c6ad72004e
Revert "Pick up AuthorizationManager Bean"
...
This reverts commit 4ca5346871
2022-04-12 09:58:30 -06:00
50f8df6f07
Use HttpStatusCode
...
Closes gh-11091
2022-04-11 09:19:56 -03:00
7be32872e9
Add DisableUrlRewritingFilter
...
Closes gh-11084
2022-04-08 16:13:24 -05:00
4ca5346871
Pick up AuthorizationManager Bean
...
Closes gh-11067
Closes gh-11068
2022-04-08 11:42:37 -06:00
be434e1540
Add Default Test to HttpBasicConfigurerTests
...
Issue gh-10973
2022-04-05 17:32:13 -06:00
f09652d447
Polish Saml2LoginConfigurerTests
...
Issue gh-10973
2022-04-05 17:32:13 -06:00
1edfa07d27
Use RequestMatcherEntry
...
Closes gh-11046
2022-03-30 14:40:06 -06:00
bdd5f86526
Polish Authorization Event Support
...
- Added spring-security-config support
- Renamed classes
- Changed contracts to include the authenticated user and secured
object
- Added method security support
Issue gh-9288
2022-03-29 16:37:21 -06:00
fa574c8785
Simplify PrePostMethodSecurityConfiguration
...
Issue gh-9288
2022-03-29 16:22:42 -06:00
e176d764ba
Add SecurityContextRepository.loadContext(HttpServletRequest)
...
This allows loading the SecurityContext lazily, without the need for the
response, and does not attempt to automatically save the request when
the response is comitted.
Closes gh-11028
2022-03-25 14:38:37 -05:00
ca00b1415b
Add authorizeHttpRequests to Kotlin DSL
...
Closes gh-10481
2022-03-22 08:26:41 -06:00
932ff4f5c4
Fix typos in Kotlin DSL docs
...
Issue gh-10481
2022-03-22 08:26:41 -06:00
8aa7029d07
Fix checkstyle errors
...
Issue gh-10989
2022-03-18 22:53:29 -05:00
972039e65c
Add SecurityContextHolderFilter
...
Closes gh-9635
2022-03-12 13:31:04 -06:00
f9619cef68
Extract createSecurityContextRepository()
...
Extract out method in preparation for adding SecurityContextHolderFilter
configuration.
Issue gh-9635
2022-03-12 13:23:47 -06:00
abd33389be
Add UsernamePasswordAuthenticationToken factory methods
...
- unauthenticated factory method
- authenticated factory method
- test for unauthenticated factory method
- test for authenticated factory method
- make existing constructor protected
- use newly factory methods in rest of the project
- update copyright dates
Closes gh-10790
2022-03-09 15:49:29 -07:00
1762a4ce70
Add SAML 2.0 Single Logout XML Support
...
Closes gh-10842
2022-03-09 10:48:34 -03:00
1cbe7a75d3
Add SAML 2.0 Login XML Support
...
Closes gh-9012
2022-03-09 10:40:26 -03:00
5b9a45de01
Replace Apache Commons Base64 Decoding
...
Issue gh-10923
2022-03-02 16:30:21 -07:00
8cc18fa9dc
OAuth2AuthorizedClientArgumentResolver resolves ReactiveOAuth2AuthorizedClientManager
...
Closes gh-10846
2022-02-28 15:31:22 -07:00
eca32b4812
Upgrade to Kotlin 1.6.20-M1
...
Closes gh-10687
2022-02-22 08:51:27 -03:00
606bd120fb
Deprecate WebSecurityConfigurerAdapter
...
Closes gh-10822
2022-02-17 12:25:14 +01:00
9f9fbb395f
Apply configurers from spring.factories to HttpSecurity bean
...
Closes gh-10814
2022-02-09 14:42:04 +01:00
84616543a3
Polish ignoring() log messaging
...
- Public API remains unchanged
Issue gh-9334
2022-02-07 14:58:20 -07:00
6ae651bd67
Print ignore message DefaultSecurityFilterChain
...
When either `web.ignoring().mvcMatchers(...)` or
`web.ignoring().antMatchers(...)` methods are used, for all their
variations, the DefaultSecurityFilterChain class now indicates
correctly through its ouput what paths are ignored according the
`ignoring()` settings.
Closes gh-9334
2022-02-07 14:58:20 -07:00
5a2556879a
Add Saml2AuthenticationRequestResolver
...
Closes gh-10355
2022-01-24 16:18:33 -07:00
f94090a59b
Remove spring-security-openid
...
Closes gh-10773
2022-01-21 16:55:19 -06:00
11df19406b
Remove javax.inject
...
Issue gh-10501
2022-01-19 14:49:47 -06:00
44bc953a39
Remove jcl-over-slf4j
...
Issue gh-10499
2022-01-19 14:40:56 -06:00
95b4a3742b
Remove commons-logging
...
Closes gh-10499
2022-01-19 14:40:54 -06:00
6b56071c08
Add LDAP factory beans
...
Issue gh-10138
2022-01-18 15:21:15 +01:00
feff747669
Polish multiple RequestRejectedHandlers support
...
Issue gh-10603
2022-01-14 17:21:04 -07:00
27cfb9c89d
Support multiple RequestRejectedHandler beans
...
Closes gh-10603
2022-01-14 17:21:00 -07:00
4a976faea3
Fix remaining failing tests
...
Issue gh-10702
2022-01-13 13:53:04 -03:00
7fd0530009
Change Kotlin tests that are using mockkObject with a lambda interface implementation
...
Closes gh-10702
2022-01-13 11:38:44 -03:00
9cfafdaa43
Upgrade to Kotlin 1.6.10
...
Closes gh-10350
2022-01-13 08:44:57 -03:00
6c5fd38a3f
Fix typo
2022-01-10 16:24:53 +01:00
d884d9a461
Configure WebInvocationPrivilegeEvaluator bean for multiple filter chains
...
Closes gh-10554
2021-12-13 09:19:41 -03:00
81a9302045
Polish enableSessionUrlRewriting Clarification
...
Closes gh-7644
2021-12-09 12:16:01 -07:00
c1b0e5930a
Clarify behaviour of enableSessionUrlRewriting
...
See #3087
2021-12-09 12:16:01 -07:00
0beb725259
Add Cross Origin Policies headers
...
Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers
Closes gh-9385, gh-10118
2021-12-08 11:07:09 +01:00
263665ad55
Prevent using both authorizeRequests and authorizeHttpRequests
...
Closes gh-10573
2021-12-06 15:54:28 -03:00
d37ff18b69
Polish gh-9597
2021-12-02 17:24:17 -06:00
c57fc309c2
Set details on authentication token created by HttpServlet3RequestFactory
...
Currently the login mechanism when triggered by executing HttpServlet3RequestFactory#login does not set any details on the underlying authentication token that is authenticated.
This change adds an AuthenticationDetailsSource on the HttpServlet3RequestFactory, which defaults to a WebAuthenticationDetailsSource.
Closes gh-9579
2021-12-02 17:24:17 -06:00
be802f57ba
Add hasIpAddress to Reactive Kotlin DSL
...
Closes gh-10571
2021-12-02 18:13:01 +01:00
176f7b2b04
Add missing since
...
Issue gh-7765
2021-12-02 18:13:01 +01:00
72109e2921
PermitAllSupport supports AuthorizeHttpRequestsConfigurer
...
PermitAllSupport supports either an ExpressionUrlAuthorizationConfigurer or an AuthorizeHttpRequestsConfigurer. If none or both are configured an error message is thrown.
Closes gh-10482
2021-11-30 15:00:04 -07:00
78857c62f4
Polish Memory Leak Mitigation
...
Issue gh-9841
2021-11-30 14:29:18 -07:00
809ff883b0
Address SecurityContextHolder memory leak
...
To get current context without creating a new context.
Creating a new context may cause ThreadLocal leak.
Closes gh-9841
2021-11-30 14:29:18 -07:00
9f51240bf1
Support IP whitelist for Spring Security Webflux
...
Closes gh-7765
2021-11-30 13:59:55 -06:00
Josh Cummings
Marcus Da Coregio
Rob Winch
Yuriy Savchenko
Steve Riesenberg
Norbert Nowak
m0k045e
Eleftheria Stein
Manuel Jordan
Adam Ostrožlík
heowc
James Howe
Karl Tinawi
Igor Pelesic
Hiroshi Shirosaki
Guirong Hu