Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
10,212 Commits 29 Branches 320 Tags 104 MiB
Commit Graph

1214 Commits

Author SHA1 Message Date
Josh Cummings 4b0e74aac4 Separate Resource Server Servlet Docs 
Issue gh-10367
 2021-10-27 10:02:05 -06:00
Rob Winch d40e8f6732 Fix Antora warnings 2021-10-26 20:05:06 -05:00
Rob Winch 9357c2f05d antora.component.version extract major.minor only 2021-10-26 15:22:40 -05:00
Rob Winch 144af074b7 Use a dynamic version for Antora 2021-10-26 14:20:35 -05:00
Rob Winch 863bee2bc7
Revert 6.0 generated version 2021-10-25 21:16:05 -05:00
Rob Winch dbf8e9ecce
Use 6.0 for generated docs 2021-10-25 21:11:35 -05:00
Rob Winch 0c105ff44f Use ROOT component name 2021-10-25 10:48:53 -05:00
Rob Winch f27ad296d0 Generated docs use version URL 2021-10-21 10:11:11 -05:00
Rob Winch ecd7301893 Use version in docs URL 2021-10-21 10:10:24 -05:00
Rob Winch a8c7ac9010 Add Antora based docs in whats-new 2021-10-18 21:11:47 -05:00
Steve Riesenberg 47087ba9c5 Revamp OAuth 2.0 Client reactive documentation 
Related gh-8174
 2021-10-14 14:35:25 -05:00
Steve Riesenberg a487ef2d74 Add JwtEncoder to What's New in 5.6 2021-10-14 14:26:48 -05:00
Marcus Da Coregio c82722c412 Update What's New in 5.6 2021-10-14 09:27:39 -03:00
Steve Riesenberg 00f466a431 Update What's New in 5.6 2021-10-13 12:06:47 -05:00
Alexander Schwartz f561499683 Fix Antora cross-references that lead to other pages. 
Also using AsciiDoc style listings instead of Markdown style listings, and using explicit section IDs on all cross-references.
 2021-10-06 09:53:15 -06:00
Rob Winch 14fd213557 Better consistency between reactive and servlet 2021-09-23 15:50:14 -05:00
Rob Winch 77dc3d1a0e Move to servlet/configurations/* 2021-09-23 15:50:14 -05:00
Rob Winch ca2bc958df Create features/integrations 2021-09-23 15:50:14 -05:00
Rob Winch ab63ebbbee Add link to authorization from features. 2021-09-23 15:50:14 -05:00
Rob Winch 176e6b6000 Add additional info to overview 2021-09-23 15:50:14 -05:00
Rob Winch d6ada7fb18 Remove /servlet/hello/index.adoc 
This is now /servlet/getting-started.adoc
 2021-09-23 15:50:14 -05:00
Rob Winch e368734557 Update "Big Picture" to Architecture 2021-09-23 15:50:14 -05:00
Rob Winch 0d339aeda6 Add Reactive Getting Started Page 2021-09-23 15:50:14 -05:00
Rob Winch 7537aa5124 Add generic authorization page 2021-09-23 15:50:14 -05:00
Rob Winch a1c7a39bd3 Fix Firewall link in nav 2021-09-23 15:50:14 -05:00
Rob Winch d52aab88af Update nav text Project Modules 2021-09-23 15:50:14 -05:00
Rob Winch be9ff16583 Remove Asciidoctor from the build in favor of Antora 2021-09-23 15:50:14 -05:00
Rob Winch 871bc1c42c The next version of Security is 5.6 2021-09-23 15:50:14 -05:00
Rob Winch 7e2eb6894f Use component name of '' 
This makes it so that the URL contains security in the root of the deploy
folder. We will do this until we decide to add projects other than the
security related projects.
 2021-09-23 15:50:14 -05:00
Rob Winch 52bfae5e27 Servlet Authentication no a link in nav 2021-09-23 15:50:14 -05:00
Rob Winch a7f3f54a33 architecture/index.adoc -> ../architecture.adoc 
BASE_DIR=docs/modules/ROOT/pages

git --no-pager diff HEAD~1 --diff-filter=R -M | sed -Ez "s%(\nrename to|rename from |similarity index [^\n]+|diff[^\n]+|$BASE_DIR/)%%g" | grep "\S" | while read rename_from_to; do
  from=$(echo $rename_from_to | cut -f 1 -d " ")
  to=$(echo $rename_from_to | cut -f 2 -d " ")
  echo "processing rename from $from to $to"
  find "$BASE_DIR/../" -name "*.adoc" | while read adoc_file; do
    sed -i -E "s%xref:$from%xref:$to%g" "$adoc_file"
  done
done
 2021-09-23 15:50:14 -05:00
Rob Winch 583761f916 unpwd->passwords folder 2021-09-23 15:50:14 -05:00
Rob Winch e4ce7249cc Generate antora.yml and push to spring-security-docs-generated 2021-09-23 15:50:14 -05:00
Rob Winch a0e9c67482 Fix antora version 2021-09-23 15:50:13 -05:00
Rob Winch 0b587dcef1 Reduce folders 2021-09-23 15:50:13 -05:00
Rob Winch 2da377ec88 Fix antora security version 2021-09-23 15:50:13 -05:00
Rob Winch e681e44268 overview/ -> ../ 2021-09-23 15:50:11 -05:00
Rob Winch a64a694c60 Indent testing subsections in nav.adoc 2021-09-23 15:49:45 -05:00
Rob Winch 32331185dc Fix local anchor 2021-09-23 15:49:45 -05:00
Rob Winch 29a7669101 rg "xref:\S+?#\S+\[\]" docs/modules -l -g "*.adoc" | while read adoc_file_to_replace; do 
echo "Replacing $adoc_file_to_replace"
  for id_file in build/ids/*.id; do
    id=$(basename $id_file | sed 's/\.id$//')
    xref_page=$(cat $id_file)
    if [[ "$adoc_file_to_replace" -ef "./docs/modules/ROOT/pages/$xref_page" ]]
    then
      echo "  - Skipping same page refid $id "
    else
      text_file=$(echo $id_file | sed 's/\.id$/.text/')
      default_text=$(cat $text_file)
      sed -i -E "s%xref:${xref_page}#${id}\[\]%xref:${xref_page}#${id}[$default_text]%g" $adoc_file_to_replace
    fi
  done
done
 2021-09-23 15:49:45 -05:00
Rob Winch 1f90df6a14 mkdir -p build/ids 
find -name "*.adoc" |  xargs -I{file} awk -v file={file} '/\[\[/ {  gsub("\[|\]", ""); id=$0; gsub("./docs/modules/ROOT/pages/", "", file); gsub("\[|\]", ""); id=$0;getline;text=$0; sub("^=+ ","", text); print file > "build/ids/"id".id"; print text > "build/ids/"id".text" }' {file}

find docs/modules -name "*.adoc"|while read adoc_file_to_replace; do
  echo "Replacing $adoc_file_to_replace"
  for id_file in build/ids/*.id; do
    id=$(basename $id_file | sed 's/\.id$//')
    xref_page=$(cat $id_file)
    if [[ "$adoc_file_to_replace" -ef "./docs/modules/ROOT/pages/$xref_page" ]]
    then
      echo "  - Skipping same page refid $id "
    else
      sed -i -E "s%<<$id(|,([^,>]+))>>%xref:${xref_page}#${id}[\2]%g" $adoc_file_to_replace
    fi
  done
done
 2021-09-23 15:49:43 -05:00
Rob Winch d2affef356 Fix images 
- Move images into assets/
- Remove figures form antora.yml
- Add :figures: to each page that uses it
 2021-09-23 15:47:21 -05:00
Rob Winch f5274926cf Fix up reactive/oauth2/index.adoc links 2021-09-23 15:47:21 -05:00
Rob Winch 88ac7a5d2e Fixup servlet/authentication/architecture/index.adoc 2021-09-23 15:47:21 -05:00
Rob Winch b8a362a60f Remove include servlet/saml2/index.adoc 2021-09-23 15:47:20 -05:00
Rob Winch c3dfb1711d Remove includes 2021-09-23 15:45:22 -05:00
Rob Winch f01a13aa52 Antora 
mkdir -p docs/modules/ROOT/
mkdir -p docs/modules/ROOT/pages/
git checkout antora-2.x docs/antora.yml
git checkout antora-2.x docs/modules/ROOT/nav.adoc
mv docs/manual/src/docs/asciidoc/images docs/modules/ROOT/
mv docs/manual/src/docs/asciidoc/_includes/* docs/modules/ROOT/pages/
cp ~/code/rwinch/spring-reference/*antora* ~/code/spring-projects/spring-security/
mv docs/modules/ROOT/pages/about docs/modules/ROOT/pages/overview
 2021-09-23 15:45:22 -05:00
heqiang 131078dcae Fix typo in digest.adoc 
Closes gh-10304
 2021-09-21 14:45:43 -04:00
Marcus Da Coregio 220de60142 Update What's New in 5.6 2021-09-20 12:18:27 -03:00
Josh Cummings f0fd09bf79 Update What's New in 5.6 2021-09-20 09:09:45 -06:00
Steve Riesenberg d207d03bf7 Update What's New for 5.6 2021-09-17 14:40:57 -05:00
Marcus Hert da Coregio ab098f171d Propagate TestSecurityContextHolder to SecurityContextHolder 
Create SecurityMockMvcResultHandlers to define security related MockMvc ResultHandlers
Create a method to allow copying the SecurityContext from the TestSecurityContextHolder to SecurityContextHolder

Closes gh-9565
 2021-09-17 16:39:53 -03:00
Marcus Da Coregio 017c218bbd Update What's New section 
Adds the SAML 2.0 Single Logout Support and the new Saml2AuthenticationRequestRepository
 2021-09-17 13:57:23 -03:00
Ashley Scopes 729418ad7a Fix typo in headers asciidoc 2021-09-15 15:05:08 -06:00
Dmitriy Bogdanov fe274e7553 Fix some list punctuation and capitalization in docs 2021-09-15 10:49:02 -06:00
Dmitriy Bogdanov 31a8f8c4df Fix the use of "s" with code blocks in docs 2021-09-15 10:49:02 -06:00
Dmitriy Bogdanov af4cc03dec Fix some typos and mistakes in docs 2021-09-15 10:49:02 -06:00
Anthony Lofton 8cba9fbf9d Updated test.adoc SecurityMockServerConfigurers method references 
Updated all references to SecurityMockServerConfigurers to refer to
correct methods.
Added documentation for mockJwt to include the
SecurityMockServerConfigurers class.
 2021-09-14 15:04:08 -03:00
Josh Cummings 4f06fc6ed1 Add Saml2LogoutConfigurer 
Closes gh-9497
 2021-09-13 16:39:48 -06:00
Josh Cummings c63d618b26 Add Single Logout Support 
Closes gh-8731
 2021-09-13 16:39:48 -06:00
Josh Cummings 6488295cad Add RelyingPartyRegistrationResolver 
Closes gh-9486
 2021-09-13 16:39:48 -06:00
Josh Cummings f5a525e740 Add Registration to Saml2Authentication 
Closes gh-9487
 2021-09-13 16:39:48 -06:00
heqiang 3443eac829 Fix typo in index.adoc 2021-09-13 16:32:32 +02:00
Marcus Da Coregio 6fae98a6f4 Update docs to point to ACL samples 
Closes gh-10110
 2021-09-06 11:14:57 -03:00
Josh Cummings 989c1419d5 Clarify OAuth 2.0 Resource Server Multitenancy Snippet 
Closes gh-10233
 2021-09-03 16:54:41 -06:00
Ayush Kohli 1cfe84922c Add Java examples to session management docs 
Closes gh-8979
 2021-08-26 10:14:48 +02:00
YevheniiLutsyshyn ac8e912ea1 Update a broken link to Spring Boot documentation 2021-08-17 11:33:49 +02:00
Josh Cummings aed203f367
Docs for WebSessionServerLogoutHandler 
Issue gh-4838
 2021-08-16 13:09:42 -06:00
Josh Cummings d5c953b106
Polish Saml2AuthenticationRequestRepository 
- Moved docs into AuthnRequest section, changed links to be more
semantically valuable to search engines
- Moved tests to be nearer to similar tests

Issue gh-9185
 2021-07-27 14:56:23 -06:00
Marcus Da Coregio 16e17d242e Add Saml2AuthenticationRequestRepository 
Closes gh-9185
 2021-07-27 14:55:53 -06:00
Steve Riesenberg bfe94f9a80 Update deprecated usage in reference docs 
Closes gh-10063
 2021-07-21 10:21:02 -05:00
dmitrilc a4431264e6 Update oauth2-resourceserver.adoc 
fix the name of the parameter, from failure to badCredentials

Replaces AuthenticationFailureEvent

Remove AuthenticationFailureEvent Reference

Closes gh-10062
 2021-07-16 11:56:57 -06:00
Rob Winch f73f213f50 Remove DependencySetPlugin 
Closes gh-10070
 2021-07-12 15:31:38 -05:00
Marcus Da Coregio ff47086d56 Update SAML docs to point to correct api url 
Closes gh-9953
 2021-07-09 11:09:55 -03:00
Luke Quinane e30b45c6fb Fix typos 2021-07-08 09:17:47 -03:00
Josh Cummings bd88f37a50
Document PasswordManagementConfigurer 
Issue gh-8657
 2021-07-01 16:58:43 -06:00
Evgeniy Cheban d121ab9565 Support A Well-Known URL for Changing Passwords 
Closes gh-8657
 2021-07-01 16:57:53 -06:00
Marcus Da Coregio 85e95719a0 Update docs links to point to minor version branches 
Closes gh-9986
 2021-07-01 09:01:25 -03:00
Marcus Hert da Coregio 03ded987af Allow Defining Custom SAML Response Validator 
Add a setter method into OpenSaml4AuthenticationProvider that allows defining a custom ResponseValidator

Closes gh-9721
 2021-06-30 08:26:42 -03:00
Marcus Hert da Coregio 6474a9e76e Allow Creating RelyingPartyRegistration from Metadata InputStream 
Update SAML2 Login reference documentation to reflect the changes

Closes gh-9558
 2021-06-30 08:02:24 -03:00
Marcus Da Coregio 58ebacc06f Use springFrameworkVersion property in docs links 
Closes gh-9987
 2021-06-29 13:20:47 -03:00
Josh Cummings 0080aeee94
Add OpenSAML 3 and 4 Explanation 
Closes gh-10014
 2021-06-28 13:25:07 -06:00
Josh Cummings 5940b8dee7
Update to use OpenSaml4AuthenticationProvider 
Closes gh-10013
 2021-06-28 13:25:02 -06:00
Josh Cummings 8d3e58f074
Polish Whitespace 
Issue gh-10013
 2021-06-28 13:24:57 -06:00
Eleftheria Stein da9d7414bd Add remaining Kotlin samples to reference docs 
Closes gh-8172
 2021-06-24 11:49:13 +02:00
Marcus Hert da Coregio bbf5614a9c Fix Broken Links in Docs 
Closes gh-9869
 2021-06-21 10:42:55 -03:00
Marcus Da Coregio 0aa93b18d6 Update links to point to migrated samples 
Closes gh-9816
 2021-06-21 10:42:55 -03:00
Marcus Hert da Coregio d60981fd59 Add messaging to documentation about sample migration 
Closes gh-9815
 2021-06-21 10:42:55 -03:00
Eleftheria Stein b51c18b37b Add missing WebFlux CORS Reference 
Closes gh-9951
 2021-06-18 16:31:02 +02:00
Eleftheria Stein 7f81b3fead Fix typos in RSocket reference docs 2021-06-18 14:39:15 +02:00
Eleftheria Stein ebef8c1425 Remove non-existent class from RSocket reference docs 
Closes gh-9949
 2021-06-18 14:15:45 +02:00
Eleftheria Stein 8bf970c805 Fix typos in WebFlux test docs 2021-06-18 13:12:10 +02:00
Eleftheria Stein ba8a5b1d20 Fix typo in WebFlux reference docs 2021-06-17 16:38:23 +02:00
Eleftheria Stein 56fd50fa2f Add remaining servlet Kotlin examples 
Issue gh-8172
 2021-06-16 10:34:21 +02:00
Eleftheria Stein 1b72e9d4e0 Fix typos in FAQ docs 2021-06-16 10:34:21 +02:00
Eleftheria Stein e89db9fd69 Fix typos in Mock MVC docs 2021-06-16 10:34:21 +02:00
Eleftheria Stein cf9071b0b2 Fix typos in SAML 2 docs 2021-06-15 09:53:53 +02:00
Josh Cummings c294050738
Anonymous Authentication Argument Resolution Docs 
Closes gh-3338
 2021-06-08 16:11:18 -06:00
Eleftheria Stein e3416640a7 Fix Resource Server clock skew default value in docs 
Closes gh-6611
 2021-06-02 12:19:36 +03:00
Josh Cummings 67e5c05a47 Polish AuthorizationManager Method Security 
- Removed consolidated pointcut advisor in favor of each interceptor
being an advisor. This allows Spring AOP to do more of the heavy
lifting of selecting the set of interceptors that applies
- Created new method context for after interceptors instead of
modifying existing one
- Added documentation
- Added XML support
- Added AuthorizationInterceptorsOrder to simplify interceptor
ordering
- Adjusted annotation lookup to comply with JSR-250 spec
- Adjusted annotation lookup to exhaustively search for duplicate
annotations
- Separated into three @Configuration classes, one for each set of
authorization annotations

Issue gh-9289
 2021-05-18 17:34:04 -06:00
Rob Winch 55f85bd3a1 Add Eleftheria Stein to Reference Authors 
Closes gh-9762
 2021-05-17 09:25:59 -05:00
Eleftheria Stein 30a203ed7a Add Kotlin samples for Jwt Client Authentication 
Issue gh-9578
 2021-05-17 10:33:42 +02:00
Joe Grandja e51ca79954 Document Jwt Client Authentication support 
Closes gh-9578
 2021-05-14 22:58:44 -04:00
Joe Grandja f874a12ddb Document jwt-bearer authorization grant 
Closes gh-9580
 2021-05-14 14:48:37 -04:00
Josh Cummings 498be8f431
Clarify requireInitialize Example 
Closes gh-9484
 2021-05-14 10:36:00 -06:00
Josh Cummings fc6fa79c86
Update permission-policy Docs 
Issue gh-9262
 2021-04-29 16:52:29 -06:00
Rob Winch 006b9b9607 master->main 
Closes gh-9683
 2021-04-26 16:55:43 -05:00
Josh Cummings 501d5ff497
Removed Method Security AuthorizationManager from What's New 
Issue gh-9596
 2021-04-12 15:53:44 -06:00
Josh Cummings 163b5943ca
Revert AuthorizationManager Method Security 2021-04-12 15:53:22 -06:00
Josh Cummings b352c8f1da
Removed SAML SLO from What's New 
Issue gh-9596
 2021-04-12 14:49:33 -06:00
Josh Cummings 8c92eddbe5
Revert "Add Registration to Saml2Authentication" 
This reverts commit efe42b93ce.
 2021-04-12 14:44:36 -06:00
Josh Cummings 55047fd996
Revert "Add RelyingPartyRegistrationResolver" 
This reverts commit 2f734a0975.
 2021-04-12 14:44:19 -06:00
Josh Cummings 37b40476e7
Revert "Add Single Logout Support" 
This reverts commit e807fae869.
 2021-04-12 14:44:04 -06:00
Josh Cummings 4e81bbe386
Revert "Add Saml2LogoutConfigurer" 
This reverts commit 6f52baba29.
 2021-04-12 14:43:19 -06:00
Josh Cummings 9b07b6a991
Added Sections to What's New 
Closes gh-9596
 2021-04-10 01:03:56 -06:00
Josh Cummings 6f52baba29
Add Saml2LogoutConfigurer 
Closes gh-9497
 2021-04-10 00:25:34 -06:00
Josh Cummings e807fae869
Add Single Logout Support 
Closes gh-8731
 2021-04-10 00:25:34 -06:00
Josh Cummings 2f734a0975
Add RelyingPartyRegistrationResolver 
Closes gh-9486
 2021-04-10 00:12:38 -06:00
Josh Cummings efe42b93ce
Add Registration to Saml2Authentication 
Closes gh-9487
 2021-04-10 00:12:38 -06:00
Josh Cummings df8abcfae7
Use Interceptors instead of Advice 
- Interceptor is a more descriptive term for what
method security is doing
- This also allows the code to follow a delegate
pattern that unifies both before-method and after-
method authorization

Issue gh-9289
 2021-04-09 18:45:31 -06:00
Josh Cummings 122346bd27
Document AuthorizationManager for Method Security 
Issue gh-9289
 2021-04-09 18:45:10 -06:00
Eleftheria Stein 21f9876d87 Add WebFlux section to What's New 
Closes gh-9590
 2021-04-09 19:36:43 +02:00
Eleftheria Stein e03fe7f089 Add coroutine support to pre/post authorize 
Closes gh-8143
 2021-04-09 19:33:06 +02:00
Eleftheria Stein 65b3f6769c Add Kotlin DSL section to What's New 
Closes gh-9589
 2021-04-09 16:36:47 +02:00
Eleftheria Stein c3739ff799 Add Configuration section to What's New 
Closes gh-9588
 2021-04-09 16:35:41 +02:00
Joe Grandja b225ab3bbe Add OAuth 2.0 Client section to What's New 
Closes gh-9587
 2021-04-09 10:15:14 -04:00
Rob Winch 60d3db5798 add management platform(project(":spring-security-dependencies")) 
Closes gh-9540
 2021-04-05 10:36:36 -05:00
Rob Winch de1b3e9d30 Remove DepencencyManagementPlugin 
Issue gh-9540
 2021-04-05 10:36:36 -05:00
Rob Winch 1a76ee7442 Update Gradle configuration names 
Closes gh-9540
 2021-04-05 10:36:36 -05:00
Eleftheria Stein 4a492846f1 Revert "Lock dependencies for 2.5.0-M3" 
This reverts commit f05cc6269c.
 2021-03-15 23:18:45 +01:00
Eleftheria Stein f05cc6269c Lock dependencies for 2.5.0-M3 2021-03-15 11:00:19 +01:00
Ivan 8f07ca4957
Fix missing return in example 
Closes gh-9481
 2021-03-03 13:37:26 +01:00
Josh Cummings c4be1c6a56
Revert "Lock Dependencies" 
This reverts commit a85caa4098.
 2021-02-11 15:49:59 -07:00
Josh Cummings a85caa4098
Lock Dependencies 2021-02-11 15:00:38 -07:00
Eleftheria Stein c836c716fe Fix typo in reactive CSRF docs 2021-02-08 15:02:16 +01:00
kavi87 10dce79c07 Update saml2-login.adoc 
Fix example on registering custom marshaller for saml request
 2021-02-04 10:06:39 -07:00
Josh Cummings 041e4aa22f
Change Example Name 
Closes gh-9379
 2021-01-28 11:22:02 -07:00
Rob Winch ad4497fb72 Add https://repo.spring.io/release to reference 2021-01-19 22:50:43 -06:00
Christophe Gilles 54d3839f63 Add permissionsPolicy http header 2020-12-11 12:32:18 +01:00
Eleftheria Stein 90b48554e4 Fix Custom DSL sample in docs 2020-12-09 10:48:15 +01:00
Eleftheria Stein d3ef340b26 Fix typos 2020-12-03 11:05:22 +01:00
Josh Cummings fe93326087
Update SAML 2.0 Metadata URL Docs 
Closes gh-9133
 2020-12-02 14:13:02 -07:00
Joe Grandja 58e3235093 Deprecate ClientAuthenticationMethod BASIC and POST 
Closes gh-9220
 2020-11-25 15:13:28 -05:00
Joe Grandja b95e1aa209 Revert "Lock dependencies for 5.5.0-M1" 
This reverts commit 25a7482c8c.
 2020-11-03 19:53:28 -05:00
Rob Winch 4e1f97a525 Document WithSecurityContextTestExecutionListener Nested Support 
Issue gh-9179
 2020-11-03 17:53:59 -06:00
Josh Cummings 8b7751f5f4
Polish Multiple Filter Chains Docs 
Issue gh-9178
 2020-11-02 13:49:24 -07:00
Guillaume Berche 69336fb3ec
Add Multiple Filter Chains Docs 
Closes gh-9178
 2020-11-02 13:45:04 -07:00
Guillaume Berche ab9a310485
Add Link to WebFlux Unit Tests 2020-11-02 13:45:04 -07:00
Josh Cummings b8f8fab54f
Document SigningMethod Support 
Issue gh-8952
Issue gh-9177
 2020-11-02 11:27:23 -07:00
Rob Winch 25a7482c8c Lock dependencies for 5.5.0-M1 2020-10-30 17:52:03 -05:00