ff19f04fca
Add JwtValidators append to default
...
Implemented simplified creation of default OAuth2TokenValidator with additional validators.
Closes gh-14831
2024-04-02 14:41:35 -07:00
7d66525e23
Add Compromised Password Checker
...
Closes gh-7395
2024-04-01 09:48:07 -03:00
abf9dc165a
Merge branch '6.2.x'
2024-03-26 10:55:48 -05:00
614123e6f9
Update tests that fail on Windows
...
Issue gh-14609
2024-03-26 10:49:47 -05:00
44033cd8b9
Make Internal Logout URI Configurable
...
Closes gh-14609
2024-03-22 16:31:44 -06:00
e18ec48134
Fix Test
...
Issue gh-14553
2024-03-22 16:31:42 -06:00
662cfed349
Make Internal Logout URI Configurable
...
Closes gh-14609
2024-03-22 16:28:21 -06:00
c95f009b23
Fix Test
...
Issue gh-14553
2024-03-22 16:27:16 -06:00
9898e0e993
Move AuthorizationAdvisorProxyFactory
...
To prevent package tangles
Issue gh-14596
2024-03-22 11:00:39 -06:00
795e44d11f
Add Value-Type Ignore Support
...
Issue gh-14597
2024-03-22 11:00:39 -06:00
ce54a6db18
Add TestAuthentication convenience method
...
Issue gh-14597
2024-03-19 10:27:03 -06:00
d169d5a835
Add AuthorizeReturnObject
...
Closes gh-14597
2024-03-19 10:27:03 -06:00
c611b7e33b
Add AuthorizationProxyFactory Reactive Support
...
Issue gh-14596
2024-03-15 11:44:30 -06:00
f541bce492
Polish AuthorizationAdvisorProxyFactory
...
- Ensure Reasonable Defaults
- Simplify Construction
Issue gh-14596
2024-03-15 11:44:30 -06:00
77c30c431e
Polish tests
...
Issue gh-11783
Issue gh-13763
2024-03-14 15:40:43 -05:00
80a8d3831a
Simplify reactive OAuth2 Client configuration
...
Closes gh-13763
2024-03-14 15:40:43 -05:00
52dfbfb5b3
Add Authorization Proxy Support
...
Closes gh-14596
2024-03-13 14:35:07 -06:00
d6382b83dc
Configure token-exchange via a bean
...
Issue gh-5199
Issue gh-11783
Closes gh-14701
2024-03-07 11:03:10 -06:00
bade66e588
Fix Circular Dependency
...
Closes gh-14674
2024-03-01 14:21:13 -07:00
f8ff056eb6
Update Max Sessions on WebFlux
...
Delete WebSessionStoreReactiveSessionRegistry.java and gives the responsibility to remove the sessions from the WebSessionStore to the handler
Issue gh-6192
2024-02-28 10:06:45 -03:00
a5ce8ae87f
Polish Max Sessions on WebFlux
...
This commit changes the PreventLoginServerMaximumSessionsExceededHandler to invalidate the WebSession in addition to throwing the error, this is needed otherwise the session would still be saved with the security context. It also changes the SessionRegistryWebSession to first perform the operation on the delegate and then invoke the needed method on the ReactiveSessionRegistry
Issue gh-6192
2024-02-27 11:12:50 -03:00
c639d0a514
Add AOP Integration Test
...
Closes gh-14637
2024-02-26 13:56:56 -07:00
4d383023cb
Add meta-annotation parameter support
...
Closes gh-14480
2024-02-26 10:50:35 -07:00
347eeb17d5
Merge branch '6.2.x'
2024-02-26 10:17:18 -07:00
2471df4d36
Merge branch '6.1.x' into 6.2.x
2024-02-26 10:17:04 -07:00
27cd9fa86c
Don't Use Deprecated Class
...
Issue gh-14628
2024-02-26 10:06:59 -07:00
093b5572af
Merge branch '6.2.x'
2024-02-22 12:15:42 -07:00
bb6045ebea
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14648
2024-02-22 12:15:17 -07:00
2fdd541ea5
Merge branch '5.8.x' into 6.1.x
...
Closes gh-14647
2024-02-22 12:15:00 -07:00
45c37c4454
Remove duplicate setSecurityContextHolderStrategy
...
Closes gh-14592
2024-02-22 12:14:35 -07:00
21580fd27d
Merge branch '6.2.x'
2024-02-16 13:31:20 -03:00
15306c1007
Merge branch '6.1.x' into 6.2.x
2024-02-16 13:21:15 -03:00
750cb30ce4
Add AuthenticationTrustResolver.isAuthenticated
2024-02-16 13:08:29 -03:00
7f0433c805
Merge branch '6.2.x'
2024-02-12 17:01:38 -07:00
2702a64be7
Use Localhost for Internal Logout Endpoint
...
Closes gh-14553
2024-02-12 17:00:58 -07:00
34526c3e01
Merge branch '6.2.x'
2024-02-12 12:54:29 -07:00
3ab323663a
Do Not Wire Default OidcSessionStrategy without OidcLogoutConfigurer
...
Closes gh-14558
2024-02-12 12:53:48 -07:00
ccb2f06d0d
Partially revert fc658d10
...
OpenIDAuthenticationFilter exists in versions < 6.0
Issue gh-14531
2024-02-07 10:13:34 -03:00
dea6d6b49c
Merge branch '6.2.x'
...
Closes gh-14566
2024-02-07 09:38:10 -03:00
ad96837e59
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14565
2024-02-07 09:38:02 -03:00
ba1068e368
Merge branch '5.8.x' into 6.1.x
...
Closes gh-14564
2024-02-07 09:37:52 -03:00
fc658d10d3
fix security filter sort in javadoc
...
Closes gh-14531
2024-02-07 09:37:01 -03:00
915d68e216
Remove includeExpiredSessions parameter
...
The reactive implementation of max sessions does not keep track of expired sessions, therefore we do not need such parameter
Issue gh-6192
2024-02-06 10:43:00 -03:00
a282887906
Merge branch '6.2.x'
2024-02-05 15:42:09 -07:00
b43b3b144e
Merge branch '6.1.x' into 6.2.x
2024-02-05 15:41:58 -07:00
ffe9577487
Merge branch '5.8.x' into 6.1.x
2024-02-05 15:41:35 -07:00
7c3a6a567e
Fix Compilation Errors
...
Issue gh-14525
2024-02-05 15:18:31 -07:00
07e0b1dc37
Saml2 LogoutFilter Is Placed Before Common LogoutFilter
...
Closes gh-14525
2024-02-05 15:18:31 -07:00
3a53422478
Fix Failing Test
...
Closes gh-14467
2024-01-29 17:14:30 -07:00
27ebeefb14
Fix Failing Test
...
Closes gh-14467
2024-01-26 11:24:00 -07:00
bdc0bd6b78
Add usernameParameter and passwordParameter to FormLoginDsl
...
Closes gh-14474
2024-01-24 09:56:38 -03:00
3f65f600de
Use AuthorizationEventPublisher Bean
...
- For Jsr250MethodInterceptor and SecuredMethodInterceptor
Closes gh-14401
2024-01-17 17:40:38 -07:00
1daa9e27e2
Merge branch '6.2.x'
2024-01-05 15:17:01 -03:00
e2bab7b7ef
Add .serialized suffix and consider them as binary in Git
...
Issue gh-3737
2024-01-05 15:14:22 -03:00
85177c0178
Merge branch '6.2.x'
...
Closes gh-14408
2024-01-05 14:22:49 -03:00
4fb6a33d36
Verify Serializable Objects Are Deserializable Between Minor Versions
...
This commit introduces a test that verifies that Spring Security domain classes that implements Serializable and have the same serialVersionUID as SpringSecurityCoreVersion#SERIAL_VERSION_UID can be deserialized between minor versions.
This commit also introduces another test that should be used to generate the files containing the serialized content of the objects.
Closes gh-3737
2024-01-05 12:00:02 -03:00
eeb2f5d108
Merge branch '6.2.x'
2023-12-28 12:56:52 -06:00
428a3a2703
Merge branch '6.1.x' into 6.2.x
2023-12-28 12:56:36 -06:00
3beb583207
Merge branch '5.8.x' into 6.1.x
2023-12-28 12:56:25 -06:00
16dc6be3c8
Update copyright year
...
Issue gh-14329
2023-12-28 12:54:29 -06:00
c88aaedb48
Updated broken documentation link in javadocs
2023-12-28 12:54:29 -06:00
707588f870
Merge branch '6.2.x'
2023-12-26 15:58:51 -03:00
d385b53e3c
Merge branch '6.1.x' into 6.2.x
2023-12-26 15:58:39 -03:00
92af758f1f
Make springSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor passive
...
Instead of excluding the bean from AOT processing, we avoid redefining the beans if they are present or in the expected state.
Issue gh-14362
2023-12-26 15:58:16 -03:00
778a63a763
Revert "Exclude SpringSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor from AOT processing"
...
This reverts commit 8a93178da7
2023-12-26 15:10:15 -03:00
5ad34d1f92
Merge branch '6.2.x'
...
Closes gh-14381
2023-12-26 11:20:51 -03:00
dd20f0694d
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14380
2023-12-26 11:20:41 -03:00
7cd626fe25
Fix FilterChainProxy cannot be found when @EnableWebSecurity(debug = true)
...
Closes gh-14370
2023-12-26 11:20:09 -03:00
08d764dc84
Merge branch '6.2.x'
...
Closes gh-14378
2023-12-26 10:42:45 -03:00
f95cda6be7
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14377
2023-12-26 10:42:37 -03:00
364bc10e78
Add hints for CompositeFilterChainProxy
...
Closes gh-14359
2023-12-26 10:41:56 -03:00
a628384d20
Merge branch '6.2.x'
...
Closes gh-14368
2023-12-22 08:40:24 -03:00
737678c66e
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14367
2023-12-22 08:40:15 -03:00
8a93178da7
Exclude SpringSecurityHandlerMappingIntrospectorBeanDefinitionRegistryPostProcessor from AOT processing
...
Closes gh-14362
2023-12-22 08:40:07 -03:00
ec02c22459
Add Request Path Extraction Support
...
Closes gh-13256
2023-12-19 18:15:49 -07:00
99218db84a
Add order offset to @EnableMethodSecurity
...
Closes gh-13214
2023-12-19 17:57:24 -07:00
c19f3d9d06
Merge branch '6.2.x'
2023-12-18 15:19:54 -07:00
74860c4aff
Merge branch '6.1.x' into 6.2.x
2023-12-18 15:19:48 -07:00
fbafe41991
Merge branch '5.8.x' into 6.1.x
2023-12-18 15:19:40 -07:00
b7f10cd50a
Merge branch '6.2.x'
2023-12-18 15:19:07 -07:00
b031a4c0f6
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14350
2023-12-18 15:18:48 -07:00
e058b559b8
Polish Method Security Eager-Loading
...
Issue gh-11596
2023-12-18 15:18:09 -07:00
9a5d991383
Address eager-loading of infrastructure beans
...
Closes gh-11596
2023-12-18 15:16:00 -07:00
33800c0124
Address eager-loading of infrastructure beans
...
Closes gh-11596
2023-12-18 14:25:48 -07:00
fc007aa373
Check OpenSAML Version in XML Support
...
Closes gh-12483
2023-12-18 11:51:15 -07:00
d7a9a19161
Merge branch '6.2.x'
2023-12-18 11:47:39 -07:00
03e48905c7
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14346
2023-12-18 11:47:23 -07:00
b855ccdb09
Merge branch '5.8.x' into 6.1.x
...
Closes gh-14345
2023-12-18 11:46:04 -07:00
eaaa813ede
Fix header value typo
...
Closes gh-11948
2023-12-18 10:42:50 -07:00
8a34e32a24
Polish IpAddressAuthorizationManager
...
Closes gh-10577
2023-12-15 16:54:58 -07:00
ea7c720ce7
Add hasIpAddress to Kotlin DSL
...
Closes gh-10577
2023-12-15 16:54:58 -07:00
9f33d43097
Merge branch '6.2.x'
...
Use CompositeFilterChainProxy
2023-12-15 01:17:14 -06:00
c7047add5d
Merge branch '6.1.x' into 6.2.x
...
Use CompositeFilterChainProxy
2023-12-15 01:16:21 -06:00
142b268a21
Use CompositeFilterChainProxy
...
By extending FilterChainProxy CompositeFilterChainProxy is more passive since
users often depend on the type of the springSecurityFilterChain Bean being
FilterChainProxy (even though it can already be other types - when debug is
enabled).
Issue gh-14128
2023-12-15 01:15:38 -06:00
465642828a
Merge branch '6.2.x'
...
Add HandlerMappingIntrospector Caching
Closes gh-14333
2023-12-14 16:11:08 -06:00
6dd29520b0
Merge branch '6.1.x' into 6.2.x
...
Add HandlerMappingIntrospector Caching
Closes gh-14332
2023-12-14 16:10:50 -06:00
70dfb3d391
Add HandlerMappingIntrospector Caching
...
Closes gh-14128
2023-12-14 16:08:36 -06:00
57ab15127a
Add Max Sessions on WebFlux
...
Closes gh-6192
2023-12-11 09:48:34 -03:00
e6bea1cfa1
Polish RoleHierarchy Bean Usage
...
Issue gh-12783
2023-12-07 16:27:14 -07:00
b76f7c029d
Use available RoleHierachy Bean for MethodSecurity Config
...
Closes gh-12783
2023-12-07 16:27:14 -07:00
bb6b55aca3
Add Not Support
...
Closes gh-14058
2023-12-07 16:24:19 -07:00
d50698a269
Prepare for Spring Security 6.3
...
Closes gh-14210
2023-12-05 15:49:42 -07:00
3ab235cd56
Merge branch '6.1.x'
2023-12-01 15:54:44 -07:00
641722823e
Merge branch '6.0.x' into 6.1.x
2023-12-01 15:45:32 -07:00
f536b2652f
Merge branch '5.8.x' into 6.0.x
2023-12-01 15:45:03 -07:00
c623303ca5
Add Logging
...
Now if the ServletRegistration API available message is shown, it will
also be accompanied with a startup warning in the logs.
Closes gh-14221
2023-12-01 12:57:46 -07:00
a98baa7522
Polish ServletRegistration API Deferral
...
Tomcat uses different ServletContext instances from startup- and request-time.
This commit ensures that if the programmatic API isn't available at startup-time,
then use the ServletContext attached to the HttpServletRequest at runtime.
Issue gh-13794
2023-12-01 12:57:45 -07:00
15d9b7824c
Merge branch '6.1.x'
2023-11-17 12:27:31 -07:00
d958787561
Merge branch '6.0.x' into 6.1.x
2023-11-17 12:27:04 -07:00
12f074b8ce
Merge branch '5.8.x' into 6.0.x
2023-11-17 12:25:13 -07:00
d961307044
Polish RequestMatcher Description
...
Issue gh-13794
2023-11-17 12:24:38 -07:00
4131a38f9e
Revert "Add forServletPattern"
...
This reverts commit 762319b6be
2023-11-17 12:02:14 -07:00
5958828113
Merge branch '6.1.x'
2023-11-17 12:01:57 -07:00
aa1a022605
Merge branch '6.0.x' into 6.1.x
...
Closes gh-14165
2023-11-17 11:46:20 -07:00
c6c6eb4d66
Merge branch '5.8.x' into 6.0.x
...
Closes gh-14164
2023-11-17 11:45:59 -07:00
4ca54683ae
Defer requestMatchers Validation to Runtime
...
Closes gh-13794
2023-11-17 11:23:21 -07:00
00da9c9092
Use assertj assertions
2023-11-17 09:05:38 -03:00
e3ab1c94d7
Use assertj assertions
2023-11-17 09:04:50 -03:00
a7da9491d9
Use assertj assertions
2023-11-17 09:03:36 -03:00
97516727a4
Add Coroutine Support
...
Closes gh-12080
2023-11-15 11:48:37 -07:00
77acaaa3b7
Use bean factory method
...
Closes gh-14094
2023-11-06 12:55:57 -06:00
624dcafcf2
Merge branch '6.0.x' into 6.1.x
...
Closes gh-14085
2023-11-01 12:12:02 -06:00
fa15c975ff
Merge branch '5.8.x' into 6.0.x
...
Closes gh-14084
2023-11-01 12:11:20 -06:00
ffd12ee3b9
Refine requestMatcher Validation Rules
...
Closes gh-14078
2023-10-31 17:08:24 -06:00
447f40949c
Revert unnecessary merges on 6.1.x
...
This commit removes unnecessary main-branch merges starting from
9f8db22b774d6ff49b9ded6ff670d1c823b0079444fad21363
2023-10-31 15:22:15 -05:00
9db33f33c7
Revert unnecessary merges on 6.0.x
...
This commit removes unnecessary main-branch merges starting from
8750608b5b5dce82c48b
2023-10-31 15:11:45 -05:00
96ebab324c
Remove Type Parameter
...
Closes gh-14012
2023-10-13 22:09:16 -06:00
8f829dd1d7
Refine requestMatcher Validation Rules
...
Closes gh-13850
2023-10-12 09:29:08 -06:00
762319b6be
Add forServletPattern
...
Closes gh-13562
2023-10-12 09:29:08 -06:00
07b6c451fd
Merge branch '6.1.x'
...
Closes gh-13884
2023-09-29 11:47:38 -03:00
8adfc9b463
Merge branch '6.0.x' into 6.1.x
...
Closes gh-13883
2023-09-29 11:46:48 -03:00
92c82191c9
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13882
2023-09-29 11:46:00 -03:00
64e2a2ff8b
Apply updated Code Style
...
Closes gh-13881
2023-09-29 11:44:32 -03:00
ff374935fb
Verify ReactorContext when using Virtual Threads
...
Closes gh-12791
2023-09-25 12:01:31 -05:00
d48b8697bd
Fix mockito usage
...
Issue gh-13810
2023-09-19 10:39:04 -05:00
d6ff58bb7f
Update Mockito to 5.5.0
...
Closes gh-13810
2023-09-19 10:39:03 -05:00
0e8d04ab40
Merge branch '6.1.x'
2023-09-19 14:20:25 +01:00
94bba79834
Merge branch '6.0.x' into 6.1.x
2023-09-19 14:20:17 +01:00
0c3f154f38
Merge branch '5.8.x' into 6.0.x
2023-09-19 14:20:01 +01:00
ac04c2e675
Add dependency between rncToXsd and sourcesJar
...
Since processResources is configured directly instead of via the source
set container, an explicit dependency task between rncToXsd and
sourcesJar must be defined.
Issue gh-13845
2023-09-19 14:19:45 +01:00
e63d7fd9e9
Add dependency between rncToXsd and versionlessXsd
...
Since processResources is configured directly instead of via the source
set container, an explicit dependency task between rncToXsd and
versionlessXsd must be defined.
Issue gh-13845
2023-09-19 14:19:33 +01:00
718c470910
Prevent creating duplicate .xsd entries
...
This change removes .xsd entries that would appear in the top level of
the assembled artifacts. This occurred because the output of the
rncToXsd task does not consider the path beneath the resources
directory. To fix this, the processResources task is directly
configured with a copy spec so the required path can be set.
Issue gh-13845
2023-09-19 14:19:19 +01:00
cb33fd7850
Add OIDC Back-Channel Logout Support
...
Closes gh-12570
2023-09-16 15:12:21 -06:00
91c89451e7
Merge branch '6.1.x'
...
Automate spring-security.xsd
Closes gh-13826
2023-09-14 23:44:34 -05:00
7627c2df46
Merge branch '6.0.x' into 6.1.x
...
Automate spring-security.xsd
Closes gh-13825
2023-09-14 23:43:27 -05:00
342735043d
Merge branch '5.8.x' into 6.0.x
...
Automate spring-security.xsd
Closes gh-13824
2023-09-14 23:42:31 -05:00
779541b340
Merge branch '5.7.x' into 5.8.x
...
Automate spring-security.xsd
Closes gh-13823
2023-09-14 23:37:53 -05:00
5b293d2116
Automate spring-security.xsd
...
Closes gh-13819
2023-09-14 16:01:50 -05:00
9a06885247
Merge branch '6.1.x'
...
Closes gh-13815
2023-09-14 14:50:11 +01:00
59a9aa3268
Merge branch '6.0.x' into 6.1.x
...
Closes gh-13814
2023-09-14 14:49:29 +01:00
aeafcc1377
Defer MethodSecurityExpressionHandler Resolution
...
When using Spring Security ACL and compiling to Native, in order to create the '*AuthorizationMethodInterceptor' Proxy beans during build time, Spring tries to resolve the DataSource bean since the DataSource can be a dependency of some AclService implementations, and fails because some required data source properties are not available during build time.
This commit defers the initialization of the MethodSecurityExpressionHandler to the runtime.
Closes gh-12653
2023-09-14 14:48:24 +01:00
f5942aac73
Merge branch '6.1.x'
2023-09-13 14:23:51 +01:00
b4ce77c028
Merge branch '6.0.x' into 6.1.x
2023-09-13 14:23:28 +01:00
48babb7efa
Merge branch '5.8.x' into 6.0.x
2023-09-13 14:23:01 +01:00
620e6e0c34
Add rncToXsd task to resources set
...
This addresses a deprecation warning causing build caching to be
disabled for some tasks. With this change, we tell Gradle that the
rncToXsd task produces output that should be considered a resource.
This clears up ambiguities when computing the task graph.
2023-09-13 13:58:42 +01:00
4ebfa2c804
Use lazy API to configure rncToXsd task
...
This avoids configuring the task eagerly.
2023-09-13 13:58:05 +01:00
9df9cb5aed
refactor: AssertJ best practices
...
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D
Co-authored-by: Moderne <team@moderne.io>
2023-09-12 16:18:14 -06:00
92256f0522
Support nested suspend calls for Kotlin coroutines
...
Closes gh-13764
2023-09-05 00:23:30 -05:00
1a45602dbb
Fix mockito usage
2023-09-01 15:27:54 -05:00
ea1ec646b2
Fix test failures related to response headers
...
These tests began failing on snapshots after changes in
Spring Framework's `DispatcherServlet` to reset the response
on an error.
For now, we can have these tests operate with a 200 OK response.
An issue was opened in the spring-framework issuer tracker to
discuss this and address `CorsFilter` (and any other filter) that
writes headers that would be cleared on an error.
See spring-projects/spring-framework#31154
2023-09-01 15:27:54 -05:00
fe5a55fc13
Merge branch '6.1.x'
...
Closes gh-13723
2023-08-20 23:15:57 -06:00
0df1884372
Merge branch '6.0.x' into 6.1.x
...
Closes gh-13722
2023-08-20 23:10:00 -06:00
5fb6f5768c
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13666 in 6.0.x
Closes gh-13721
2023-08-20 23:07:36 -06:00
28f98b3351
Improve Error Message
...
Closes gh-13667
2023-08-20 22:53:57 -06:00
ed96e2cddf
Ignore Unmappable Servlets
...
Closes gh-13666
2023-08-20 22:53:55 -06:00
8d58113b61
Merge branch '6.1.x'
...
Closes gh-13656
2023-08-16 17:54:55 -06:00
d2d1f19133
Merge branch '6.0.x' into 6.1.x
...
Closes gh-13655
2023-08-16 17:54:37 -06:00
ca0140c586
saml2Login Honors AuthenticationProvider bean
...
Closes gh-13654
2023-08-16 17:54:14 -06:00
3ba5cc0e40
Add CSRF Exception
...
Issue gh-13653
2023-08-16 16:54:50 -06:00
87ae2d41b3
Update Mockito Usage
...
Issue gh-13542
2023-08-16 16:30:43 -06:00
985e569685
Polish gh-13608
2023-08-10 17:30:54 -05:00
6353d90047
Add integrity attribute for signin.css
...
Closes gh-13486
2023-08-10 17:30:52 -05:00
5828e4e65c
Simplify OAuth2 Client configuration
...
Issue gh-11783
2023-08-09 14:14:09 -05:00
f3d90b38e2
Add OAuth2AuthorizedClientManager Registrar
2023-08-09 14:14:09 -05:00
75e0068925
Merge branch '6.1.x'
2023-08-07 16:03:55 -06:00
8d4a024809
Update Copyright
...
PR gh-13472
2023-08-07 16:00:56 -06:00
cd6f33c03e
Using putIfAbsent instead of put
2023-08-07 16:00:18 -06:00
12c64a9b1d
Merge branch '6.1.x'
...
Dependencies are resolved from appropriate repositories
Closes gh-13624
2023-08-07 09:55:18 -05:00
d4d715d8e1
Merge branch '6.0.x' into 6.1.x
...
Dependencies are resolved from appropriate repositories
Closes gh-13623
2023-08-07 09:54:27 -05:00
4257a97504
Merge branch '5.8.x' into 6.0.x
...
Dependencies are resolved from appropriate repositories
Closes gh-13622
2023-08-07 09:51:55 -05:00
30bc2634d7
Optimize configuration of project repositories
...
This change applies repository content filtering to configured
repositories, reducing the time spent during dependency resolution.
This fixes an issue where requests for 'org.opensaml',
'net.shibboleth.utilities' and 'net.minidev' dependencies were being
made in the Spring releases repositories, resulting in many failed
requests during dependency resolution and increased resolution times.
Closes gh-13582
2023-08-07 09:51:42 -05:00
33d904d708
Merge branch '6.1.x'
...
Closes gh-13581
2023-07-24 11:32:23 -06:00
442d3fb99d
Merge branch '6.0.x' into 6.1.x
...
Closes gh-13580
2023-07-24 11:31:52 -06:00
ee13216882
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13579
2023-07-24 11:31:29 -06:00
c4f061c63d
Do Not Re-register Method Security Advisors
...
Closes gh-13572
2023-07-24 11:24:03 -06:00
9dc7bdd329
Merge branch '6.1.x'
2023-07-17 11:21:06 -06:00
cf2c8da3d5
Merge branch '6.0.x' into 6.1.x
2023-07-17 11:10:04 -06:00
fe7bee9236
Merge branch '5.8.x' into 6.0.x
2023-07-17 11:09:38 -06:00
bb46a54270
Add DispatcherServlet to Tests
...
Issue gh-13551
2023-07-17 10:58:30 -06:00
df239b6448
Improve RequestMatcher Validation
...
Closes gh-13551
2023-07-17 08:41:30 -06:00
8f5793afb1
Merge branch '6.1.x'
2023-07-17 09:17:10 -03:00
aaa31312bd
Merge branch '6.0.x' into 6.1.x
2023-07-17 09:16:45 -03:00
cbef118026
Merge branch '5.8.x' into 6.0.x
2023-07-17 09:16:20 -03:00
a939f17890
Merge branch '5.7.x' into 5.8.x
2023-07-17 09:15:56 -03:00
fe9bc26bdc
Merge branch '5.6.x' into 5.7.x
2023-07-17 09:13:28 -03:00
7813a9ba26
Use default PathPatternParser instance
2023-07-17 09:12:28 -03:00
b3ad2b0dc5
Don't Mock OAuth2AuthorizedClientRepository
...
Issue gh-13542
Issue gh-13546
2023-07-14 18:44:35 -06:00
b0022a0ae8
Update Mockito Usage
...
Issue gh-13542
2023-07-14 18:44:34 -06:00
cf79af2386
Update Kotlin Test Usage
...
Issue gh-13539
2023-07-14 18:38:58 -06:00
6c3636d780
Update Removed Usages
...
Issue gh-13544
2023-07-14 18:38:58 -06:00
30d09c5192
Merge branch '6.1.x'
...
Closes gh-13495
2023-07-12 14:31:56 -03:00
f62c9d3be6
Merge branch '6.0.x' into 6.1.x
...
Closes gh-13494
2023-07-12 14:31:45 -03:00
933b302979
Fix once-per-request="true" not taking any effect
...
Closes gh-13491
2023-07-12 14:30:18 -03:00
8d0e426654
Generate Shared Test SAML Response
...
Issue gh-13433
2023-07-11 10:36:06 -06:00
f2f19270da
Update to OpenSAML 4.3.0
...
Closes gh-13433
2023-07-10 17:56:42 -06:00
a0540f5c65
Deprecate AbstractConfiguredSecurityBuilder#apply
...
Closes gh-13436
2023-06-30 11:53:47 -03:00
1ff5eb6b57
Add with() method to apply SecurityConfigurerAdapter
...
This method is intended to replace .apply() because it will not be possible to chain configurations when .and() gets removed
Closes gh-13204
2023-06-29 14:52:30 -03:00
4855290a76
Merge branch '6.1.x'
2023-06-29 10:31:25 -06:00
87e07d59da
Merge branch '6.0.x' into 6.1.x
...
Closes gh-13199
2023-06-29 10:08:10 -06:00
1abfd2c801
Only Register as Advisor in Proxy Mode
...
Now that https://github.com/spring-projects/spring-framework/issues/30689
is addressed.
Closes gh-13198
2023-06-29 10:07:11 -06:00
618847418f
Automatically enable .cors() if CorsConfigurationSource bean is present
...
Closes gh-5011
2023-06-23 09:51:46 -03:00
52e12ad64b
Replace deprecated methods
2023-06-22 13:19:55 -06:00
8efdc5c926
Polish Contribution
...
Issue gh-13215
2023-06-22 16:00:47 -03:00
401058d5ff
Implemented AuthorizeHttpRequestsConfigurer to consider GrantedAuthorityDefaults for custom rolePrefix
...
Closes gh-13215
2023-06-22 16:00:46 -03:00
c5461b17de
EnableMethodSecurity annotation does not get imported when defined as a meta-annotation
...
Closes gh-12870
2023-06-22 15:15:25 -03:00
208fb62db9
Update Deprecated Usage
...
Issue gh-12629
2023-06-22 11:24:25 -06:00
9b603b99ab
Using modern Java features
2023-06-22 11:24:25 -06:00
7e01ebdd92
Remove LazyCsrfTokenRepository usage
...
Closes gh-13194
2023-06-22 11:23:35 -06:00
fb910e2997
Prepare for Spring Security 6.2
...
Closes gh-14316
2023-06-22 11:03:28 -06:00
acf1d34d94
Merge branch '6.0.x'
2023-06-19 11:13:57 -03:00
2686af0c4d
Revert "Only Register as Advisor in Proxy Mode"
...
This reverts commit 35ad1f85
2023-06-19 11:13:39 -03:00
fc1e465fd0
Merge branch '6.0.x'
2023-06-05 13:34:58 -06:00
c053f6f0c6
Make eclipse/vscode project import work
...
- Gradle projects contain cycles which comes from dependencies to
test sources which is not a problem in gradle but eclipse metadata
generation is getting confused. Thus we need settings to relax errors
org.eclipse.jdt.core.circularClasspath=warning
org.eclipse.jdt.core.incompleteClasspath=warning
- Additionally .classpath entries needs to be changes having
without_test_code=false
test=false
- Aspects end up getting source dirs `build/classes/java/main`
and `build/resources/main` which never have sources. Vscode complains
about that, eclipse is fine. Remove those from entries.
- In tests `htmlunit` depends on `xml-apis`. `xml-apis` are now part
of jdk and eclipse complains about that. Excluse these in a gradle build.
- Both eclipse and vscode don't currently work with buildship, due to
project cycles and buildship cannot be configured. It's possible to
create metadata from `eclipse` task manually which then can be imported.
For this we need to disable automatic import in vscode using buildship.
This goes to `.vscode/settings.json` workspace config.
- Then with these changes user can do something like
git clean -fxd && ./gradlew clean build cleanEclipse eclipse -x checkstyleNohttp -x test -x integrationTest
and import projects manually.
2023-06-05 13:34:30 -06:00
a939fa63a1
Merge branch '6.0.x'
...
Closes gh-13282
2023-06-05 16:04:27 -03:00
4e3517e03a
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13281
2023-06-05 16:03:58 -03:00
b47420f8a2
Merge branch '5.7.x' into 5.8.x
...
Closes gh-13280
2023-06-05 16:02:30 -03:00
7250abc185
Does not apply a Configurer when disabled from another DSL
...
Closes gh-13203
2023-06-05 16:01:20 -03:00
537e10cf9c
Improve javadoc adding how to stick with defaults and link to documentation
...
Closes gh-13273
2023-06-02 15:05:17 -03:00
f566ed0afd
Update Symlink for 6.1
...
Issue gh-13131
2023-05-24 14:44:42 -06:00
ff0c82b019
Merge branch '6.0.x'
2023-05-24 14:41:55 -06:00
71703dc371
Update Symlink for 6.0
...
Issue gh-13131
2023-05-24 14:40:50 -06:00
90b37d6d07
Merge branch '5.8.x' into 6.0.x
2023-05-24 14:38:23 -06:00
73cb9862ad
Update Symlink for 5.8
...
Issue gh-13131
2023-05-24 14:37:18 -06:00
be409ada10
Merge branch '6.0.x'
...
Closes gh-13209
2023-05-22 15:43:43 -06:00
7c54c0e4fa
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13208
2023-05-22 15:43:27 -06:00
62ede47d86
Merge branch '5.7.x' into 5.8.x
...
Closes gh-13207
2023-05-22 15:42:36 -06:00
1eefd433b6
Add spring-security.xsd symlink
...
Closes gh-13131
2023-05-22 15:42:02 -06:00
31f1604f66
Merge branch '6.0.x'
...
Closes gh-13199
2023-05-19 16:44:18 -06:00
7efa275abc
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13198
2023-05-19 16:43:57 -06:00
35ad1f857e
Only Register as Advisor in Proxy Mode
...
Closes gh-13160
2023-05-19 16:33:46 -06:00
49366907e2
Merge branch '6.0.x'
...
Closes gh-13183
2023-05-15 17:31:48 -06:00
b438bc5384
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13182
2023-05-15 17:30:14 -06:00
f4915890cc
Use Spec Order for Verifying Signatures
...
Closes gh-12346
2023-05-15 17:24:22 -06:00
5814f614c7
Merge branch '6.0.x'
...
Closes gh-13128
2023-05-02 16:56:37 -06:00
46ad9c122e
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13127
2023-05-02 16:56:06 -06:00
e9a02bc6e9
RememberMeConfigurer Picks Up SecurityContextRepository
...
Closes gh-13104
2023-05-02 16:46:35 -06:00
45efd48b93
Merge branch '6.0.x'
...
Closes gh-13122
2023-05-02 10:13:24 -03:00
69338ecdfa
Only Observe AuthenticationManager if it is not null
...
Closes gh-13084
2023-05-02 10:12:46 -03:00
a44e91d044
fix javadoc typo
2023-04-24 16:41:17 -06:00
f261242db1
Merge branch '5.7.x' into 5.8.x
2023-04-24 16:33:29 -06:00
Max Batischev
Marcus Hert Da Coregio
Steve Riesenberg
Josh Cummings
DingHao
Rob Winch
Andreas Asplund
y-tomida
Geir Hedemark
DingHao
Taehong Kim
Yan Kardziyaka
brunodmartins
DerChris173
kandaguru17
Steve Riesenberg
Eric Haag
Tim te Beek
Olivier Vanekem
Joe Grandja
Seongguk Jeong
Claudio Nave
Evgeniy Cheban
Krzysztof Krason
Janne Valkealahti
lukasz.migdalek
SeasonPan