Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
17,099 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

3102 Commits

Author SHA1 Message Date
Angel Aguilera 1ce1ff92de Update messages_ca.properties 
Add translation for new message properties
 2023-12-07 15:28:06 -06:00
Josh Cummings d50698a269
Prepare for Spring Security 6.3 
Closes gh-14210
 2023-12-05 15:49:42 -07:00
YangSiJun528 3f6b6aa523 Update Javadoc for getAuthorizationDecision method 
Added missing description for `@return` tag.
 2023-11-21 10:07:42 -03:00
Marcus Hert Da Coregio e3ab1c94d7 Use assertj assertions 2023-11-17 09:04:50 -03:00
Marcus Hert Da Coregio a7da9491d9 Use assertj assertions 2023-11-17 09:03:36 -03:00
Josh Cummings 97516727a4
Add Coroutine Support 
Closes gh-12080
 2023-11-15 11:48:37 -07:00
Josh Cummings 24abf45128
Merge remote-tracking branch 'origin/6.1.x' 2023-11-07 13:13:29 -07:00
Josh Cummings f295e9d28f
Merge branch '6.0.x' into 6.1.x 
Closes gh-14111
 2023-11-07 13:09:20 -07:00
Josh Cummings bb354f1895
Merge branch '5.8.x' into 6.0.x 
Closes gh-14110
 2023-11-07 13:07:25 -07:00
Josh Cummings 11a21896dd
Defer SecurityContextHolderStrategy Lookup 
Due to how early method interceptors are loaded during startup
it's reasonable to consider scenarios where applications are
changing the global security context holder strategy during
startup.

Closes gh-12877
 2023-11-07 12:36:16 -07:00
Marcus Hert Da Coregio 6e0fb2fc96 Merge branch '6.1.x' 2023-11-06 15:03:06 -03:00
Marcus Hert Da Coregio 99c84aa935 Merge branch '6.0.x' into 6.1.x 2023-11-06 15:02:09 -03:00
Marcus Hert Da Coregio 3893136084 Remove Gradle deprecations 
Stop using JavaPluginConvention type and replace outputFile with destinationFile

Issue gh-13864
 2023-11-06 15:01:38 -03:00
Steve Riesenberg d0a5ada2da
Fix formatting 2023-10-31 15:38:44 -05:00
Steve Riesenberg 447f40949c
Revert unnecessary merges on 6.1.x 
This commit removes unnecessary main-branch merges starting from
9f8db22b77 and adds the following
needed commit(s) that were made afterward:

- 4d6ff49b9d
- ed6ff670d1
- c823b00794
- 44fad21363
 2023-10-31 15:22:15 -05:00
Steve Riesenberg 9db33f33c7
Revert unnecessary merges on 6.0.x 
This commit removes unnecessary main-branch merges starting from
8750608b5b and adds the following
needed commit(s) that were made afterward:

- 5dce82c48b
 2023-10-31 15:11:45 -05:00
Martin Lukas 1589d19c8b Fix typos in spring-security core module 2023-10-31 09:48:43 -03:00
valery1707 cc86afe658 Use same case for all fields in toString 2023-10-16 14:42:53 -06:00
Marcus Da Coregio 07b6c451fd Merge branch '6.1.x' 
Closes gh-13884
 2023-09-29 11:47:38 -03:00
Marcus Da Coregio 8adfc9b463 Merge branch '6.0.x' into 6.1.x 
Closes gh-13883
 2023-09-29 11:46:48 -03:00
Marcus Da Coregio 92c82191c9 Merge branch '5.8.x' into 6.0.x 
Closes gh-13882
 2023-09-29 11:46:00 -03:00
Marcus Da Coregio 64e2a2ff8b Apply updated Code Style 
Closes gh-13881
 2023-09-29 11:44:32 -03:00
Steve Riesenberg 7f61d40415
Fix code style 2023-09-27 10:51:08 -05:00
Marcus Da Coregio 33fb37e134 Fix Tests on JDK 21 
Issue gh-13811
 2023-09-27 11:59:09 -03:00
Steve Riesenberg ff374935fb
Verify ReactorContext when using Virtual Threads 
Closes gh-12791
 2023-09-25 12:01:31 -05:00
Steve Riesenberg 247ce5dcab
Add integration tests for virtual threads 
Closes gh-12790
 2023-09-19 10:39:05 -05:00
Steve Riesenberg ecf8467cac
Fix tests on JDK 21 
Issue gh-12790
Issue gh-13811
 2023-09-19 10:39:04 -05:00
Steve Riesenberg d6ff58bb7f
Update Mockito to 5.5.0 
Closes gh-13810
 2023-09-19 10:39:03 -05:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices 
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-09-12 16:18:14 -06:00
Steve Riesenberg 92256f0522 Support nested suspend calls for Kotlin coroutines 
Closes gh-13764
 2023-09-05 00:23:30 -05:00
Josh Cummings 75e0068925
Merge branch '6.1.x' 2023-08-07 16:03:55 -06:00
Seongguk Jeong bcd4dcc15c Refactor equals method 
Using the accessor method for fields instead of directly access
 2023-08-07 16:00:18 -06:00
Seongguk Jeong 8df8d4022e Fix documentation typo 
changed "user name" to "username"
 2023-08-07 16:00:18 -06:00
Seongguk Jeong de1357cbd1 Refactor equals method 
To use the accessor method for username instead of directly accessing the attribute.
 2023-08-07 16:00:18 -06:00
Seongguk Jeong ea19f82b8a Using pattern matching for instanceof 2023-08-07 16:00:18 -06:00
maimate-dev 7b2cb59dab
Localize AccessDeniedException message 
Closes gh-13419
 2023-07-27 16:50:41 -05:00
Josh Cummings cf79af2386
Update Kotlin Test Usage 
Issue gh-13539
 2023-07-14 18:38:58 -06:00
Josh Cummings a08036aee5
Change from AwaitKt to MonoKt 
Issue gh-13539
 2023-07-14 18:38:58 -06:00
Josh Cummings 6c3636d780
Update Removed Usages 
Issue gh-13544
 2023-07-14 18:38:58 -06:00
Josh Cummings a99dff7de3
Remove Reference to LocalVariableTableParameterNameDiscoverer 
Issue gh-2572
 2023-07-14 18:38:58 -06:00
Josh Cummings b62dd851a2
Merge branch '6.1.x' 
Closes gh-13489
 2023-07-11 17:03:53 -06:00
Josh Cummings 0579be0d25
Merge branch '6.0.x' into 6.1.x 
Closes gh-13488
 2023-07-11 17:02:59 -06:00
Josh Cummings 6393702e70
Fix allOf/anyOf Abstain Logic 
Closes gh-13487
 2023-07-11 17:02:07 -06:00
Claudio Nave 52e12ad64b Replace deprecated methods 2023-06-22 13:19:55 -06:00
Evgeniy Cheban 0cefb27928 Simplify RequestMatcherDelegatingAuthorizationManager.Builder matcher registration 
Closes gh-11624
 2023-06-22 16:07:30 -03:00
Josh Cummings 339185998a
Update JavaDoc 
Issue gh-12782
 2023-06-22 11:26:45 -06:00
kandaguru17 fa2bc745f7 Use AuthoritiesAuthorizationManager in Jsr250AuthorizationManager 
Closes gh-12782
 2023-06-22 11:25:54 -06:00
Krzysztof Krason 9b603b99ab Using modern Java features 2023-06-22 11:24:25 -06:00
Josh Cummings 97cff7c715 Polish TestingAuthenticationToken 
Restore List constructor to retain binary compatibility.
 2023-06-22 11:22:15 -06:00
Laurent Martelli f25d76c48f TestingAuthenticationToken takes broader collection type 
So that callers do not have to cast.

Closes gh-12953
 2023-06-22 11:22:15 -06:00
Josh Cummings fb910e2997
Prepare for Spring Security 6.2 
Closes gh-14316
 2023-06-22 11:03:28 -06:00
Steve Riesenberg 1f04baa4a3
Polish gh-13290 
Issue gh-12533
 2023-06-13 14:17:40 -05:00
Dmitry Korotych 4def405067
Allow authorities to be overridden in UserBuilder 
Issue gh-12533
 2023-06-13 14:12:47 -05:00
Josh Cummings 613165b86c
Merge branch '6.0.x' 2023-05-11 11:46:10 -06:00
Josh Cummings c6c091b12e
Merge branch '5.8.x' into 6.0.x 2023-05-11 11:43:37 -06:00
Josh Cummings 05ef215b88 Align Formatting 
Issue gh-13132
 2023-05-11 11:42:51 -06:00
Florian Cramer 9669747245 Ignore synthetic methods when checking for duplicate annotations 
Closes gh-13132
 2023-05-11 11:42:51 -06:00
SeasonPan a44e91d044 fix javadoc typo 2023-04-24 16:41:17 -06:00
Josh Cummings 9244989b2e
Fix allOf/anyOf Abstain Logic 
Closes gh-13069
 2023-04-24 15:36:17 -06:00
Josh Cummings 072feb2fb8
Merge branch '6.0.x' 2023-04-24 12:52:36 -06:00
Josh Cummings 599ed3e96b
Polish Format 
Issue gh-13079
 2023-04-24 12:52:26 -06:00
Josh Cummings 57294be795
Merge branch '6.0.x' 
Closes gh-13083
 2023-04-24 12:49:56 -06:00
Josh Cummings 73a543d318
Handle Empty Role 
Closes gh-13079
 2023-04-24 12:49:30 -06:00
Marcus Da Coregio 1a4a2a9055 Merge branch '5.8.x' into 6.0.x 2023-04-14 13:32:10 -03:00
Marcus Da Coregio 54117d7d27 Fix test suffix to align with checkstyle 2023-04-14 13:29:15 -03:00
Rob Winch 20b0156d5a Merge branch '6.0.x' 
Closes gh-12984
 2023-04-10 11:26:01 -05:00
Rob Winch 9c3f91a2d3 Merge branch '5.8.x' into 6.0.x 
Closes gh-12983
 2023-04-10 11:25:32 -05:00
Rob Winch 16dcfd1cfe Merge branch '5.7.x' into 5.8.x 
Closes gh-12982
 2023-04-10 11:25:01 -05:00
Yuanhang Guo c69df9fba0 Fix javadoc typo in ReactiveAuthorizationManager 
Closes gh-12978
 2023-04-10 11:24:49 -05:00
Josh Cummings 25ff3d69bd
Polish WebFlux Observation contextualName 
Issue gh-12156
 2023-04-04 13:15:44 -06:00
Marcus Da Coregio 5e2dd0351d Merge branch '6.0.x' 
Closes gh-12964
 2023-04-04 10:21:52 -03:00
Petr Svoboda 44c4a4ae86 Add new DaoAuthenticationProvider constructor 
Add a new constructor to the DaoAuthenticationProvider, which allows
providing a custom PasswordEncoder to prevent instantiation of the
default delegating PasswordEncoder in the default constructor.

This provides a way to instantiate the DaoAuthenticationProvider on JDKs
where the default delegating PasswordEncoder cannot be instantiated due
to limited JCE providers for compliance reasons (e.g., FIPS).

Closes gh-12874
 2023-04-04 10:21:22 -03:00
Josh Cummings 607e40d366 Polish ObservationConvention Configuration 
Change to setObservationConvention so that it reads more clearly
when used, for example `authenticationManager.setObservationConvention`
is clearer than `authenticationManager.setConvention`.

Change unit test names to follow team conventions.

Issue gh-12534
 2023-03-28 15:01:26 -06:00
Josh Cummings f1b14de3ba Format ObservationConvention Configuration 
Issue gh-12534
 2023-03-28 15:01:26 -06:00
Braunson 8d933fcb03 Support Customizing Observation Conventions 
Closes gh-12534
 2023-03-28 15:01:26 -06:00
Josh Cummings a7562ad950
Update io.spring.javaformat to 0.0.38 
Closes gh-12891
 2023-03-20 10:44:35 -06:00
Josh Cummings f588f9fa9a
Merge branch '6.0.x' 2023-03-03 15:02:51 -07:00
Josh Cummings acf48721cd
Merge branch '5.8.x' into 6.0.x 2023-03-03 15:02:34 -07:00
Josh Cummings ebabcaa51a
Merge branch '5.7.x' into 5.8.x 2023-03-03 15:02:07 -07:00
bist 094bf1b527 Validate hasRole Input 
There are no check for role prefix in AuthorizeHttpRequestsConfigurer#XXXrole
methods. This PR adds check for the same. Now the configuration
will fail if role/s start with prefix for hasRole and hasAnyRole methods.

Closes #12581
 2023-03-03 15:00:34 -07:00
Pascal Verdage 659b65a666 Fix javadox typo 2023-02-15 15:20:48 -07:00
Marcus Da Coregio eb35d3055f Merge branch '6.0.x' 
Closes gh-12640
 2023-02-07 09:25:33 -03:00
Marcus Da Coregio 52ed165476 Move classpath checks to class member variable 
Closes gh-11437
 2023-02-07 09:25:06 -03:00
stillya 3229bfa40f Add empty authorities by default 
Closes gh-12533
 2023-01-30 15:37:10 -06:00
Josh Cummings f9d674cb10
Merge branch '6.0.x' 
Closes gh-12525
 2023-01-11 10:14:01 -07:00
Josh Cummings 4d2dab9b6b
Lookup Parent Observation 
Closes gh-12524
 2023-01-11 10:13:33 -07:00
Evgeniy Cheban 782b792e7b SecuredAuthorizationManager should allow customizing underlying authorization manager 
Closes gh-12233
 2023-01-10 17:48:48 -07:00
Evgeniy Cheban 3369cf5fe9 Consider replacing SecurityExpressionRoot.AuthenticationSupplier with SingletonSupplier 
Closes gh-12487
 2023-01-06 11:21:33 -07:00
Evgeniy Cheban 1bbbd046c3 Polish gh-12231 
- Update copyright header
- Use Set.of instead of HashSet in AuthorityAuthorizationManager
- Align roleHierarchy test name with other tests in AuthoritiesAuthorizationManagerTests
 2023-01-05 10:50:52 -07:00
Evgeniy Cheban e0d676c03f SecuredAuthorizationManager should cache annotation's value 
Closes gh-12232
 2023-01-05 10:50:52 -07:00
Marcus Da Coregio 25133a97f9 Merge branch '6.0.x' 
Closes gh-12436
 2022-12-19 10:45:49 -03:00
Marcus Da Coregio f1824f8a5d Merge branch '5.8.x' into 6.0.x 
Closes gh-12435
 2022-12-19 10:45:25 -03:00
Guillaume Husta 36d83f863a Fix Javadoc since tag for class ExpressionAuthorizationDecision 
Closes gh-12411
 2022-12-19 10:44:36 -03:00
Evgeniy Cheban 855282ac3b Add Authority String AuthorizationManager 
Closes gh-12231
 2022-12-02 14:12:02 -07:00
Josh Cummings 6cbbf06456
Merge branch '6.0.x' 2022-11-30 14:20:01 -07:00
Josh Cummings a76b1f7a51
Merge branch '5.8.x' into 6.0.x 2022-11-30 14:19:38 -07:00
Josh Cummings 68a344d238
Merge branch '5.7.x' into 5.8.x 2022-11-30 14:18:59 -07:00
Josh Cummings e23c1cf7a7
Merge branch '5.6.x' into 5.7.x 2022-11-30 14:18:12 -07:00
Josh Cummings 14a48ea939
Fix formatting 
Issue gh-12143
 2022-11-29 20:15:13 -07:00
Junsung Cho 709de43e89
Fix typo in JavaDoc 
Closes gh-12143
 2022-11-29 20:15:12 -07:00
Josh Cummings 9bf2d3cd86
Polish JavaDoc 
- Replace ampersand
- Correct since version

Issue gh-11510
 2022-11-29 16:46:55 -07:00
Karthikeyan R 5fcbb9f4ed
Add AuthenticationTrustResolver#isFullyAuthenticated 
Closes gh-11510
 2022-11-29 16:46:54 -07:00
Marcus Da Coregio 4de92145e2 Update version on tag library and global serialization value 2022-11-23 13:12:48 -03:00
Josh Cummings 9d876fce82 Polish ExpressionAuthorizationDecision 
Issue gh-11493
 2022-11-17 15:09:52 -07:00
Josh Cummings e08ed89403 Polish Span and Meter Names 
Closes gh-12156
 2022-11-17 15:09:52 -07:00
Josh Cummings 88e64bac0c Polish Tests 
Issue gh-11992
 2022-11-17 15:09:52 -07:00
Kacper Piasta 08948f2c37
Add Polish localization to error messages from ExceptionTranslationFilter 
Issue gh-9315
 2022-11-14 18:10:36 -07:00
Kacper Piasta a3d278380e Add Polish localization to error messages from ExceptionTranslationFilter 2022-11-14 18:06:02 -07:00
Steve Riesenberg bd43c1f28a
Merge branch '5.8.x' 
# Conflicts:
#	web/src/main/java/org/springframework/security/web/context/HttpSessionSecurityContextRepository.java
#	web/src/test/java/org/springframework/security/web/context/SecurityContextRepositoryTests.java
 2022-10-17 19:35:27 -05:00
Steve Riesenberg c75ca10900
Add DeferredSecurityContext 
Issue gh-12023
 2022-10-17 19:33:58 -05:00
Marcus Da Coregio db7f52db4e Add hints to invoke SecurityContextImpl#getAuthentication 
Closes gh-11987
 2022-10-13 09:06:16 -03:00
Josh Cummings d3d8f7d60f
Mark Observations with Security Context Events 
Closes gh-11992
 2022-10-12 20:32:23 -06:00
Josh Cummings 8c610684f3
Instrument Authentication and Authorization 
Closes gh-11989
Closes gh-11990
 2022-10-12 20:32:21 -06:00
Josh Cummings 827384e386
Add Micrometer Dependency 2022-10-12 19:26:21 -06:00
Josh Cummings a453a71bed
Merge remote-tracking branch 'origin/5.8.x' 2022-10-10 12:37:15 -06:00
Josh Cummings 8d096554f8
Add AuthorizationEvent 
Closes gh-11972
 2022-10-10 12:28:57 -06:00
Josh Cummings 8f10deb602
Merge remote-tracking branch 'origin/5.8.x' 2022-09-30 17:01:22 -06:00
Josh Cummings f054505d6d
Support Deferred Contexts 
Closes gh-11817
Issue gh-10913
 2022-09-30 16:49:47 -06:00
Emil Sierżęga fc7f87feac Removed unused test classes SomeDomainObject/Manager 2022-09-30 10:55:36 -05:00
Marcus Da Coregio ef879aadd6 Add native hint for the users JDBC schema 
Closes gh-11907
 2022-09-29 09:42:37 -03:00
Josh Cummings e071c28e8a
Merge remote-tracking branch 'origin/5.8.x' 2022-09-20 16:25:45 -06:00
Evgeniy Cheban c1d27612af Simplify AuthorizationManager composition 
Closes gh-11625
 2022-09-20 16:24:45 -06:00
Josh Cummings 46f402243b
Merge remote-tracking branch 'origin/5.8.x' 2022-09-20 16:11:16 -06:00
Josh Cummings 3f8503f1b4
Deprecate AccessDecisionManager et al 
Closes gh-11302
 2022-09-20 16:09:59 -06:00
Josh Cummings b1fd9af723
Merge remote-tracking branch 'origin/5.8.x' into main 2022-08-26 16:01:40 -06:00
Josh Cummings 0f58620643 Add AspectJ AuthorizationManager Support 
Closes gh-11326
 2022-08-26 15:59:08 -06:00
Josh Cummings 84f765a89c
Merge remote-tracking branch 'origin/5.8.x' into main 2022-08-25 14:46:48 -06:00
Josh Cummings e990174c89
Polish ReactiveMethodSecurity Support 
- Changed annotation property to useAuthorizationManager
to match related XML support
- Moved support found in bean post-processors back into
interceptors directly. This reduces the number of components to
maintain and simplifies ongoing support
- Added @Deprecated annotation to indicate that applications
should use AuthorizationManagerBeforeReactiveMethodInterceptor and
AuthorizationManagerAfterReactiveMethodInterceptor instead. While
true that the new support does not support coroutines, the existing
coroutine support is problematic since it cannot be reliably paired
with other method interceptors
- Moved expression handler configuration to the constructors
- Constrain all method security interceptors to require publisher types
- Use ReactiveAdapter to check for single-value types as well

Issue gh-9401

Polish
 2022-08-25 14:36:03 -06:00
Josh Cummings 6fd23d2567
Add MockMethodInvocation Constructor 
Issue gh-9401
 2022-08-25 14:36:02 -06:00
Evgeniy Cheban cbb4f40f0c ReactiveAuthorizationManager + Reactive Method Security 
Closes gh-9401
 2022-08-25 14:35:04 -06:00
Rob Winch 670b71363d Merge branch '5.8.x' 
Closes gh-11749
 2022-08-23 16:03:50 -05:00
Rob Winch 2fb625db84 Remove mockito deprecations 
Issue gh-11748
 2022-08-23 15:59:52 -05:00
Marcus Da Coregio 38c05ad31c Add native hints for basic @PostAuthorize usage 
Closes gh-11737
 2022-08-23 15:17:14 -03:00
Marcus Da Coregio bd5a05dcdd Polish CoreSecurityRuntimeHints 2022-08-23 15:06:07 -03:00
Evgeniy Cheban c4b0e9bd74
Add remaining methods from ExpressionUrlAuthorizationConfigurer to AuthorizeHttpRequestsConfigurer 
- Added fullyAuthenticated
- Added rememberMe
- Added anonymous

Closes gh-11360
 2022-07-14 13:00:07 -06:00
Evgeniy Cheban 400cd60368 Add remaining methods from ExpressionUrlAuthorizationConfigurer to AuthorizeHttpRequestsConfigurer 
- Added fullyAuthenticated
- Added rememberMe
- Added anonymous

Closes gh-11360
 2022-07-14 12:48:39 -06:00
Josh Cummings 20def5e25d
Consolidate ExpressionAuthorizationDecision 
Issue gh-11493
 2022-07-14 09:25:17 -06:00
Josh Cummings 8d0084842b
Add MethodExpressionAuthorizationManager 
Closes gh-11493
 2022-07-14 09:25:16 -06:00
Josh Cummings 9b43316f4d
Polish InterceptMethodsBeanDefinitionDecorator 
Issue gh-11328
 2022-07-14 09:25:16 -06:00
Josh Cummings db25a37320
Consolidate ExpressionAuthorizationDecision 
Issue gh-11493
 2022-07-13 17:58:16 -06:00
Josh Cummings 281814a955
Add MethodExpressionAuthorizationManager 
Closes gh-11493
 2022-07-13 17:58:16 -06:00
Josh Cummings 51475e2583
Polish InterceptMethodsBeanDefinitionDecorator 
Issue gh-11328
 2022-07-13 17:57:38 -06:00
Marcus Da Coregio 7abea4a964 Add RuntimeHints suffix for RuntimeHintsRegistrar 
Closes gh-11497
 2022-07-13 10:14:43 -03:00
Joe Grandja 177baba8c9 RuntimeHintsPredicates moved to predicate package 2022-07-12 16:00:50 -04:00
Rob Winch 4a5c0ac904 Fix Formatting 
Issue gh-11474
 2022-07-08 12:35:40 -05:00
Rob Winch 03cd9920aa DelegatingSecurityContextTaskScheduler implements new Methods 
Closes gh-11474
 2022-07-08 12:32:09 -05:00
Marcus Da Coregio a87f7aa2e1 Polish CoreSecurityHintsTests 
Use ParameterizedTest to simplify repetitive test setup

Issue gh-11431
 2022-07-06 15:21:45 -03:00
Josh Cummings 459003e1b3
Use SecurityContextHolderStrategy for Context Propagation 
Issue gh-11060
 2022-06-30 11:19:33 -06:00
Josh Cummings 38cb6c3172
Use SecurityContextHolderStrategy for Context Propagation 
Issue gh-11060
 2022-06-30 11:18:07 -06:00
Josh Cummings b316a3217b
Add SecurityContextHolderStrategy for Jaas 
Issue gh-11060
Issue gh-11061
 2022-06-28 09:35:54 -06:00
Josh Cummings ee66850aed
Add SecurityContextHolderStrategy for Jaas 
Issue gh-11060
Issue gh-11061
 2022-06-28 09:26:05 -06:00
Josh Cummings ec1bfa12f0
Use SecurityContextHolderStrategy for Database Support 
Issue gh-11060
 2022-06-28 09:15:56 -06:00
Josh Cummings 52d8e10ace
Use SecurityContextHolderStrategy for Database Support 
Issue gh-11060
 2022-06-28 09:08:42 -06:00
Josh Cummings 7a9c873d7d
Add SecurityContextHolderStrategy to Method Security 
Issue gh-11060
 2022-06-27 13:17:45 -06:00
Josh Cummings 25c74896d1
Add SecurityContextHolderStrategy to Method Security 
Issue gh-11060
 2022-06-27 13:02:59 -06:00
Marcus Da Coregio a8c30f79e6 Add Core, MVC and MethodSecurity runtime hints 
Closes gh-11431
 2022-06-27 09:25:49 -03:00
Rob Winch d32f74d19d SecurityContextHolder Deferred SecurityContext 
Closes gh-10913
 2022-06-17 17:03:19 -05:00
Rob Winch b6d43e58c0 SecurityContextHolder Deferred SecurityContext 
Closes gh-10913
 2022-06-17 16:59:09 -05:00
Josh Cummings a31a99b591
Add SecurityContextHolderStrategy to Default Components 
Issue gh-11060
 2022-06-17 11:58:36 -06:00
Josh Cummings 31e25b115e Add SecurityContextHolderStrategy to Default Components 
Issue gh-11060
 2022-06-17 11:28:10 -06:00
Marcus Da Coregio 4c2401a576 Revert "Make source code compatible with JDK 8" 
This reverts commit 60ed3602f6.
 2022-06-02 19:24:42 +02:00
Evgeniy Cheban 5eadcba7d1
Add RoleHierarchy to AuthorityAuthorizationManager 
Added roleHierarchy field to AuthorityAuthorizationManager
that defaults to NullRoleHierarchy along with setter method to override.

Closes gh-11304
 2022-06-01 09:00:08 -06:00
Evgeniy Cheban d557d2d0eb Add RoleHierarchy to AuthorityAuthorizationManager 
Added roleHierarchy field to AuthorityAuthorizationManager
that defaults to NullRoleHierarchy along with setter method to override.

Closes gh-11304
 2022-06-01 08:28:16 -06:00
James d124fa2858
Fix typo in comment for changePassword method 2022-05-25 12:34:55 -06:00
Evgeniy Cheban 5540bbcf0b
createEvaluationContext should defer lookup of Authentication 
- Added createEvaluationContext method that accepts Supplier<Authentication>
- Refactored classes that use EvaluationContext to use lazy initialization of Authentication

Closes gh-9667
 2022-05-18 17:36:17 -06:00
Evgeniy Cheban 362f15534e createEvaluationContext should defer lookup of Authentication 
- Added createEvaluationContext method that accepts Supplier<Authentication>
- Refactored classes that use EvaluationContext to use lazy initialization of Authentication

Closes gh-9667
 2022-05-18 17:34:14 -06:00
Evgeniy Cheban 2b4794475e
Polish gh-11188 2022-05-12 16:32:11 -05:00
Evgeniy Cheban 3f861f7f20
Polish gh-11188 2022-05-12 16:20:43 -05:00
Evgeniy Cheban e01b1e7f38 Polish gh-11188 2022-05-12 16:19:48 -05:00
Marcus Da Coregio 806e05855c Replace removed context-related operators 
Closes gh-11194
 2022-05-10 14:58:02 -03:00
Evgeniy Cheban dbd96a9e3f
Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager 
Closes gh-11188
 2022-05-09 16:05:52 -06:00
Evgeniy Cheban 9f669c5e3c
Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager 
Closes gh-11188
 2022-05-09 16:05:04 -06:00
Evgeniy Cheban 89019fb340 Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager 
Closes gh-11188
 2022-05-09 16:03:25 -06:00
Evgeniy Cheban 286e95893a @EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy 
Removed proxy unwrapping in case of resolving Method Security annotations,
this cause an issue when interfaces which are implemented by the proxy was skipped,
resulting in a missing security checks on those methods.

Closes gh-11175
 2022-05-03 13:19:35 -05:00
Evgeniy Cheban 66bbfc7a50 @EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy 
Removed proxy unwrapping in case of resolving Method Security annotations,
this cause an issue when interfaces which are implemented by the proxy was skipped,
resulting in a missing security checks on those methods.

Closes gh-11175
 2022-05-03 13:17:23 -05:00
Evgeniy Cheban 9193e46800 @EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy 
Removed proxy unwrapping in case of resolving Method Security annotations,
this cause an issue when interfaces which are implemented by the proxy was skipped,
resulting in a missing security checks on those methods.

Closes gh-11175
 2022-05-03 13:15:53 -05:00
Josh Cummings 0e9228d10a
Prepare for Spring Security 5.8 2022-05-02 16:34:23 -06:00
Emil Sierżęga 33ee3058d4 Add missing insufficientAuthentication property in messages_*.properties 2022-04-29 10:38:42 +02:00
Emil Sierżęga da2a68e182 Add missing untranslated properties in messages_lt 2022-04-29 10:38:42 +02:00
Emil Sierżęga 5832202a4d Fixed bad property name in messages_it 2022-04-29 10:38:42 +02:00
Emil Sierżęga 22dac674da Remove unnecessary dots from messages_cs_CZ 2022-04-29 10:38:42 +02:00
Emil Sierżęga 8b06a4bbe2 Remove trailing space from messages_ru 2022-04-29 10:38:42 +02:00
Emil Sierżęga 47c4b0426d Add missing badLdapConnection property in messages_*.properties 2022-04-29 10:38:42 +02:00
Josh Cummings 61c0a25bcd
Add default strategy constructor 
Closes gh-11059
 2022-04-05 17:32:14 -06:00
Josh Cummings 057f4a86d5
Add default strategy constructor 
Closes gh-11059
 2022-04-05 17:29:47 -06:00
Josh Cummings bdd5f86526
Polish Authorization Event Support 
- Added spring-security-config support
- Renamed classes
- Changed contracts to include the authenticated user and secured
object
- Added method security support

Issue gh-9288
 2022-03-29 16:37:21 -06:00
Parikshit Dutta 990831db85
Add authorization events 
Closes gh-9288
 2022-03-29 16:22:43 -06:00
Josh Cummings 061f69eb70
Polish Authorization Event Support 
- Added spring-security-config support
- Renamed classes
- Changed contracts to include the authenticated user and secured
object
- Added method security support

Issue gh-9288
 2022-03-29 16:03:19 -06:00
Parikshit Dutta bd9434882f
Add authorization events 
Closes gh-9288
 2022-03-29 15:44:21 -06:00
Steve Riesenberg 8aa7029d07 Fix checkstyle errors 
Issue gh-10989
 2022-03-18 22:53:29 -05:00
Norbert Nowak abd33389be Add UsernamePasswordAuthenticationToken factory methods 
- unauthenticated factory method
 - authenticated factory method
 - test for unauthenticated factory method
 - test for authenticated factory method
 - make existing constructor protected
 - use newly factory methods in rest of the project
 - update copyright dates

Closes gh-10790
 2022-03-09 15:49:29 -07:00
Norbert Nowak ac9c29b2a0 Add UsernamePasswordAuthenticationToken factory methods 
- unauthenticated factory method
 - authenticated factory method
 - test for unauthenticated factory method
 - test for authenticated factory method
 - make existing constructor protected
 - use newly factory methods in rest of the project
 - update copyright dates

Closes gh-10790
 2022-03-09 15:23:35 -07:00
Josh Cummings 4ede1feae5 Polish Saml2 Jackson Support 
Issue gh-10905
 2022-03-01 14:17:17 -07:00
Ulrich Grave 2334610fa9 Add Jackson Support for Saml2 Module 
Closes gh-10905
 2022-03-01 14:17:17 -07:00
Josh Cummings 6c3d183a94 Polish Saml2 Jackson Support 
Issue gh-10905
 2022-03-01 13:56:02 -07:00
Ulrich Grave df84826c95 Add Jackson Support for Saml2 Module 
Closes gh-10905
 2022-03-01 12:07:55 -07:00
Eleftheria Stein a2d1965c25 Add DEFAULT_USER_SCHEMA_DDL_LOCATION constant 
Closes gh-10837
 2022-02-15 11:30:45 +01:00
Eleftheria Stein c6b185465d Add DEFAULT_USER_SCHEMA_DDL_LOCATION constant 
Closes gh-10837
 2022-02-15 11:24:23 +01:00
Rob Winch 70fa8b1fdb Add Support for @Transient SecurityContext 
Closes gh-9995
 2022-02-03 09:45:51 -06:00
Rob Winch 6f0029fc44 Add Support for @Transient SecurityContext 
Closes gh-9995
 2022-02-02 17:04:44 -06:00