7457 Commits

Author SHA1 Message Date
Joe Grandja
cd8c3d006b Update to htmlunit-driver 2.33.3
Fixes gh-6671
2019-03-26 12:23:32 -04:00
Joe Grandja
169ad0b24d Update to hibernate-validator 6.0.16.Final
Fixes gh-6670
2019-03-26 12:23:32 -04:00
Joe Grandja
8eedb062c4 Update to hibernate-entitymanager 5.3.9.Final
Fixes gh-6669
2019-03-26 12:23:32 -04:00
Joe Grandja
1843580f03 Update to unboundid-ldapsdk 4.0.10
Fixes gh-6668
2019-03-26 12:23:31 -04:00
Joe Grandja
45e6ab3fc6 Update to okhttp 3.12.2
Fixes gh-6667
2019-03-26 12:23:31 -04:00
Joe Grandja
9d3a20c331 Update to mockwebserver 3.12.2
Fixes gh-6666
2019-03-26 12:23:31 -04:00
Joe Grandja
cf8043a90c Update to Spring 5.1.6.BUILD-SNAPSHOT
Fixes gh-6663
2019-03-26 12:23:31 -04:00
Eric Deandrea
83953249a9
ServerAuthenticationConverter should be configurable
Fixes gh-6186
2019-03-26 09:40:47 -06:00
Spring Operator
97e549a27a URL Cleanup
This commit updates URLs to prefer the https protocol. Redirects are not followed to avoid accidentally expanding intentionally shortened URLs (i.e. if using a URL shortener).

# Fixed URLs

## Fixed Success
These URLs were switched to an https URL with a 2xx status. While the status was successful, your review is still recommended.

* http://www.apache.org/licenses/ with 1 occurrences migrated to:
  https://www.apache.org/licenses/ ([https](https://www.apache.org/licenses/) result 200).
* http://www.apache.org/licenses/LICENSE-2.0 with 2596 occurrences migrated to:
  https://www.apache.org/licenses/LICENSE-2.0 ([https](https://www.apache.org/licenses/LICENSE-2.0) result 200).
* http://www.apache.org/licenses/LICENSE-2.0.html with 2 occurrences migrated to:
  https://www.apache.org/licenses/LICENSE-2.0.html ([https](https://www.apache.org/licenses/LICENSE-2.0.html) result 200).
2019-03-14 20:23:53 -05:00
Rob Winch
105517fc82 Polish URLs
We have performed some polish on your URLs. We do not follow redirects to avoid expanding intentionally shorter URLs (i.e. URL shortened URLs)

# Fixed URLs
## Fixed Success
These URLs were fixed successfully.

| HTTP URL | Result URL | HTTPS Result | HTTP Result | Count |
| --- | --- | --- | --- | --- |
| http://www.apache.org/licenses/LICENSE-2.0 | https://www.apache.org/licenses/LICENSE-2.0 | HttpResponse(httpStatus = 200 OK) | null | 10 |
2019-03-01 17:33:25 -06:00
Rob Winch
40a0655627 Removed Unused Configuration 2019-02-28 20:10:58 -06:00
Rob Winch
48f617ab00 Polish WebSessionOAuth2ServerAuthorizationRequestRepository Format
Issue: gh-6215
2019-02-15 15:05:17 -06:00
Zhanwei Wang
4141ddbde2 Fix OAuth2 Client with Ditributed Session
Fixes: gh-6215
2019-02-15 15:05:17 -06:00
Josh Cummings
80081b0500
Next Development Version 2019-02-13 11:10:31 -07:00
Josh Cummings
3c95c08106
Release Spring Security 5.1.4.RELEASE 5.1.4.RELEASE 2019-02-13 10:36:08 -07:00
Joe Grandja
091cbe5458 ServletOAuth2AuthorizedClientExchangeFilterFunction supports chaining
Fixes gh-6483
2019-02-13 12:17:05 -05:00
Josh Cummings
04f8a7974e
Update to org.jasig.cas.client:cas-client-core 3.5.1
Fixes: gh-6537
2019-02-13 10:13:49 -07:00
Josh Cummings
66f30cf606
Update to org.bouncycastle:bcpkix-jdk15on 1.61
Fixes: gh-6536
2019-02-13 10:13:49 -07:00
Josh Cummings
e23e738cfe
Update to httpclient 4.5.7
Fixes: gh-6534
2019-02-13 09:41:18 -07:00
Josh Cummings
54e7aace6d
Update to Spring Boot 2.1.2
Fixes: gh-6533
2019-02-13 09:23:09 -07:00
Josh Cummings
4c1fdbf290
Update to appengine 1.9.71
Fixes: gh-6532
2019-02-13 09:19:40 -07:00
Josh Cummings
759c378eeb
Update to Spring Reactor Californium-SR5
Fixes: gh-6531
2019-02-13 09:11:44 -07:00
Josh Cummings
9f514753d5
Update to Spring Data Lovelace-SR5
Fixes: gh-6529
2019-02-13 09:11:01 -07:00
Josh Cummings
16d5566cd6
Update to Spring Framework 5.1.5
Fixes: gh-6528
2019-02-13 09:10:22 -07:00
Stephen Doxsee
7633fbfd8a Client OAuth2 properties to use scope not scopes
OAuth2ClientProperties.Registration (which captures .properties and
.yml for OAuth2 Client) has a member `scope` but not `scopes`. Samples
and documentation were using `scopes` and have now been updated to use
`scope`.

Fixes gh-6510
2019-02-08 12:02:04 -05:00
Fabien Arrault
51f905cb89 Preserve existing refresh token if new refresh token not returned
During an oauth2 refresh if the authorization server doesn't return a new refresh token, preserve the existing one.

Fixes: gh-6503
2019-02-07 15:40:44 -05:00
Bryan Kelly
007ee7652b Missing spring: prefix on jwk-set-uri example 2019-01-25 08:31:41 -06:00
Ankur Pathak
0aaaaf9f2f Improve CsrfBeanDefinitionParser xml parsing
1. CsrfBeanDefinitionParser registers requestDataValueProcessor
if not already registered
2. Created Tests in CsrfBeanDefinitionParserTests

Fixes: gh-6423
2019-01-22 14:02:30 -06:00
Ankur Pathak
be7d2a3c41 HTML markup fixed in DefaultLoginPageGeneratingFilter
Ending div moved  out of condition.

Fixes: gh-6417
2019-01-22 13:26:15 -06:00
Josh Cummings
e6aa141260 authorization_uri Uses UriComponentsBuilder
Because of this, authorization_uri can now be a fully-qualified url.

Fixes: gh-5760
2019-01-19 07:51:03 -05:00
Andy Wilkinson
e6bb9bfdca
Fix formatting in Implicit OAuth2AuthorizedClient section 2019-01-18 10:27:54 -07:00
Denis Washington
548dc4496c Save query parameters in WebSessionServerRequestCache
Previously, URL query parameters were lost when saving a request
in WebSessionServerRequestCache. Now it is properly saved and
restored.

Fixes: gh-6421
2019-01-15 13:46:09 -06:00
Mohammad Sadeq Dousti
7f2f12c428 hasRole should not be called on a string with "ROLE_" prefix (#6353)
Removed "ROLE_" from UrlAuthorizationConfigurer

This fixes IllegalArgumentException: ROLE_ANONYMOUS should not start
with ROLE_ since ROLE_
2019-01-15 09:00:29 -06:00
Josh Cummings
6dfad970d4
Next Development Version 2019-01-10 16:54:39 -07:00
Josh Cummings
114e00f1dd
Release 5.1.3.RELEASE 5.1.3.RELEASE 2019-01-10 15:40:02 -07:00
Joe Grandja
a0e541eb70 Update to Spring Boot 2.1.1.RELEASE
Fixes gh-6405
2019-01-10 14:55:31 -05:00
Joe Grandja
477a5a7cd3 Update to org.powermock 2.0.0
Fixes gh-6404
2019-01-10 14:52:57 -05:00
Joe Grandja
8918a7e693 Update to ehcache 2.10.6
Fixes gh-6403
2019-01-10 14:50:11 -05:00
Joe Grandja
bf33f9acef Update to com.squareup.okhttp3 3.12.1
Fixes gh-6402
2019-01-10 14:48:30 -05:00
Joe Grandja
f1598b985c Update to com.fasterxml.jackson.core 2.9.8
Fixes gh-6401
2019-01-10 14:44:56 -05:00
Joe Grandja
cc1ab2c368 Update to cglib-nodep 3.2.10
Fixes gh-6400
2019-01-10 14:42:47 -05:00
Joe Grandja
aac4525737 Update to spring-build-conventions:0.0.23.RELEASE
Fixes gh-6389
2019-01-10 12:28:48 -05:00
Joe Grandja
eeb099a04f Update to Reactor Californium-SR4
Fixes gh-6387
2019-01-10 12:05:35 -05:00
Joe Grandja
3e90c7663f Update to Spring Framework 5.1.4
Fixes gh-6386
2019-01-10 12:03:24 -05:00
Joe Grandja
cfec514082 Update to Spring Data Lovelace-SR4
Fixes gh-6385
2019-01-10 12:01:24 -05:00
Ankur Pathak
80b123bf36 fixes setting paramName only when it is not null
Fixes: gh-6223
2019-01-10 10:26:49 -06:00
Rafael Renan Pacheco
ee6f9e0b92 cconfigured -> configured 2019-01-08 13:19:08 -06:00
Ankur Pathak
2625de9c23
Fixes typo in x,rnc files
1. Fixes type ammount to amount in *.rnc files
2. Regenerates *.xsd files from *.rnc files

Fixes: gh-6325
2019-01-08 11:33:46 -07:00
Onur Kagan Ozcan
a145653030 Fix UsernamePasswordAuthenticationTokenDeserializer to handle customized object mapper inclusion settings
Resolves #4698
2019-01-07 14:23:53 -06:00
Slava Semushin
8bc0ef86da LazyCsrfTokenRepository: fix a typo in javadoc. 2019-01-07 13:36:17 -06:00