Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
15,261 Commits 30 Branches 330 Tags 114 MiB
Commit Graph

431 Commits

Author SHA1 Message Date
Marcus Da Coregio 1a4a2a9055 Merge branch '5.8.x' into 6.0.x 2023-04-14 13:32:10 -03:00
Marcus Da Coregio 54117d7d27 Fix test suffix to align with checkstyle 2023-04-14 13:29:15 -03:00
Brummolix d4ed0ad0cf Replace deprecated OpenSaml methods 2023-04-10 18:24:22 -06:00
Liviu Gheorghe 7e305dd003 Don't use raw xml saml authentication request for response validation 
closes gh-12961
 2023-04-03 15:11:08 -06:00
Josh Cummings 46a40e7b38
Merge branch '6.0.x' 
Closes gh-12937
 2023-03-27 16:42:28 -06:00
Josh Cummings 20358e769d
Merge branch '5.8.x' into 6.0.x 
Closes gh-12936
 2023-03-27 16:39:48 -06:00
Josh Cummings c15589ede1
Merge branch '5.7.x' into 5.8.x 
Closes gh-12935
 2023-03-27 16:35:46 -06:00
Tatiana Slednikova a106188add Add nameIdFormat processing to OpenSamlAuthenticationRequestResolver 
Closes gh-12825
 2023-03-27 16:33:11 -06:00
Josh Cummings fd4541be0c Add AuthnRequstsSigned to OpenSaml implementations 
Issue gh-12841
 2023-03-20 14:20:30 -06:00
Josh Cummings fd6aecf8da Polish AuthnRequestsSigned support 
Issue gh-12604
 2023-03-20 14:20:30 -06:00
Liviu Gheorghe 21d919169a Add support for AuthnRequestsSigned setting 
closes gh-12604
 2023-03-20 14:20:30 -06:00
Josh Cummings a7562ad950
Update io.spring.javaformat to 0.0.38 
Closes gh-12891
 2023-03-20 10:44:35 -06:00
Josh Cummings 3ad6c6ce06 Use EntityId-lookup Components 
Closes gh-12880
 2023-03-17 18:00:02 -06:00
Josh Cummings dbdf04f151 SAML Response Reads EntityId 
Closes gh-10243
 2023-03-17 18:00:02 -06:00
Josh Cummings 3f2816f745 Logout Request Reads EntityId 
Closes gh-12843
Closes gh-12845
 2023-03-17 18:00:02 -06:00
Josh Cummings 785123eb2a Add Saml2MetadataResponseResolver 
Closes gh-12846
 2023-03-17 18:00:02 -06:00
Josh Cummings 7678523b73 Support Creating EntitiesDescriptor 
Clsoes gh-12844
 2023-03-17 18:00:02 -06:00
Josh Cummings 37b893a0f5 Extract Placeholder Resolution 
Closes gh-12842
 2023-03-17 18:00:02 -06:00
Josh Cummings 42cece21b4 Add OpenSamlRelyingPartyRegistration 
Issue gh-12841
 2023-03-17 18:00:02 -06:00
Josh Cummings 538db29bfe Add RelyingPartyRegstration#mutate 
Closes gh-12841
 2023-03-17 18:00:02 -06:00
Josh Cummings 97d1a49daf Add findUniqueByAssertingPartyEntityId 
Closes gh-12848
 2023-03-17 18:00:02 -06:00
Josh Cummings 8522e9abd6 Add Missing JavaDoc 
Issue gh-12848
 2023-03-17 18:00:02 -06:00
Josh Cummings 1409ef064a Add InMemoryRelyingPartyRegistrationTests 
Issue gh-12848
 2023-03-17 18:00:02 -06:00
Josh Cummings baf2c98c9f
Merge branch '6.0.x' 2023-03-01 11:25:47 -07:00
Josh Cummings 14ee873b74
Merge branch '5.8.x' into 6.0.x 2023-03-01 11:25:21 -07:00
Josh Cummings e7b14b3ca2
Merge branch '5.7.x' into 5.8.x 2023-03-01 11:24:17 -07:00
Josh Cummings 66665344c5 Formatting 
Issue gh-12664
 2023-03-01 11:23:45 -07:00
stnor 6c7703789a Ignore SPSSODescriptor elements 
Closes gh-12664
 2023-03-01 11:23:45 -07:00
Josh Cummings 41fadaecd3
Merge branch '6.0.x' 
Closes gh-12800
 2023-02-28 13:08:47 -07:00
Josh Cummings e28ea6dbad
Preserve OpenSamlAssertingPartyDetails Instance 
Closes gh-12667
 2023-02-28 13:08:13 -07:00
Josh Cummings 735981192f
Merge branch '6.0.x' 
Closes gh-12768
 2023-02-22 10:22:47 -07:00
Josh Cummings d3a65dbbbe
Merge branch '5.8.x' into 6.0.x 
Closes gh-12767
 2023-02-22 10:22:11 -07:00
Dayan Kodippily 79887fa213 Closes gh-12472 2023-02-22 10:21:46 -07:00
Josh Cummings a1b282ff03
Merge branch '5.7.x' into 5.8.x 
Closes gh-12693
 2023-02-17 10:09:32 -07:00
Josh Cummings 2db4430dcd Preserve OpenSamlAssertingPartyDetails Instance 
Closes gh-12667
 2023-02-17 10:02:17 -07:00
Josh Cummings c1c28375d6 Add RelayStateResolver 
Co-authored-by: ghaege <ghaege@qaepps.de>

Closes gh-12538
 2023-02-16 12:25:55 -07:00
Josh Cummings ab8337e371 Polish 
Co-authored-by: ghaege <ghaege@qaepps.de>

Issue gh-12538
 2023-02-16 12:25:55 -07:00
Josh Cummings 65b9dbf031
Merge branch '6.0.x' 
Closes gh-12460
 2022-12-23 15:56:15 -07:00
Josh Cummings 9c0a35a6f6
Merge branch '5.8.x' into 6.0.x 
Closes gh-12459
 2022-12-23 15:55:43 -07:00
Josh Cummings fda0e9a2b6
Merge branch '5.7.x' into 5.8.x 
Closes gh-12458
 2022-12-23 15:54:37 -07:00
Josh Cummings 3cfaf0d11d
Avoid LinkedMultiValueMap in Serializable Object 
Closes gh-11785
 2022-12-23 15:54:00 -07:00
Marcus Da Coregio 369bc71c81 Polish 
Issue gh-11815
 2022-12-05 10:30:05 -08:00
Mitja Kotnik 70249e536a Add a new Saml2MetadataFilter constructor for RelyingPartyRegistrationRepository 
Closes gh-11815
 2022-12-05 10:30:05 -08:00
Marcus Da Coregio fa9cb82d4a Merge branch '5.8.x' 2022-11-16 14:51:37 -03:00
Marcus Da Coregio 3d0be9beba Merge branch '5.7.x' into 5.8.x 2022-11-16 14:51:23 -03:00
Marcus Da Coregio 2d19d972f4 Merge branch '5.6.x' into 5.7.x 2022-11-16 14:51:07 -03:00
Marcus Da Coregio d5aabd721a Specify UTF8 for response content 
This is needed because in some other platforms, like Windows, the default charset might be different

Issue gh-12026
 2022-11-16 14:50:31 -03:00
Marcus Da Coregio a9ece433fe Merge branch '5.8.x' 
Closes gh-12223
 2022-11-16 13:45:17 -03:00
Marcus Da Coregio 9b6be3a556 Merge branch '5.7.x' into 5.8.x 
Closes gh-12222
 2022-11-16 13:44:48 -03:00
Marcus Da Coregio 8441e755d3 Merge branch '5.6.x' into 5.7.x 
Closes gh-12221
 2022-11-16 13:44:16 -03:00
Marcus Da Coregio 53148dc7b5 Use UTF-8 in Saml2MetadataFilter response writer 
Closes gh-12026
 2022-11-16 13:43:46 -03:00
Josh Cummings b3fdd00705
Merge branch '5.8.x' 
Closes gh-12210
 2022-11-14 18:17:30 -07:00
Josh Cummings b81fbf024b
Merge branch '5.7.x' into 5.8.x 
Closes gh-12209
 2022-11-14 18:17:02 -07:00
Josh Cummings 79483b2bc9
Merge branch '5.6.x' into 5.7.x 
Closes gh-12208
 2022-11-14 18:16:22 -07:00
Sabina Palakova ed3af6482d Fix SAML logout log messages 
Fixes SAML logout log messages incorrectly referring to logout
response instead of logout request and vice versa.

Closes gh-12129
 2022-11-14 18:11:49 -07:00
Josh Cummings d5f30755d1
Merge branch '5.8.x' 
Closes gh-12149
 2022-11-07 16:07:32 -07:00
Josh Cummings 9a1fae3e8e
Add createDefaultAssertionValidatorWithParameters 
Closes gh-11675
 2022-11-07 16:06:42 -07:00
Josh Cummings e90a11b1c0
Add SecurityContextHolderStrategy to Saml2 
Issue gh-11060
 2022-10-05 23:50:55 -06:00
Josh Cummings 506e50bfd0
Move Saml2 Authentication Filters 
Issue gh-8819
 2022-09-26 10:44:27 -06:00
Josh Cummings 61c80bcac5
Move Saml2 Authentication Filters 
Closes gh-8819
 2022-09-20 17:18:05 -06:00
Rob Winch 48e31f87e4 Remove Deprecated OpenSAML 3 Support 
Closes gh-10556
 2022-09-20 16:57:38 -06:00
Marcus Da Coregio 0c96989cbe Move script tag into body element 
Closes gh-11879
 2022-09-19 15:46:23 -03:00
Marcus Da Coregio 00302c80ad
Move SAML Post inline javascript to script tag 
To avoid relying on HTML event handlers and adding unsafe-* rules to CSP, the javascript is moved to a <script> tag. This also allows a better browser compatibility

Closes gh-11676
 2022-08-16 15:11:01 -06:00
Marcus Da Coregio 7359bd5949 Move SAML Post inline javascript to script tag 
To avoid relying on HTML event handlers and adding unsafe-* rules to CSP, the javascript is moved to a <script> tag. This also allows a better browser compatibility

Closes gh-11676
 2022-08-16 15:06:10 -06:00
Scott Shidlovsky 508f7d7b8a Update OpenSamlAuthenticationRequestResolverTests from Junit 4 to Junit 5 2022-08-02 08:02:22 -06:00
Scott Shidlovsky 947445fcc5 Add ID to Saml2 Post and Redirect Requests 
Closes gh-11468
 2022-08-02 08:02:22 -06:00
Ulrich Grave 4393c2ea02
Add hash-based Content-Security-Policy for SAML pages 
Closes gh-11631
 2022-07-27 18:04:39 -06:00
Ulrich Grave 409998a3fe Add hash-based Content-Security-Policy for SAML pages 
Closes gh-11631
 2022-07-27 17:59:42 -06:00
Josh Cummings 56a6133b20
Merge Same-named Attribute Elements 
Closes gh-11042
 2022-07-20 18:43:25 -06:00
Josh Cummings bced37f6a7
Merge Same-named Attribute Elements 
Closes gh-11042
 2022-07-20 18:41:55 -06:00
Josh Cummings 561f65b34d
Merge Same-named Attribute Elements 
Closes gh-11042
 2022-07-20 18:40:20 -06:00
Josh Cummings e092ec780f
Merge Same-named Attribute Elements 
Closes gh-11042
 2022-07-20 18:33:24 -06:00
Joe Grandja 7b18336c6a Change interface with constants to final class 
Closes gh-10960
 2022-07-13 15:51:58 -04:00
Josh Cummings 3c8a80c364
Add SecurityContextHolderStrategy to Saml2 
Issue gh-11060
 2022-06-27 13:05:11 -06:00
Joe Grandja 2a3845a7ed Update org.opensaml:opensaml-core4 to 4.1.1 
Closes gh-11420
 2022-06-20 14:50:24 -04:00
Joe Grandja bca43af9bb Update org.opensaml:opensaml-core4 to 4.1.1 
Closes gh-11410
 2022-06-20 12:08:07 -04:00
Josh Cummings d22277ce36
Add missing KeyInfo 
Closes gh-11354
 2022-06-09 13:16:50 -06:00
Josh Cummings bd60a0f8c9
Add OpenSamlSigningUtilsTests 
Issue gh-11354
 2022-06-09 13:16:49 -06:00
Josh Cummings 89fb075e2d
Add missing KeyInfo 
Closes gh-11354
 2022-06-09 13:14:19 -06:00
Josh Cummings 3a41567a18
Add OpenSamlSigningUtilsTests 
Issue gh-11354
 2022-06-09 13:14:13 -06:00
Josh Cummings 812bb0ead0
Add missing KeyInfo 
Closes gh-11354
 2022-06-09 13:12:52 -06:00
Josh Cummings bb9c7d1b6e
Add OpenSamlSigningUtilsTests 
Issue gh-11354
 2022-06-09 13:12:33 -06:00
Jared Rufer 3ca4b06612
Support multiple SingleLogoutService bindings. 
Closes gh-11286
 2022-06-09 12:56:16 -06:00
Jared Rufer 89989722d0 Support multiple SingleLogoutService bindings. 
Closes gh-11286
 2022-06-09 12:50:33 -06:00
j3graham 29ba67b6d7 Remove dependency on commons-codec by using java.util.Base64 
Closes gh-11318
 2022-06-09 06:50:01 -06:00
j3graham f3c96fa9cd Remove dependency on commons-codec by using java.util.Base64 
Closes gh-11318
 2022-06-09 06:49:39 -06:00
Houssem BELHADJ AHMED fc653bb81a
make SAML authentication request uri configurable 
Closes gh-10840
 2022-06-06 12:49:29 -06:00
Houssem BELHADJ AHMED f4049c18b1 add SAML authentication request support to login configurer 
Closes gh-8873
 2022-06-06 08:05:33 -06:00
Houssem BELHADJ AHMED 33104269d6 make SAML authentication request uri configurable 
Closes gh-10840
 2022-06-06 08:05:33 -06:00
Marcus Da Coregio e20323e0a8 Use Java 11 Toolchain for OpenSaml4 compile 
Issue gh-10816
 2022-06-02 19:24:42 +02:00
Claudio Consolmagno 07f9afe057
Use 'md:' prefix in EntityDescriptor XML 
Create the EntityDescriptor object with
EntityDescriptor.DEFAULT_ELEMENT_NAME instead of
EntityDescriptor.ELEMENT_QNAME. That ensures the EntityDescriptor tag
is marshalled to xml with the 'md:' prefix, consistent with all other
metadata tags.

Closes #11283
 2022-05-31 17:11:02 -06:00
Claudio Consolmagno c39d39b35f
Use 'md:' prefix in EntityDescriptor XML 
Create the EntityDescriptor object with
EntityDescriptor.DEFAULT_ELEMENT_NAME instead of
EntityDescriptor.ELEMENT_QNAME. That ensures the EntityDescriptor tag
is marshalled to xml with the 'md:' prefix, consistent with all other
metadata tags.

Closes #11283
 2022-05-31 17:08:51 -06:00
Claudio Consolmagno b1004aff4e
Use 'md:' prefix in EntityDescriptor XML 
Create the EntityDescriptor object with
EntityDescriptor.DEFAULT_ELEMENT_NAME instead of
EntityDescriptor.ELEMENT_QNAME. That ensures the EntityDescriptor tag
is marshalled to xml with the 'md:' prefix, consistent with all other
metadata tags.

Closes #11283
 2022-05-31 17:07:18 -06:00
Claudio Consolmagno b470f29cf8 Use 'md:' prefix with EntityDescriptor tag in the metadata xml 
Create the EntityDescriptor object with EntityDescriptor.DEFAULT_ELEMENT_NAME instead of EntityDescriptor.ELEMENT_QNAME. That ensures the EntityDescriptor tag is marshalled to xml with the 'md:' prefix, consistent with all other metadata tags.

Closes #11283
 2022-05-31 17:06:00 -06:00
Juny Tse 649428b49a
Use Base64 encoder with no CRLF in output for SAML 2.0 messages 
Closes gh-11262
 2022-05-25 12:06:27 -06:00
Juny Tse d0da160007
Use Base64 encoder with no CRLF in output for SAML 2.0 messages 
Closes gh-11262
 2022-05-25 12:02:13 -06:00
Juny Tse 16664dcdbd
Use Base64 encoder with no CRLF in output for SAML 2.0 messages 
Closes gh-11262
 2022-05-25 11:43:50 -06:00
Juny Tse f2d6ead398 Use Base64 encoder with no CRLF in output for SAML 2.0 messages 
Closes gh-11262
 2022-05-25 11:42:54 -06:00
Josh Cummings bcd104763e
Remove duplicate check 
Closes gh-11192
 2022-05-23 16:01:37 -06:00
Josh Cummings 53e509f0c6
Remove duplicate check 
Closes gh-11192
 2022-05-23 16:00:15 -06:00