Commit Graph

10469 Commits

Author SHA1 Message Date
Steve Riesenberg c7df39a3e6
Fix tests using root cause for exception messages
Closes gh-11372
2022-06-14 17:12:15 -05:00
Eddú Meléndez d98dab5917 Update java version to 17.0.3-tem 2022-06-14 14:43:34 -05:00
Steve Riesenberg ac98e358a5 Add slack announcement when release is successful
Closes gh-11307
2022-06-14 14:10:09 -05:00
Steve Riesenberg 98fbc7a88f
Calculate release day from the first Monday
Fixes an issue where the first day of the month is (for example) a
Tuesday causing the 2nd Tuesday and 3rd Monday to be over a week apart.

Issue gh-10458
2022-06-09 15:30:37 -05:00
Josh Cummings 89fb075e2d
Add missing KeyInfo
Closes gh-11354
2022-06-09 13:14:19 -06:00
Josh Cummings 3a41567a18
Add OpenSamlSigningUtilsTests
Issue gh-11354
2022-06-09 13:14:13 -06:00
Jared Rufer 89989722d0 Support multiple SingleLogoutService bindings.
Closes gh-11286
2022-06-09 12:50:33 -06:00
j3graham f3c96fa9cd Remove dependency on commons-codec by using java.util.Base64
Closes gh-11318
2022-06-09 06:49:39 -06:00
Steve Riesenberg d1cb236df5
Fix slack notifications in #spring-security-ci
This change can be reverted if upgrading to a new version of
Gamesight/slack-workflow-status with the fix available (> 1.1.0).

Closes gh-11346
2022-06-07 16:07:10 -05:00
Zhivko Delchev 1483a57018 Reverse content type check
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.

closes gh-11204
2022-06-06 15:45:55 -05:00
Rob Winch c9a4ff75d9 Fix typo in BasicLookupStrategy Javadoc
Issue gh-11336
2022-06-06 14:07:55 -05:00
shirohoo 9075176c52 Fix typo 2022-06-06 13:49:53 -05:00
Houssem BELHADJ AHMED f4049c18b1 add SAML authentication request support to login configurer
Closes gh-8873
2022-06-06 08:05:33 -06:00
Houssem BELHADJ AHMED 33104269d6 make SAML authentication request uri configurable
Closes gh-10840
2022-06-06 08:05:33 -06:00
Steve Riesenberg 07f28de79b
Polish gh-11184
Propagate rename in notify_result section.
2022-06-03 15:23:48 -05:00
Steve Riesenberg 0ec64c0843 Polish GitHubMilestonePlugin 2022-06-03 15:07:42 -05:00
Steve Riesenberg 46723a601c Add workflow step for scheduling the next milestone
This step introduces the concept of a release train to determine the appropriate release dates and schedules milestones as needed. It uses the following rules:

- If the current SNAPSHOT version is a minor release (patchVersion == 0), checks to see if a GA release exists. If not, a release train is scheduled as follows:
  - Finds the next available release train starting month (including this month), either January or July.
  - Schedules a release train with M1, M2, M3, RC1 and GA versions on either January/February/March/April/May or July/August/September/October/November
- If the current SNAPSHOT version is a patch release (patchVersion != 0), checks to see if a GA release exists. If not, an individual milestone is scheduled on the next even month whose release day is in the future (can include this month).
- In either case, the release day used to schedule the release is based on the configured weekOfMonth (1-4) and dayOfWeek (1-5), e.g. 3rd Monday of the month (3, 1).

If a milestone already exists, nothing is created. Once created, milestone due dates can be updated manually as desired.

Closes gh-10458
2022-06-03 15:07:42 -05:00
Steve Riesenberg ab3b6ae95f Add scheduleNextRelease gradle task 2022-06-03 15:07:42 -05:00
Steve Riesenberg 1295b793b3
Polish gh-11183
Fixed typo in plugin for setting workflowId and added missing repository() closure
2022-06-03 11:56:08 -05:00
Jyri-Matti Lähteenmäki ca0a6d9777 Treat URLs as String before equals/hashcode
java.net.URL performs DNS lookups whenever its equals/hashCode is
used. Thus attribute values of type java.net.URL need to be converted
to something else before they are used for equals/hashCode.

Closes gh-10673
2022-06-03 11:36:00 -04:00
Kuby e28fcbfbbe
Change phoneNumberVerified with type Boolean
Closes: gh-11315
2022-06-03 10:23:53 -05:00
Steve Riesenberg ad19fc1330 Add workflow for scheduling releases on maintenance branches
Closes gh-11180
2022-06-03 10:19:02 -05:00
Steve Riesenberg 2c93a92afa Add dispatchGitHubWorkflow gradle task 2022-06-03 10:19:02 -05:00
Rob Winch 96caecc639
Disable pull request for backport-bot.yml 2022-06-02 11:00:46 -05:00
Rob Winch a10f707b6e
Fix spacing in backport-bot.yml 2022-06-01 16:46:54 -05:00
Rob Winch 1d4bf88a0f Cleanup backport-bot.yml
Issue gh-11313
2022-06-01 16:45:50 -05:00
sKai.fun 6b1d5ec6ae Fix title render issue of Digest Authentication document
Closes gh-11272
2022-06-01 15:13:06 -05:00
Evgeniy Cheban 5eadcba7d1
Add RoleHierarchy to AuthorityAuthorizationManager
Added roleHierarchy field to AuthorityAuthorizationManager
that defaults to NullRoleHierarchy along with setter method to override.

Closes gh-11304
2022-06-01 09:00:08 -06:00
André Luis Gomes b9acdd5058 Update opaque-token.adoc
Fixing yaml sample in Servlet and Reactive pages
2022-06-01 13:43:42 +02:00
Rob Winch b78a28be5f Add backport-bot.yml
Closes gh-11313
2022-05-31 21:42:56 -05:00
Claudio Consolmagno b470f29cf8 Use 'md:' prefix with EntityDescriptor tag in the metadata xml
Create the EntityDescriptor object with EntityDescriptor.DEFAULT_ELEMENT_NAME instead of EntityDescriptor.ELEMENT_QNAME. That ensures the EntityDescriptor tag is marshalled to xml with the 'md:' prefix, consistent with all other metadata tags.

Closes #11283
2022-05-31 17:06:00 -06:00
Josh Cummings 9683856956
Polish InterceptUrlConfigTests
Issue gh-11305
2022-05-31 16:05:17 -06:00
Josh Cummings 2afa9313eb
Use AuthorizationManager in <http>
Closes gh-11305
2022-05-31 16:01:41 -06:00
Josh Cummings e125a76687
Fix rnc typo
Issue gh-11076
2022-05-27 17:06:02 -06:00
Josh Cummings ff0d85e2ac
Correct access(String) reference
Closes gh-11280
2022-05-27 14:51:45 -06:00
Josh Cummings f4c0fcb5ef
Add AuthorizationManager to Messaging
Closes gh-11076
2022-05-27 13:35:19 -06:00
Josh Cummings bbff945b95
Restore missing link text
Issue gh-10934
2022-05-27 13:00:20 -06:00
Josh Cummings ff0b1712b6
Improve ContextConfiguration Docs
Point to updated Spring Reference

Issue gh-10934
2022-05-27 12:46:36 -06:00
Josh Cummings 0a64579b1e
Polish ExtendWith Docs
Use spring-framework-reference-url placeholder

Issue gh-10934
2022-05-27 12:46:27 -06:00
nor-ek 416f94f979 Update Junit5 annotations in documentation
- replace Before with BeforeEach
- replace RunWith with ExtendWith

Closes gh-10934
2022-05-27 12:46:04 -06:00
Evgeniy Cheban 9235a841fe
Some Security Expressions cause NPE when used within Query annotation
Added trustResolver, roleHierarchy, permissionEvaluator, defaultRolePrefix
fields to SecurityEvaluationContextExtension along with setter methods to override defaults.

Closes gh-11196
2022-05-26 14:38:43 -05:00
James d124fa2858
Fix typo in comment for changePassword method 2022-05-25 12:34:55 -06:00
Juny Tse f2d6ead398 Use Base64 encoder with no CRLF in output for SAML 2.0 messages
Closes gh-11262
2022-05-25 11:42:54 -06:00
Josh Cummings bcd104763e
Remove duplicate check
Closes gh-11192
2022-05-23 16:01:37 -06:00
Josh Cummings 57fe5b8b5c
Fix Import Order Checkstyle Error
Issue gh-9667
2022-05-23 15:55:21 -06:00
Josh Cummings 5cbc1a47da
Use original query string to verify signature
Closes gh-11235
2022-05-23 15:30:07 -06:00
Josh Cummings 88f9529329
Correctly encode query parameters
Issue gh-11235
2022-05-23 15:30:01 -06:00
Evgeniy Cheban 5540bbcf0b
createEvaluationContext should defer lookup of Authentication
- Added createEvaluationContext method that accepts Supplier<Authentication>
- Refactored classes that use EvaluationContext to use lazy initialization of Authentication

Closes gh-9667
2022-05-18 17:36:17 -06:00
Steve Riesenberg 2be141f800
Use Spring Framework to 6.0.0-SNAPSHOT 2022-05-18 11:55:35 -05:00
github-actions[bot] 07841794c5 Next development version 2022-05-18 16:02:48 +00:00