Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
16,693 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

1239 Commits

Author SHA1 Message Date
Josh Cummings d7599ab192 Polish setAttributesConverter 
- Add Tests
- Add Reactive Support

Issue gh-14186
 2024-01-30 14:37:20 -07:00
ahmd-nabil 04f0f2597a Polish DefaultOAuth2UserService 
Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>
 2024-01-30 14:37:20 -07:00
ahmd-nabil d9d22c75a2 Add support for nested username attribute in DefaultOAuth2User 
Closes gh-14186

Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>
 2024-01-30 14:37:20 -07:00
Josh Cummings 01b7ad42ec
Merge branch '6.2.x' 2024-01-25 17:33:33 -07:00
Josh Cummings 84c45adc70
Merge branch '6.1.x' into 6.2.x 
Closes gh-14496
 2024-01-25 17:33:15 -07:00
Josh Cummings 44f22ee5cf
Merge branch '5.8.x' into 6.1.x 
Closes gh-14495
 2024-01-25 17:32:57 -07:00
Hans Lindner ca10187fd1 Enhance JWT decoding error handling 
Previously, the `decode` method threw a `JwtException` directly when encountering an unsupported algorithm or any exception during parsing. This commit introduces a more robust error handling mechanism. Now, instead of throwing exceptions directly, it returns a `Mono.error()` with a `BadJwtException` containing detailed error information. This approach provides more flexibility and allows the caller to handle errors in a more granular way, by being able to use project reactors onError functionality.

Closes gh-14467
 2024-01-25 17:32:10 -07:00
Josh Cummings 7ee974445b
Update Checkstyle 
Issue gh-14178
 2024-01-22 08:44:54 -07:00
Josh Cummings 04394a63cd
Update Formatting 
Issue gh-14178
 2024-01-22 08:26:25 -07:00
Josh Cummings 1e90bdfc0b
Update Copyright 
Issue gh-14178
 2024-01-19 09:26:04 -07:00
Armin Krezović 9c352c4b4b Support overriding RestOperations in OidcIdTokenDecoderFactory 
Closes gh-14178
 2024-01-19 09:24:56 -07:00
Armin Krezović 0041c658de Support overriding WebClient in ReactiveOidcIdTokenDecoderFactory 
Closes gh-14178
 2024-01-19 09:24:56 -07:00
Marcus Hert Da Coregio 9135cb4fbf Merge branch '6.2.x' 
Closes gh-14406
 2024-01-05 07:53:50 -03:00
Marcus Hert Da Coregio acaf9ce7e9 Merge branch '6.1.x' into 6.2.x 
Closes gh-14405
 2024-01-05 07:53:43 -03:00
Marcus Hert Da Coregio d032b23ab7 Make OAuth2AuthorizationExchange serializable 
Closes gh-14402
 2024-01-05 07:53:28 -03:00
Josh Cummings 1b39c1248a
Merge branch '6.2.x' 2023-12-11 10:21:18 -07:00
Josh Cummings 966c01fa90
Merge branch '6.1.x' into 6.2.x 
Closes gh-14278
 2023-12-11 10:21:00 -07:00
Josh Cummings c4a99fc942
Merge branch '5.8.x' into 6.1.x 
Closes gh-14277
 2023-12-11 10:20:38 -07:00
Candelario e896b14046 Dropped Nimbus Error Message 
Closes gh-13730
 2023-12-11 10:19:02 -07:00
Josh Cummings 10d88cdf28 Polish Introspection Authentication Converter 
- Added Reactive Support
- Separated SCOPE claim and authorities work
- Adjusted for style

Issue gh-14198
 2023-12-07 15:13:51 -07:00
ahmd-nabil 8279b22940 Add Introspection Authentication Converter 
Closes #14198

Signed-off-by: ahmd-nabil <ahm3dnabil99@gmail.com>
 2023-12-07 15:13:51 -07:00
Parker Mauney 8e93e4715f Fix typo in getClaimAsMap docstring 2023-11-22 14:02:17 -03:00
Marcus Hert Da Coregio e3ab1c94d7 Use assertj assertions 2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio a7da9491d9 Use assertj assertions 2023-11-17 09:03:36 -03:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Steve Riesenberg 975ac10f19
Merge branch '6.1.x' 
Closes gh-14042
 2023-10-19 16:44:03 -05:00
Steve Riesenberg b4e0873b1e
Merge branch '6.0.x' into 6.1.x 
Closes gh-14041
 2023-10-19 16:43:21 -05:00
Steve Riesenberg bb732e9d35
Merge branch '5.8.x' into 6.0.x 
Closes gh-14040
 2023-10-19 16:40:34 -05:00
Steve Riesenberg 5161712c35
Polish gh-13976 
Closes gh-13757
 2023-10-19 16:40:23 -05:00
Veli Döngelci a6b872dcf3
Fix caching error state in ReactiveRemoteJWKSource 2023-10-19 16:40:13 -05:00
Valeriy Vyrva 0e30b923f8 Check for null value with the appropriate assertion method 2023-10-03 08:16:21 -06:00
Josh Cummings c7ea8c6ac7
Fix Formatting 
Issue gh-13654
 2023-10-02 17:47:37 -06:00
Josh Cummings a3227f041c
Polish OAuth2AuthorizationManagers 
- Add OAuth2ReactiveAuthorizationManagers
- Code to interfaces
- Align error message with the same in
AuthorityAuthorizationManager
- Adjust expectations in tests to confirm an
appropriately constructed authorizaion manager
- Add JavaDoc and reference documentation

Issue gh-13654
 2023-10-02 17:26:06 -06:00
Mario Petrovski 2ee8f27997 Fix imports 2023-10-02 17:23:49 -06:00
Mario Petrovski 97ec5c921e Fix imports in tests 2023-10-02 17:23:49 -06:00
Mario Petrovski e1db108cb9 Improvements and unit tests. 2023-10-02 17:23:49 -06:00
Mario Petrovski 5e0ea6ce8a Fix formatting 2023-10-02 17:23:49 -06:00
Mario Petrovski 35e5533a4b Fix formatting 2023-10-02 17:23:49 -06:00
Mario Petrovski e99b37a6cb Fix build 2023-10-02 17:23:49 -06:00
Mario Petrovski 19ae3a765d Make class final 2023-10-02 17:23:49 -06:00
Mario Petrovski 141605cb24 Fix check build issues 2023-10-02 17:23:49 -06:00
Mario Petrovski 926f4a75ba Set the import order correctly 2023-10-02 17:23:49 -06:00
Mario Petrovski 81a708e25f Closes #13754 Add hasScope and hasAnyScope for authorization rules 2023-10-02 17:23:49 -06:00
Marcus Da Coregio 07b6c451fd Merge branch '6.1.x' 
Closes gh-13884
 2023-09-29 11:47:38 -03:00
Marcus Da Coregio 8adfc9b463 Merge branch '6.0.x' into 6.1.x 
Closes gh-13883
 2023-09-29 11:46:48 -03:00
Marcus Da Coregio 92c82191c9 Merge branch '5.8.x' into 6.0.x 
Closes gh-13882
 2023-09-29 11:46:00 -03:00
Marcus Da Coregio 64e2a2ff8b Apply updated Code Style 
Closes gh-13881
 2023-09-29 11:44:32 -03:00
Josh Cummings cb33fd7850
Add OIDC Back-Channel Logout Support 
Closes gh-12570
 2023-09-16 15:12:21 -06:00
Steve Riesenberg 5535d17172
Merge branch '6.1.x' 
Closes gh-13807
Closes gh-13803
Closes gh-13802
 2023-09-12 18:55:42 -05:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices 
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-09-12 16:18:14 -06:00
Steve Riesenberg 74dc3fd7b1
Merge branch '6.0.x' into 6.1.x 
Closes gh-13799 in 6.1.x
Closes gh-13801
 2023-09-12 17:02:48 -05:00
Steve Riesenberg 771d9cd8b6
Merge branch '5.8.x' into 6.0.x 
Closes gh-13799
 2023-09-12 17:00:47 -05:00
Steve Riesenberg 9b7a110704
Fix OAuth2AuthenticationExceptionMixinTests on JDK 17 
Closes gh-11893
 2023-09-12 16:51:47 -05:00
Josh Cummings fed3de8dce Remove Logging of Untrusted Data 2023-08-08 10:02:42 -06:00
Josh Cummings 3307c656f4 Polish 
- Added JavaDoc @since attribute
- Added Predicate based test
- Adjusted test names

Issue gh-13427
 2023-08-08 10:02:42 -06:00
Baljit Singh e1bae73703 add factory methods for Jwt issuer resolvers 
Closes gh-13427
 2023-08-08 10:02:42 -06:00
Baljit Singh 7a713cab6f improve performance of Jwt issuer resolvers 2023-08-08 10:02:42 -06:00
Baljit Singh da35fa0485 make logging consistent for Jwt issuer resolvers 2023-08-08 10:02:42 -06:00
Baljit Singh af00be8a3d fix Javadocs for Jwt issuer resolvers 2023-08-08 10:02:42 -06:00
Josh Cummings 6c3636d780
Update Removed Usages 
Issue gh-13544
 2023-07-14 18:38:58 -06:00
Justin Tay 4c33d53385 Add SupplierClientRegistrationRepository 
Closes gh-12967
 2023-07-12 15:53:22 -06:00
Josh Cummings a77ef9ecf4
Add ClientAuthenticationMethod#toString 
Closes gh-13497
 2023-07-12 14:24:26 -06:00
Josh Cummings 80a0ade3e3
Merge branch '6.1.x' 
Closes gh-13499
 2023-07-12 14:16:08 -06:00
Josh Cummings 8642a170e8
Merge branch '6.0.x' into 6.1.x 
Closes gh-13498
 2023-07-12 14:15:53 -06:00
Josh Cummings dbf0c66301
Fix Client Authentication Method Error Message 
Closes gh-13496
 2023-07-12 14:15:31 -06:00
Claudio Nave 52e12ad64b Replace deprecated methods 2023-06-22 13:19:55 -06:00
Krzysztof Krason 9b603b99ab Using modern Java features 2023-06-22 11:24:25 -06:00
Kevin Yue b09a228eaf Make class `OidcClientInitiatedLogoutSuccessHandler` extensible 2023-06-22 11:19:39 -06:00
Josh Cummings 00cf5edef2
Merge branch '6.0.x' 
Closes gh-13309
 2023-06-12 15:14:24 -06:00
Josh Cummings 5f26daedcb Error On Unsupported Client Authentication Methods 
Closes gh-13144
 2023-06-12 15:13:13 -06:00
Josh Cummings f843232d84
Merge branch '6.0.x' 
Closes gh-13223
 2023-05-24 15:32:12 -06:00
Josh Cummings 69b17f3d3f
Merge branch '5.8.x' into 6.0.x 
Closes gh-13222
 2023-05-24 15:29:39 -06:00
Josh Cummings c1002ff745
Improve Error Handling 
Closes gh-13143
 2023-05-24 15:29:15 -06:00
Josh Cummings 76eba9bd0c
Add withIssuerLocation 
Closes gh-10309
 2023-04-12 16:36:15 -06:00
Josh Cummings 9ee8202625
Merge branch '6.0.x' 
Closes gh-13006
 2023-04-12 12:50:19 -06:00
Josh Cummings b423db5f93
Merge branch '5.8.x' into 6.0.x 
Closes gh-13005
 2023-04-12 12:46:11 -06:00
Josh Cummings 28be37238d
Merge branch '5.7.x' into 5.8.x 
Closes gh-13004
 2023-04-12 12:45:28 -06:00
Nick Meverden c4e9fb885d Delay JWSVerificationKeySelector Construction 
Updating the NimbusReactiveJwtDecoder.JwkSetUriReactiveJwtDecoderBuilder processor to execute the ConfigurableJWTProcessor customizations before holding a reference to the JWSKeySelector.

Closes gh-12960
 2023-04-12 12:45:00 -06:00
Vedran Pavic 6f8ec3df60
Ensure access token isn't resolved from query for form-encoded requests 
Closes gh-5668
 2023-04-10 17:06:47 -06:00
Josh Cummings 64a1ad5cd6
Merge branch '5.8.x' into 6.0.x 2023-04-04 13:32:34 -06:00
Josh Cummings 5ffebaf12b
Merge branch '5.7.x' into 5.8.x 2023-04-04 13:32:04 -06:00
Josh Cummings 39cee36065
Use SingletonSupplier 
Issue gh-9991
 2023-04-04 13:25:31 -06:00
Josh Cummings 88540aa52f
Use SingletonSupplier 
Issue gh-9991
 2023-04-04 13:23:03 -06:00
Marcus Kainth f0ef54050e Add ability to set principalClaimName in ReactiveJwtAuthenticationConverter 
Closes #12907
 2023-03-27 16:43:30 -06:00
Joe Grandja 55224b58e0 Polish gh-12853 2023-03-20 15:47:00 -04:00
Josh Cummings a7562ad950
Update io.spring.javaformat to 0.0.38 
Closes gh-12891
 2023-03-20 10:44:35 -06:00
Steve Riesenberg 8c17b978c8
Add support for device authorization response 
Closes gh-12852
 2023-03-08 17:07:56 -06:00
Geon Park 613b16c247 NimbusReactiveJwtDecoder support mono chain 
Supports reactive exception handling when using PublicKeyReactiveJwtDecoderBuilder and SecretKeyReactiveJwtDecoderBuilder
 2023-02-07 13:37:23 -07:00
Marcus Da Coregio b237d7ee38 Merge branch '6.0.x' 
Closes gh-12621
 2023-02-03 12:31:08 -03:00
luamas 7409d14504 fix javax.json.bind.Jsonb to jakarta.json.bind.Jsonb 
Closes gh-12616
 2023-02-03 12:30:17 -03:00
Josh Cummings e7fb6d2e14
Merge branch '6.0.x' 
Closes gh-12496
 2023-01-06 12:56:45 -07:00
Josh Cummings 748e912685
Merge branch '5.8.x' into 6.0.x 
Closes gh-12495
 2023-01-06 12:56:21 -07:00
Josh Cummings 5e1db6a771
Merge branch '5.7.x' into 5.8.x 
Closes gh-12494
 2023-01-06 12:55:43 -07:00
Jon Kjennbakken 225dc593a8 Polish NimbusJwtDecoderTests 
- Add missing mock

Closes gh-12238
 2023-01-06 12:53:36 -07:00
Josh Cummings e0e9455f78
Merge branch '6.0.x' 
Closes gh-12441
 2022-12-19 16:01:26 -07:00
Josh Cummings 7bd6deccc3
Revert "Disable Some R2dbc Tests" 
This reverts commit 813179931a.

Closes gh-12339
 2022-12-19 15:42:22 -07:00
ch4mpy 7ad4ebd07a
Allow authentication details to be set by converter 
Prevent JwtAuthenticationProvider from setting authentication details
when jwtAuthenticationConverter returned an authentication instance
with non null details.

Closes gh-11822
 2022-12-12 18:55:08 -06:00
Josh Cummings 7561a02cdd
Merge branch '6.0.x' 2022-12-05 11:13:43 -07:00
Josh Cummings 813179931a
Disable Some R2dbc Tests 
Issue gh-12339
 2022-12-05 11:13:15 -07:00