings 748e912685
Merge branch '5.8.x' into 6.0.x 
Closes gh-12495
 2023-01-06 12:56:21 -07:00
Josh Cummings 5e1db6a771
Merge branch '5.7.x' into 5.8.x 
Closes gh-12494
 2023-01-06 12:55:43 -07:00
Jon Kjennbakken 225dc593a8 Polish NimbusJwtDecoderTests 
- Add missing mock

Closes gh-12238
 2023-01-06 12:53:36 -07:00
Josh Cummings e0e9455f78
Merge branch '6.0.x' 
Closes gh-12441
 2022-12-19 16:01:26 -07:00
Josh Cummings 7bd6deccc3
Revert "Disable Some R2dbc Tests" 
This reverts commit 813179931a.

Closes gh-12339
 2022-12-19 15:42:22 -07:00
ch4mpy 7ad4ebd07a
Allow authentication details to be set by converter 
Prevent JwtAuthenticationProvider from setting authentication details
when jwtAuthenticationConverter returned an authentication instance
with non null details.

Closes gh-11822
 2022-12-12 18:55:08 -06:00
Josh Cummings 7561a02cdd
Merge branch '6.0.x' 2022-12-05 11:13:43 -07:00
Josh Cummings 813179931a
Disable Some R2dbc Tests 
Issue gh-12339
 2022-12-05 11:13:15 -07:00
Josh Cummings cd0f02de49
Polish authorities claim delimiter 
PR gh-12074
 2022-12-02 14:30:31 -07:00
Patrick Walter 9c9fd9f4bd
Add configurable authorities split regex 
Before this commit splitting the authorities claim was done by a
hardcoded regex " ". This commit allows to configure to set any regex
to split the authorities claim while keeping the previously
hardcoded regex as a default.

Closes gh-12074
 2022-12-02 14:30:30 -07:00
Josh Cummings b22bc42bb0
Merge branch '5.8.x' into 6.0.x 
Closes gh-12325
 2022-11-30 14:50:51 -07:00
Josh Cummings 29c00905ce
Merge branch '5.7.x' into 5.8.x 
Closes gh-12324
 2022-11-30 14:49:26 -07:00
Josh Cummings 667cab6cda
Merge branch '5.6.x' into 5.7.x 
Closes gh-12323
 2022-11-30 14:38:16 -07:00
이경욱 52c7141aac
Save Request Before Response Is Committed 
Specifically important for cookie-based authorization request
repositories.

Closes gh-11602
 2022-11-30 14:33:08 -07:00
Steve Riesenberg bb3d92e33a
Update r2dbc-h2 to 1.0.0.RELEASE 
Closes gh-12251
 2022-11-18 23:04:38 -06:00
Steve Riesenberg 4e88623873
Polish gh-12087 in 6.0 2022-11-17 14:31:44 -06:00
Steve Riesenberg a3d35ecf3c
Merge branch '5.8.x' 
Closes gh-12234
 2022-11-17 14:27:41 -06:00
Michael Sosa 52888d6206
Warn when AuthorizationGrantType does not match 
Log a warning when AuthorizationGrantType does not exactly match a
pre-defined constant.

Closes gh-11905
 2022-11-17 14:17:54 -06:00
Steve Riesenberg ce065a87da
Merge branch '5.8.x' 
Closes gh-12207
 2022-11-14 12:25:05 -06:00
Steve Riesenberg 71eb71d185
Merge branch '5.7.x' into 5.8.x 
Closes gh-12206
 2022-11-14 12:11:59 -06:00
Steve Riesenberg 67a1f0836b
Merge branch '5.6.x' into 5.7.x 
Closes gh-12205
 2022-11-14 12:10:55 -06:00
Steve Riesenberg fde26e003a
Request user info when AS returns no scopes 
Closes gh-12144
 2022-11-10 16:29:43 -06:00
Josh Cummings 5fe59cc635
Revert "Add configurable authorities split regex" 
This reverts commit e93ed6d94c.

This can't be merged until after the 6.0 release
 2022-11-01 17:39:26 -06:00
Patrick Walter e93ed6d94c Add configurable authorities split regex 
Before this commit splitting the authorities claim was done by a
hardcoded regex " ". This commit allows to configure to set any regex
to split the authorities claim while keeping the previously
hardcoded regex as a default.
 2022-11-01 17:38:47 -06:00
Josh Cummings cca999c57d
Merge remote-tracking branch 'origin/5.8.x' 2022-11-01 13:46:08 -06:00
Josh Cummings d29ab8bcae
Merge branch '5.7.x' into 5.8.x 2022-11-01 13:43:40 -06:00
Josh Cummings c94e33b6c8
Merge branch '5.6.x' into 5.7.x 2022-11-01 13:42:35 -06:00
Ger Roza 8315545144 Update RP-Initiated Logout target URLs. 
The URLs we're using are not actually pointing to the OIDC RP-Initiated Logout Specs.

Fixes: gh-12081
 2022-11-01 12:35:39 -06:00
Steve Riesenberg 801ceb0832
Merge branch '5.8.x' 2022-10-31 08:58:14 -05:00
Steve Riesenberg 66f2f1cde7
Merge branch '5.7.x' into 5.8.x 2022-10-31 08:55:03 -05:00