Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
9,481 Commits 33 Branches 333 Tags 109 MiB
Commit Graph

9481 Commits

Author SHA1 Message Date
Marcus Da Coregio 8c0103498a Ensure line endings for .bat are not modified 
Closes gh-10039
 2021-07-12 15:37:29 -03:00
Luke Quinane e269e5cb91 Fix typos 
Closes gh-10050
 2021-07-08 09:20:50 -03:00
Eleftheria Stein ed8b08fa24 Fix README local Maven install command 
Switching from the maven to maven-publish plugin means users should use publishToMavenLocal to install jars into their local Maven cache.

Closes gh-10047
 2021-07-07 13:26:28 +02:00
Marcus Da Coregio 208e327629 Update docs links to point to minor version branches 
Closes gh-9986
 2021-07-01 09:08:53 -03:00
Marcus Da Coregio 51dfae1b91 Add samplesBranch property 
Closes gh-10019
 2021-07-01 09:08:30 -03:00
Daniel Garnier-Moiroux 2fd94752c9 Fix Saml2WebSsoAuthenticationRequestFilter javadoc 
Closes gh-10025
 2021-06-30 13:51:29 +02:00
/usr/local/ΕΨΗΕΛΩΝ 61284ce22d Improve AuthenticationManagerBeanDefinitionParser XML parsing 
Closes gh-7282
 2021-06-28 11:55:05 +02:00
Eleftheria Stein fdd017d935 Apply DefaultLoginPageConfigurer before logout 
If they are not applied in this order, then the LogoutConfigurer cannot
set the logoutSuccessUrl, because the DefaultLoginPageGeneratingFilter
does not exist yet.
This impacts users that inject the default HttpSecurity bean.

Closes gh-9973
 2021-06-24 10:28:19 +02:00
Josh Cummings bfeb6bd756
Next Development Version 2021-06-21 12:59:19 -06:00
Josh Cummings e41360b4a3
Release 5.5.1 2021-06-21 11:00:32 -06:00
Josh Cummings e2e06539fc
Remove commons-codec constraint 
Closes gh-9977
 2021-06-21 10:41:22 -06:00
Josh Cummings 93f59a228b
Update to OpenSAML 4.1.1 
Closes gh-9976
 2021-06-21 10:41:11 -06:00
Josh Cummings b2bb014492
Update to nimbus-jose-jwt 9.10 
Closes gh-9975
 2021-06-21 10:41:06 -06:00
Josh Cummings 062910c2c4
Update to oauth2-oidc-sdk 9.9 
Closes gh-9974
 2021-06-21 10:40:59 -06:00
Josh Cummings 40fdb5a60d
Update org.springframework to 5.3.8 
Closes gh-9984
 2021-06-21 10:40:06 -06:00
Josh Cummings 2fa0da5cde
Update org.slf4j to 1.7.31 
Closes gh-9983
 2021-06-21 10:40:06 -06:00
Josh Cummings c5f4ae5c0a
Update org.jetbrains.kotlin to 1.5.10 
Closes gh-9982
 2021-06-21 10:39:54 -06:00
Josh Cummings c68c1c55ff
Update hibernate-entitymanager to 5.4.32.Final 
Closes gh-9981
 2021-06-21 10:37:30 -06:00
Josh Cummings be2595bc66
Update org.eclipse.jetty to 9.4.42.v20210604 
Closes gh-9980
 2021-06-21 10:37:28 -06:00
Josh Cummings dddd71439f
Update io.rsocket to 1.1.1 
Closes gh-9979
 2021-06-21 10:37:25 -06:00
Marcus Hert da Coregio 95a1ccb52c Fix Broken Links in Docs 
Closes gh-9869
 2021-06-21 10:58:44 -03:00
Marcus Hert da Coregio 4060f83261 Add a link checker to docs build 
Closes gh-9818
 2021-06-21 10:58:44 -03:00
Marcus Da Coregio f9a7ae0a6f Update links to point to migrated samples 
Closes gh-9816
 2021-06-21 10:58:43 -03:00
Marcus Hert da Coregio 425d008f1d Add messaging to documentation about sample migration 
Closes gh-9815
 2021-06-21 10:58:43 -03:00
Eleftheria Stein b73104c9d1 Add missing WebFlux CORS Reference 
Closes gh-9951
 2021-06-18 16:33:01 +02:00
Eleftheria Stein 895ef6cf76 Remove non-existent class from RSocket reference docs 
Closes gh-9949
 2021-06-18 14:18:31 +02:00
Eleftheria Stein cb4bb463da Disable default logout page when logout disabled 
Closes gh-9475
 2021-06-17 17:09:34 +02:00
Arnaud Mergey 5fd81eeaf1
fix typo preventing full exception to be displayed in log 
closes gh-9901
 2021-06-17 08:38:24 -06:00
Steve Riesenberg a332e2a728
Support additional client authentication methods 
Closes gh-9780
 2021-06-16 16:03:13 -05:00
Steve Riesenberg 9daf058a6e
Handle missing authorization endpoint uri 
Closes gh-9795
 2021-06-16 16:00:53 -05:00
Steve Riesenberg 839cc5e851
Remove validation for unsupported grant types 
Closes gh-9828
 2021-06-16 15:55:45 -05:00
Christian Frommeyer 0087128be8
Replace StringUtils from oauth2-oidc-sdk 
SecurityMockServerConfigurers.java previously used the StringUtils from
the optional oauth2-oidc-sdk dependency. Replacing this with the
StringUtils from the spring framework this should not force adding the
dependency in cases where it is not actually used.

Closes gh-9923
 2021-06-16 13:22:49 -06:00
Josh Cummings bfc9c5e18f
Use stack-workflow-status Action 
Closes gh-9792
 2021-06-16 13:21:20 -06:00
Joe Grandja 6fbd038111 Jwt client authentication converter detects new key 
Closes gh-9814
 2021-06-16 12:58:01 -04:00
Steve Riesenberg 700bda68b7 Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository 
Related to gh-9649
Closes gh-9857
 2021-06-15 11:32:35 -05:00
Marcus Hert da Coregio 53870ab3de Fix Adding Filter Relative to Custom Filter 
Closes gh-9787
 2021-06-14 15:51:27 -03:00
Josh Cummings fe13b488a1
Anonymous Authentication Argument Resolution Docs 
Closes gh-3338
 2021-06-08 16:12:38 -06:00
Josh Cummings c38495bfaf
Change Getting Started Link 
Point to 5.5.x reference guide

Issue gh-6502
 2021-06-08 13:56:58 -06:00
Josh Cummings c4b210b580
Fix Getting Started Link 
Closes gh-6502
 2021-06-08 13:44:06 -06:00
Josh Cummings 1a28b4f849
Format PayloadInterceptorRSocket 
Issue gh-9345
 2021-06-04 12:47:25 -06:00
Josh Cummings 63cd52d1a6
PayloadInterceptorRSocket retains all payloads 
Flux#skip discards its corresponding elements, meaning that they
aren't intended for reuse. When using RSocket's ByteBufPayloads,
this means that the bytes are releaseed back into RSocket's pool.

Since the downstream request may still need the skipped payload,
we should construct the publisher in a different way so as to
avoid the preemptive release.

Deferring Spring JavaFormat to clarify what changed.

Closes gh-9345
 2021-06-04 12:47:22 -06:00
Eleftheria Stein 895ae0ac55 Remove hard dependency on Kotlin 
Closes gh-9811
 2021-06-03 18:34:52 +03:00
Steve Riesenberg e6c268add0 URL encode client credentials 
Closes gh-9610
 2021-06-03 09:12:18 -05:00
Eleftheria Stein 82d471a592 Fix Resource Server clock skew default value in docs 
Closes gh-6611
 2021-06-02 12:22:42 +03:00
Josh Cummings f48a006034
Polish postLogoutRedirectUri encoding 
Issue gh-9511
 2021-05-26 13:51:26 -06:00
Hans Hosea Schaefer b7a0959ede
Encode postLogoutRedirectUri query params 
Now encodes already encoded queryparameters in postLogoutRedirectUrl
correctly

Closes gh-9511
 2021-05-26 13:51:15 -06:00
Marcus Hert da Coregio 29f4193529 Adjust createNewSessionIfAllowed to prevent NPE 
Ensure that isTransientAuthentication reuses the same authentication object from saveContext

Closes gh-8947
 2021-05-26 13:46:08 -03:00
Steve Riesenberg ab59adbfd2 Handle encoded spaces in the root dn 
Fixes an issue where provider URLs passed to the constructor of the
DefaultSpringSecurityContextSource can be URL encoded, resulting in
an invalid base dn. Additionally adds support for list constructor
to support spaces in base dn.

Closes gh-9742
 2021-05-26 10:29:49 -05:00
Steve Riesenberg de4b3a4310 Handle custom status codes in error handler 
Fixes an issue where custom status codes in the error response cause an
IllegalArgumentException to be thrown when resolving an HttpStatus.

Closes gh-9741
 2021-05-25 13:41:04 -05:00
Marcus Hert da Coregio e691906dbc Combine multiple OS builds into one 
Closes gh-9790
 2021-05-25 14:19:46 -03:00