Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-02-24 16:05:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,301 Commits 34 Branches 337 Tags
Commit Graph

85 Commits

Author SHA1 Message Date
Rob Winch
d554b06a43 OAuth use ConcurrentHashMap 
Fixes gh-4647
 2017-10-17 22:17:09 -05:00
Rob Winch
b764c666c6 Fix jwt package tangles 
JWT is part of OAuth2, so it should be a subpackage of oauth2.

Fixes gh-4614
 2017-10-17 21:06:27 -05:00
Rob Winch
c5abcd1fcd DefaultAuthorizationRequestUriBuilder uses StringUtils 
Fixes gh-4642
 2017-10-17 20:24:43 -05:00
Joe Grandja
7b8d131386 Fix package tangles -> OAuth2/Oidc AuthenticationProvider's 
Fixes gh-4614
 2017-10-16 20:56:32 -04:00
Johnny Lim
25052214ae Polish 2017-10-16 18:33:27 -05:00
Joe Grandja
a7d054c9f3 Remove AuthorizationGrantAuthenticator 2017-10-16 13:43:11 -04:00
Joe Grandja
3c824dc44b Fix package tangles -> OAuth2UserService 
Fixes gh-4614
 2017-10-13 18:59:41 -04:00
Joe Grandja
cfa4858b04 Fix package tangles -> AuthorizationGrantTokenExchanger 
Fixes gh-4614
 2017-10-13 16:35:48 -04:00
Joe Grandja
ea64d10d95 Polish jwt-jose 2017-10-13 07:09:00 -04:00
Joe Grandja
c441f99567 Polish oauth2-client 2017-10-13 07:09:00 -04:00
Joe Grandja
d4d7199a6d Polish oauth2-core 2017-10-13 07:09:00 -04:00
Joe Grandja
df474e04d8 Move logic from AuthorizationCodeAuthenticationFilter to OAuth2UserAuthenticationProvider 2017-10-11 17:39:21 -04:00
Joe Grandja
ca5b62abb5 Move AuthorizationResponseConverter logic to AuthorizationCodeAuthenticationFilter 2017-10-11 17:39:21 -04:00
Joe Grandja
d840090cb0 Add support for implicit grant type 
Fixes gh-4500
 2017-10-11 13:54:59 -04:00
Joe Grandja
401c84b3f2 Externalize error codes from OAuth2Error 
Fixes gh-4606
 2017-10-10 20:24:33 -04:00
Joe Grandja
da0a7afa38 Polish AuthorizationCodeAuthenticationFilter 
Fixes gh-4599
 2017-10-10 14:39:47 -04:00
Joe Grandja
efa4bf409c Remove AuthorizationCodeRequestRedirectFilter. setAuthorizationRequestMatcher 2017-10-10 14:38:06 -04:00
Joe Grandja
6b16fa0d8c Polish OAuth Security Configurers 2017-10-10 14:38:06 -04:00
Joe Grandja
97c938e7f3 Extract authentication logic from AuthorizationCodeAuthenticationFilter 
Fixes gh-4590
 2017-10-10 14:38:06 -04:00
Joe Grandja
5811624bbe Polish endpoint package 
* Remove ErrorResponseAttributes
* Rename AuthorizationRequestAttributes -> AuthorizationRequest
* Remove AuthorizationCodeTokenRequestAttributes
* Rename TokenResponseAttributes -> TokenResponse

Issue gh-4593
 2017-10-06 18:51:24 -04:00
Joe Grandja
ce142e50b6 Rename AuthorizationCodeAuthorizationResponseAttributes -> AuthorizationResponse 
Fixes gh-4593
 2017-10-06 18:51:24 -04:00
Joe Grandja
eca2b67137 ClientRegistration supports 'baseUrl' uri variable 
Fixes gh-4589
 2017-10-05 20:35:51 -04:00
Joe Grandja
dec0bce100 Remove authorities -> AuthorizationGrantAuthenticationToken constructor 
Fixes gh-4602
 2017-10-05 20:22:50 -04:00
Joe Grandja
1b7e761be4 Remove SecurityTokenRepository from AuthorizationCodeAuthenticationProvider constructor 
Fixes gh-4591
 2017-10-05 17:05:56 -04:00
Joe Grandja
eb320bfed4 AuthorizationCodeAuthenticationProcessingFilter -> AuthorizationCodeAuthenticationFilter 2017-10-05 16:40:12 -04:00
Joe Grandja
5c14e48b18 Add OAuth2UserAuthenticationProvider 
Moved logic from AuthorizationCodeAuthenticationProvider
to OAuth2UserAuthenticationProvider (new) related to
loading user attributes via OAuth2UserService.

This re-factor is part of the work required for Issue gh-4513
 2017-10-05 15:15:35 -04:00
Joe Grandja
f8a9077d5a Generalize AuthorizationCodeAuthenticationProvider 
The AuthorizationCodeAuthenticationProvider implements part of the
Authorization Code Grant flow as defined in
OAuth 2.0 Authorization Framework and OpenID Connect Core 1.0.
The implementation needs to be de-coupled to allow for better re-use and readability.
This commit introduces the AuthorizationGrantAuthenticator and extracts logic from
AuthorizationCodeAuthenticationProvider and provides different implementations
for OAuth 2.0 and OpenID Connect 1.0.

This re-factor is part of the work required for Issue gh-4513
 2017-10-05 05:02:22 -04:00
Joe Grandja
0d516ca32c Rename scopes -> scope 2017-10-02 15:50:16 -04:00
Joe Grandja
fb57111ecd redirect-uri property supports 'baseRedirectUrl' uri variable 
Fixes gh-4589
 2017-10-02 15:29:03 -04:00
Joe Grandja
66647070ab Default login page supports Iterable<ClientRegistration> 
Fixes gh-4596
 2017-09-29 19:54:17 -04:00
Joe Grandja
ad91adf9dc Retrieving the UserInfo is conditional 
Fixes gh-4451
 2017-09-29 10:51:16 -04:00
Rob Winch
646b3e48b3 Avoid Exception Message in HTTP Response 
Fixes gh-4587
 2017-09-28 17:24:49 -05:00
Joe Grandja
b9258aa6ee Make AuthorizationRequestUriBuilder optional 
Fixes gh-4577
 2017-09-28 16:43:11 -04:00
Joe Grandja
bfb77a7804 Remove unnecessary dependencies 2017-09-28 15:42:12 -04:00
Joe Grandja
9a8ddebc94 Use param matching for Authorization Response 
Fixes gh-4576
 2017-09-28 10:21:01 -04:00
Joe Grandja
d191bcc8ac Remove ClientRegistrationRepository.findByClientId() 
Fixes gh-4583
 2017-09-28 09:01:58 -04:00
Joe Grandja
52f495a5ec Remove ProviderJwtDecoderRegistry 
Fixes gh-4581
 2017-09-28 08:51:43 -04:00
Joe Grandja
8448a54678 Remove ClientRegistrationRepository.getRegistrations() 
Fixes gh-4582
 2017-09-28 07:02:59 -04:00
Joe Grandja
3217582805 Introduce JwtDecoderRegistry 
Fixes gh-4584
 2017-09-28 06:07:47 -04:00
Joe Grandja
b463f8e6b5 Remove httpSecurity.oauth2Login().userInfoEndpoint().userNameAttributeName() 
Related gh-4580
 2017-09-27 15:39:39 -04:00
Joe Grandja
814742fef6 Rename ClientRegistration.clientAlias -> registrationId 
Fixes gh-4575
 2017-09-27 09:14:55 -04:00
Joe Grandja
38be35677d Add userNameAttributeName to ClientRegistration 
Fixes gh-4580
 2017-09-26 21:55:19 -04:00
Joe Grandja
7fb3093617 Fix NPE InMemoryClientRegistrationRepository 2017-09-26 14:08:01 -04:00
Joe Grandja
0e9b2807bf Split up NimbusOAuth2UserService 
Fixes gh-4447
 2017-09-26 11:32:49 -04:00
Joe Grandja
a06487c0f7 Move additionalParameters to TokenResponseAttributes 
Fixes gh-4554
 2017-09-22 15:21:22 -04:00
Joe Grandja
680984c242 SecurityTokenRepository associates SecurityToken to ClientRegistration 
Fixes gh-4563
 2017-09-22 09:51:00 -04:00
Joe Grandja
7fb386669f InMemoryClientRegistrationRepository -> enforce unique ClientRegistration's 
Fixes gh-4562
 2017-09-21 15:47:26 -04:00
Joe Grandja
9b61eba41d Add identifier strategy for ClientRegistration 
Fixes gh-4561
 2017-09-21 10:19:28 -04:00
Joe Grandja
991a154703 Add OIDC Client and User Authentication 
Fixes gh-4521
 2017-09-19 20:57:56 -04:00
Joe Grandja
c54c622124 Re-structure OAuth2AuthenticationToken 
Fixes gh-4553
 2017-09-19 16:35:43 -04:00