Commit Graph

8174 Commits

Author SHA1 Message Date
Filip Hanik 8c4252681e Upgrade rsocket to 1.0.0-RC5 without BOM 2019-09-30 14:05:17 -07:00
Filip Hanik cdeeb27b51 Upgrade Spring Data to Lovelace-SR11 2019-09-30 14:05:17 -07:00
Filip Hanik 9393017e3f Upgrade Project Reactor to Dysprosium-RELEASE 2019-09-30 14:05:17 -07:00
Filip Hanik 09c29d286a Upgrade Spring Framework to 5.2.0.RELEASE 2019-09-30 14:05:17 -07:00
Rob Winch b29106ea31 Use deamon thread for Schedulers.newParallel
Fixes gh-7492
2019-09-30 15:19:31 -05:00
Rob Winch 1bf0e70bd0 Revert "Dispose default Scheduler"
This reverts commit 39600b901f.
2019-09-30 15:19:31 -05:00
Filip Hanik 8bc3ad16ef SAML 2 Login - Documentation
Fixes gh-7472
https://github.com/spring-projects/spring-security/issues/7472
2019-09-30 13:03:05 -07:00
Rob Winch fc8a0184b0 Polish Dispose default Scheduler 2019-09-30 14:42:28 -05:00
Rob Winch e0414e5cbe Merge pull request #7493 from robotmrv/gh-7492
Dispose default Scheduler
2019-09-30 14:40:28 -05:00
Rob Winch 3051a79188 Merge Add hasAnyAuthority method in AuthorizePayloadsSpec.Access 2019-09-30 14:33:41 -05:00
Rob Winch a911f3d52f Merge Add hasAnyRole method in AuthorizePayloadsSpec.Access 2019-09-30 14:14:59 -05:00
Rob Winch 3854afad61 Merge Add denyAll method in AuthorizePayloadsSpec.Access 2019-09-30 14:05:42 -05:00
Rob Winch 03e2efacf4 Add Hello RSocket Sample
Fixes gh-7504
2019-09-30 13:58:03 -05:00
Filip Hanik 83b5f5c7ae Improve the Saml2AuthenticationRequest object
- introduce the AssertionConsumerServiceURL attribute
- add javadoc
- align property name with SAML XML for AuthNRequest
2019-09-30 11:01:34 -07:00
Filip Hanik 9731386de5 Correctly set "Destination" in AuthNRequest message
Fixes gh-7494
https://github.com/spring-projects/spring-security/issues/7494
2019-09-30 11:01:34 -07:00
Filip Hanik 69eacac514 Fix javadoc for RelyingPartyRegistrationRepository 2019-09-30 09:22:36 -07:00
Filip Hanik 7adb4da3ef Always require signature on either response or assertion
Fixes gh-7490
https://github.com/spring-projects/spring-security/issues/7490
2019-09-30 09:22:36 -07:00
Rob Winch d83aa34dde Add RSocket Reference
Fixes gh-7502
2019-09-30 11:03:00 -05:00
Josh Cummings b764af6b9b
CookieServerCsrfTokenRepositoryTests Leading Dot
ResponseCookie removed support for having a leading dot in the cookie
domain.

Fixes gh-7500
2019-09-30 08:39:45 -06:00
Josh Cummings 71bbc9849e
URL Cleanup
Issue gh-2567
2019-09-30 07:43:35 -06:00
Josh Cummings 35797f9a74
Add Resource Server to Modules Section
Fixes gh-7498
2019-09-30 07:31:20 -06:00
Josh Cummings 8421594397
Replace Servlet Guides w/ Hello World Samples
Issue gh-2567

Co-authored-by: Jay Bryant <jbryant@pivotal.io>
Co-authored-by: Rob Winch <rwinch@users.noreply.github.com>
2019-09-30 07:17:06 -06:00
Josh Cummings 25b5f48884
Rewrite Preface
Issue gh-2567

Co-authored-by: Jay Bryant <jbryant@pivotal.io>
Co-authored-by: Rob Winch <rwinch@users.noreply.github.com>
2019-09-30 07:17:05 -06:00
Filip Hanik f832d08814 Upgrade Jackson JSON library to 2.10.0 2019-09-29 18:23:32 -07:00
Joe Grandja aecebeac69 Polish ref doc for oauth2Login 2019-09-29 21:04:32 -04:00
Joe Grandja 7754913a74 Document OidcClientInitiatedLogoutSuccessHandler
Fixes gh-7401
2019-09-29 20:27:35 -04:00
Roman Matiushchenko 39600b901f Dispose default Scheduler
AbstractUserDetailsReactiveAuthenticationManager creates parallel
Scheduler with daemon=false Threads. It is recommended to dispose such
Schedulers to be able exit the VM

Fixes gh-7492
2019-09-29 20:23:05 +03:00
Josh Cummings 29ed728a70 Add Jwt.Builder Link
Fixes gh-7407
2019-09-28 19:27:05 -06:00
Josh Cummings f43996b99f Add OAuth2AuthenticatedPrincipal Link
Fixes gh-7406
2019-09-28 19:25:34 -06:00
Josh Cummings 5d0e80c85c Polish BearerTokenResolver Docs
Issue gh-6254
2019-09-28 19:11:59 -06:00
kostya05983 69a4848850 BearerTokenResolver Docs
Fixes gh-6254
2019-09-28 19:11:59 -06:00
Joe Grandja 2e2554a8c3 Document OidcIdTokenDecoderFactory
Fixes gh-7399
2019-09-28 21:09:41 -04:00
Joe Grandja 9b40ce6ccc Update What's New section 2019-09-27 20:45:32 -04:00
Josh Cummings 7949dd492a
Move DelegatingServerAuthenticationSuccessHandlerTests
Moved from src/test/groovy to src/test/java

Issue gh-5332
2019-09-27 16:57:43 -06:00
Josh Cummings 758af54796
ObjectPostProcessor Tests groovy->java
Issue gh-4939
2019-09-27 16:36:33 -06:00
Josh Cummings a08be5bf6f
UrlAuthorizationsTests groovy->java
Issue gh-4939
2019-09-27 16:23:33 -06:00
Josh Cummings 870d83eb3e
PermitAllSupportTests groovy->java
Issue gh-4939
2019-09-27 16:23:33 -06:00
Josh Cummings 1630b3b1f3
CurrentSecurityContext JavaDoc
Fixes gh-7489
2019-09-27 16:23:33 -06:00
Luis Felipe Vega Calle 350bce761f Add hasAuthority method to RSocketSecurity
Fixes gh-7435
2019-09-27 16:48:25 -05:00
Josh Cummings adf9769eed
Add ClientRegistration.withClientRegistration
Fixes gh-7486
2019-09-27 14:17:50 -06:00
Josh Cummings 5f905232cb
Polish CurrentSecurityContextArgumentResolvers
Fixes gh-7487
2019-09-27 13:19:08 -06:00
Joe Grandja 5ef6e7ed6f Add author for SecurityReactorContextConfiguration
Issue gh-7422
2019-09-27 15:17:20 -04:00
Joe Grandja 0fea57d6a1 Optimize SecurityReactorContextConfiguration
Issue gh-7422
2019-09-27 14:46:39 -04:00
Joe Grandja 3670888616 Polish ref doc for oauth2Login 2019-09-27 14:24:45 -04:00
Rob Winch 633fad557f Add Reactive Messaging CurrentSecurityContextPrincipalArgumentResolver
Fixes gh-7488
2019-09-27 12:52:19 -05:00
Josh Cummings 33ba292fed
Resource Server w/ SecurityReactorContextSubscriber
Fixes gh-7423
2019-09-27 11:01:04 -06:00
Filip Hanik e6d40e8280
Merge pull request #7477 from fhanik/feature/propagate_saml_authentication_exception
propagate saml authentication exception #7375
2019-09-27 09:38:57 -07:00
Joe Grandja 7217bb5eb0 Remove FIXME in OAuth2LoginReactiveAuthenticationManager 2019-09-27 12:13:13 -04:00
Filip Hanik 22da2b45c9 SAML Assertion validation should propagate errors: #7375 and #7375
Fixes gh-7377
Fixes gh-7375

https://github.com/spring-projects/spring-security/issues/7377
https://github.com/spring-projects/spring-security/issues/7375

Clean up code

- Authentication request factory should only throw Saml2Exception
- OpenSamlImplementation should only throw Saml2Exception
- Move the OpenSamlImplementation package private methods to the right
section
2019-09-27 09:07:25 -07:00
Filip Hanik b6a057a925 OpenSAML expects type `long` representing millis for response time validation skew
Fixes gh-7448

https://github.com/spring-projects/spring-security/issues/7448
2019-09-27 09:07:25 -07:00