Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
14,239 Commits 32 Branches 333 Tags 109 MiB
Commit Graph

14239 Commits

Author SHA1 Message Date
github-actions[bot] a2223184c6 Release 6.2.0-M3 2023-09-18 15:21:12 +00:00
github-actions[bot] 7c17cfae36 Release 6.0.7 2023-09-18 15:21:11 +00:00
Josh Cummings cb33fd7850
Add OIDC Back-Channel Logout Support 
Closes gh-12570
 2023-09-16 15:12:21 -06:00
Steve Riesenberg 1461c0f648
Fix version number for aspectj upgrade 
Issue gh-13832
 2023-09-15 11:58:52 -05:00
Steve Riesenberg 56273dbd48
Update spring-ldap-core to 3.2.0-M3 
Closes gh-13839
 2023-09-15 11:58:52 -05:00
Steve Riesenberg a2ea2e2306
Update org.springframework.data to 2023.1.0-M3 
Closes gh-13838
 2023-09-15 11:58:52 -05:00
Steve Riesenberg 211470f249
Update org.springframework to 6.1.0-M5 
Closes gh-13837
 2023-09-15 11:58:51 -05:00
Steve Riesenberg b17bab2bc7
Update slf4j-api to 2.0.9 
Closes gh-13836
 2023-09-15 11:58:51 -05:00
Steve Riesenberg 590ef21aa3
Update org.jetbrains.kotlin to 1.9.10 
Closes gh-13835
 2023-09-15 11:58:51 -05:00
Steve Riesenberg bcd334ff92
Update org.eclipse.jetty to 11.0.16 
Closes gh-13833
 2023-09-15 11:54:23 -05:00
Steve Riesenberg 45d5e0592f
Update org.aspectj to 1.9.20.1 
Closes gh-13832
 2023-09-15 11:54:20 -05:00
Steve Riesenberg 638581095e
Update jakarta.xml.bind-api to 4.0.1 
Closes gh-13831
 2023-09-15 11:54:17 -05:00
Steve Riesenberg a80d1aafeb
Update io.projectreactor to 2023.0.0-M3 
Closes gh-13829
 2023-09-15 11:54:11 -05:00
Steve Riesenberg ea2238ed71
Update micrometer-observation to 1.12.0-M3 
Closes gh-13828
 2023-09-15 11:54:07 -05:00
Steve Riesenberg 1161f9f751
Revert "Update Spring Framework to 6.1.0-SNAPSHOT" 
This reverts commit d87d0554ed.

Issue gh-13782
 2023-09-15 11:51:49 -05:00
Rob Winch 91c89451e7 Merge branch '6.1.x' 
Automate spring-security.xsd

Closes gh-13826
 2023-09-14 23:44:34 -05:00
Rob Winch 7627c2df46 Merge branch '6.0.x' into 6.1.x 
Automate spring-security.xsd

Closes gh-13825
 2023-09-14 23:43:27 -05:00
Rob Winch 342735043d Merge branch '5.8.x' into 6.0.x 
Automate spring-security.xsd

Closes gh-13824
 2023-09-14 23:42:31 -05:00
Rob Winch 779541b340 Merge branch '5.7.x' into 5.8.x 
Automate spring-security.xsd

Closes gh-13823
 2023-09-14 23:37:53 -05:00
Rob Winch 5b293d2116 Automate spring-security.xsd 
Closes gh-13819
 2023-09-14 16:01:50 -05:00
Marcus Da Coregio a052e2effb Merge branch '6.1.x' 
Closes gh-13821
 2023-09-14 21:26:05 +01:00
Marcus Da Coregio 7fcf44f8d9 Merge branch '6.0.x' into 6.1.x 
Closes gh-13820
 2023-09-14 21:25:48 +01:00
Marcus Da Coregio 18e88366d2 Resolve The matchingRequestParameterName From The Query String 
Prior to this commit, the ServletRequest#getParameter method was used in order to verify if the matchingRequestParameterName was present in the request. That method has some side effects like interfering in the execution of the ServletRequest#getInputStream and ServletRequest#getReader method when the request is an HTTP POST (if those methods are invoked after getParameter, or vice-versa, the content won't be available). This commit makes that we only use the query string to check for the parameter, avoiding draining the request's input stream.

Closes gh-13731
 2023-09-14 21:25:25 +01:00
Marcus Da Coregio 9a06885247 Merge branch '6.1.x' 
Closes gh-13815
 2023-09-14 14:50:11 +01:00
Marcus Da Coregio 59a9aa3268 Merge branch '6.0.x' into 6.1.x 
Closes gh-13814
 2023-09-14 14:49:29 +01:00
Marcus Da Coregio aeafcc1377 Defer MethodSecurityExpressionHandler Resolution 
When using Spring Security ACL and compiling to Native, in order to create the '*AuthorizationMethodInterceptor' Proxy beans during build time, Spring tries to resolve the DataSource bean since the DataSource can be a dependency of some AclService implementations, and fails because some required data source properties are not available during build time.

This commit defers the initialization of the MethodSecurityExpressionHandler to the runtime.

Closes gh-12653
 2023-09-14 14:48:24 +01:00
Marcus Da Coregio f5942aac73 Merge branch '6.1.x' 2023-09-13 14:23:51 +01:00
Marcus Da Coregio b4ce77c028 Merge branch '6.0.x' into 6.1.x 2023-09-13 14:23:28 +01:00
Marcus Da Coregio 48babb7efa Merge branch '5.8.x' into 6.0.x 2023-09-13 14:23:01 +01:00
Eric Haag f026e29771 Add dependency on rncToXsd task from nohttp 
This addresses a deprecation warning causing build caching to be
disabled for the checkstyleNohttp task. With this change, we tell
Gradle that the rncToXsd task in the spring-security-config project
produces output that should be considered when running the
checkstyleNohttp task. This clears up ambiguities when computing the
task graph.
 2023-09-13 13:58:44 +01:00
Eric Haag 620e6e0c34 Add rncToXsd task to resources set 
This addresses a deprecation warning causing build caching to be
disabled for some tasks. With this change, we tell Gradle that the
rncToXsd task produces output that should be considered a resource.
This clears up ambiguities when computing the task graph.
 2023-09-13 13:58:42 +01:00
Eric Haag 4ebfa2c804 Use lazy API to configure rncToXsd task 
This avoids configuring the task eagerly.
 2023-09-13 13:58:05 +01:00
Steve Riesenberg 5535d17172
Merge branch '6.1.x' 
Closes gh-13807
Closes gh-13803
Closes gh-13802
 2023-09-12 18:55:42 -05:00
Steve Riesenberg 461bf9a09c
Merge branch '6.0.x' into 6.1.x 
Closes gh-13806
 2023-09-12 18:48:28 -05:00
Steve Riesenberg f03224fe7f
Merge branch '5.8.x' into 6.0.x 
Closes gh-13805
 2023-09-12 18:48:13 -05:00
Steve Riesenberg 3feb809b35
Fix Saml2AuthenticationExceptionMixin on JDK 17 
Closes gh-13804
 2023-09-12 18:39:29 -05:00
Josh Cummings 2a1cf98b80 Update Copyright and Formatting 
Issue gh-13615
 2023-09-12 16:20:28 -06:00
Bjorn Harvold 5e715c5297 Improve StrictHttpFirewall Error Messaging 
Better error strings for invalid header and parameter values.

Closes gh-13615
 2023-09-12 16:20:28 -06:00
Tim te Beek 9df9cb5aed refactor: AssertJ best practices 
Use this link to re-run the recipe: https://app.moderne.io/recipes/builder/bGVuS?organizationId=RGVmYXVsdA%3D%3D

Co-authored-by: Moderne <team@moderne.io>
 2023-09-12 16:18:14 -06:00
Steve Riesenberg 74dc3fd7b1
Merge branch '6.0.x' into 6.1.x 
Closes gh-13799 in 6.1.x
Closes gh-13801
 2023-09-12 17:02:48 -05:00
Steve Riesenberg 771d9cd8b6
Merge branch '5.8.x' into 6.0.x 
Closes gh-13799
 2023-09-12 17:00:47 -05:00
Steve Riesenberg a580856bb2
Update jacoco tool version to 0.8.9 
Closes gh-13798
 2023-09-12 17:00:12 -05:00
Steve Riesenberg 9b7a110704
Fix OAuth2AuthenticationExceptionMixinTests on JDK 17 
Closes gh-11893
 2023-09-12 16:51:47 -05:00
Marcus Da Coregio 36a488a360 Merge branch '6.1.x' 
Closes gh-13797
 2023-09-12 16:22:31 +01:00
Marcus Da Coregio b80a1de9fa Merge branch '6.0.x' into 6.1.x 
Closes gh-13796
 2023-09-12 16:22:04 +01:00
Marcus Da Coregio db37bdfe94 Merge branch '5.8.x' into 6.0.x 
Closes gh-13795
 2023-09-12 16:21:48 +01:00
Marcus Da Coregio ce012a4661 CookieRequestCache Should Preserve Request Locale 
Closes gh-13792
 2023-09-12 16:21:27 +01:00
Steve Riesenberg 9de717ac7a
Polish gh-13575 2023-09-07 14:07:40 -05:00
moon 3a50c92168 Replace wildcard type ? with * in Kotlin and fix typo 2023-09-07 14:02:47 -05:00
Deniz Husaj 91a8ed1ba7 Update firewall.adoc 2023-09-07 13:58:39 -05:00