Commit Graph

10121 Commits

Author SHA1 Message Date
Josh Cummings d493598e17 Polish LogoutRequest#EncryptedID Support
Issue gh-10663
2022-01-14 14:47:45 -07:00
Robert Stoiber c1bea329ba Enabled SAML LogoutRequests with EncryptedID
The OpenSamlLogoutRequestValidator validates the subject to be logged out.
Formerly this was done only using the NameID from the OpenSamlLogoutRequest.
Now the EncryptedID is also supported, Since the SAML2 Standard also allows
the EncryptedID as subject identifiers,

- added EncryptedID as valid subject in OpenSamlLogoutRequestValidator
- added test

Closes gh-10663
2022-01-14 14:47:36 -07:00
Josh Cummings b2fe9149cf Use noNullElements
Collection#contains(null) does not work for all collection types

Issue gh-10703
2022-01-14 14:33:17 -07:00
Marcus Da Coregio e20449a542 Upgrade to Kotlin Coroutines 1.6.0
Closes gh-10707
2022-01-14 11:29:43 -03:00
Marcus Da Coregio bac793e719 Upgrade to Spring Framework 6.0.0-M2
Closes gh-10706
2022-01-14 11:27:14 -03:00
Marcus Da Coregio 4a976faea3 Fix remaining failing tests
Issue gh-10702
2022-01-13 13:53:04 -03:00
Marcus Da Coregio 7fd0530009 Change Kotlin tests that are using mockkObject with a lambda interface implementation
Closes gh-10702
2022-01-13 11:38:44 -03:00
Marcus Da Coregio 9dd9e6bd61 Rename integrationTestCompile/Runtime configurations
The kotlin-gradle-plugin is changing some configuration's properties from configurations that has the same prefix as the sourceSet.
It is enforcing the canBeResolved property to false. See https://youtrack.jetbrains.com/issue/KT-50748.
This commits changes the suffix to compile -> compileClasspath, runtime -> runtimeClasspath to workaround this issue.

Issue gh-10350
2022-01-13 08:44:57 -03:00
Marcus Da Coregio 9cfafdaa43 Upgrade to Kotlin 1.6.10
Closes gh-10350
2022-01-13 08:44:57 -03:00
Josh Cummings 0ae41ff873 Update Structure101 binaries link
Closes gh-10697
2022-01-11 10:04:08 -07:00
Josh Cummings 6706512b3a Pull most recent Structure101 version
Closes gh-10696
2022-01-11 10:03:57 -07:00
Joe Grandja 525f40490c Allow Jwt assertion to be resolved
Closes gh-9812
2022-01-10 10:59:14 -05:00
heowc 6c5fd38a3f Fix typo 2022-01-10 16:24:53 +01:00
Rob Winch 5598a6a9e1 Update to org.jfrog.buildinfo:build-info-extractor-gradle:4.26.1 2022-01-07 12:44:55 -06:00
Marcus Da Coregio 750dcafbd2 Fix @since tag
Issue gh-10590, gh-10554
2022-01-06 13:21:26 -03:00
Rob Winch 96e5e67737 Update to Antora 3.0.0 2022-01-05 11:22:34 -06:00
Rob Winch d5483f7cbb Antora prerelease: true for milestone and rc 2022-01-05 09:59:18 -06:00
Rob Winch 005d7465b0 Add fix for 5.6.1 version 2022-01-04 17:03:32 -06:00
Rob Winch b7ee8333a5 Update RELEASE.adoc for antora.yml 2022-01-04 15:50:42 -06:00
Rob Winch 9b6c7af526 Add CheckAntoraVersionPlugin 2022-01-04 15:33:24 -06:00
Josh Cummings 45b7fed884 Remove SAML 2.0 Logout Default
Closes gh-10607
2022-01-03 13:14:12 -07:00
Josh Cummings cb008fa062 Support No SingleLogoutServiceLocation
Closes gh-10674
2022-01-03 13:14:06 -07:00
Marcus Da Coregio d79543b2ac Upgrade to AspectJ 1.9.8.RC3
Issue gh-10349
2022-01-03 10:10:22 -03:00
Marcus Da Coregio d41ec2bcff Upgrade to Spring Framework 6.0.0-M1 2022-01-03 10:04:08 -03:00
Steve Riesenberg ad907457ee Fix inconsistency in hasProperty check 2021-12-22 10:24:18 -06:00
Steve Riesenberg 80e39e9343 Add GitHubReleasePlugin with createGitHubRelease task
Closes gh-10456
Closes gh-10457
2021-12-22 10:24:18 -06:00
Josh Cummings cbf0e1da68 Remove commons-logging from saml2
Issue gh-10499
2021-12-16 10:15:58 -07:00
Rob Winch 2471e3296d Fix xsd tests 2021-12-13 17:38:22 -06:00
Rob Winch 2fb056b5c1 Merge Clean up Reference Documentation
Closes gh-9668
2021-12-13 16:57:36 -06:00
Marcus Da Coregio d884d9a461 Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains
Closes gh-10554
2021-12-13 09:19:41 -03:00
Marcus Da Coregio 51b4bd67c9 Add RequestMatcherEntry 2021-12-13 09:19:28 -03:00
Marcus Da Coregio eda346863d Introduce AuthorizationManagerWebInvocationPrivilegeEvaluator
Closes gh-10590
2021-12-13 09:19:13 -03:00
Josh Cummings 81a9302045 Polish enableSessionUrlRewriting Clarification
Closes gh-7644
2021-12-09 12:16:01 -07:00
James Howe c1b0e5930a Clarify behaviour of enableSessionUrlRewriting
See #3087
2021-12-09 12:16:01 -07:00
Guirong Hu 3935f4bffe Fix the bug that the custom GrantedAuthority comparison fails
Closes gh-10566
2021-12-08 08:53:00 -03:00
Eleftheria Stein c68a75bcde Correct imports to jakarta
Issue gh-9385, gh-10118
2021-12-08 11:43:13 +01:00
Marcus Da Coregio 0beb725259 Add Cross Origin Policies headers
Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers

Closes gh-9385, gh-10118
2021-12-08 11:07:09 +01:00
Marcus Da Coregio 263665ad55 Prevent using both authorizeRequests and authorizeHttpRequests
Closes gh-10573
2021-12-06 15:54:28 -03:00
Steve Riesenberg 1896a5e669 Fix Reactive OAuth2 Kotlin DSL examples
Closes gh-10580
2021-12-06 13:05:50 +01:00
Steve Riesenberg aa3c883f87 Use BDD in tests 2021-12-02 17:40:25 -06:00
Steve Riesenberg d37ff18b69 Polish gh-9597 2021-12-02 17:24:17 -06:00
Karl Tinawi c57fc309c2 Set details on authentication token created by HttpServlet3RequestFactory
Currently the login mechanism when triggered by executing HttpServlet3RequestFactory#login does not set any details on the underlying authentication token that is authenticated.

This change adds an AuthenticationDetailsSource on the HttpServlet3RequestFactory, which defaults to a WebAuthenticationDetailsSource.

Closes gh-9579
2021-12-02 17:24:17 -06:00
Steve Riesenberg be802f57ba Add hasIpAddress to Reactive Kotlin DSL
Closes gh-10571
2021-12-02 18:13:01 +01:00
Steve Riesenberg 176f7b2b04 Add missing since
Issue gh-7765
2021-12-02 18:13:01 +01:00
Steve Riesenberg 5dd2565348 Update copyright year
Issue gh-10557
2021-12-01 17:34:16 -06:00
Steve Riesenberg 41c6776455 Fix case sensitive headers comparison
Closes gh-10557
2021-12-01 14:55:50 -06:00
Arnaud Mergey a17dfb8456 Add SP NameIDFormat Support
closes gh-9115
2021-12-01 13:02:20 -07:00
Josh Cummings 7e55c84cfc Add Missing Since
Issue gh-10482
2021-11-30 15:15:35 -07:00
Igor Pelesic 72109e2921 PermitAllSupport supports AuthorizeHttpRequestsConfigurer
PermitAllSupport supports either an ExpressionUrlAuthorizationConfigurer or an AuthorizeHttpRequestsConfigurer. If none or both are configured an error message is thrown.

Closes gh-10482
2021-11-30 15:00:04 -07:00
Josh Cummings 78857c62f4 Polish Memory Leak Mitigation
Issue gh-9841
2021-11-30 14:29:18 -07:00