7370 Commits

Author SHA1 Message Date
Josh Cummings
dc4aa3d017
Favor URL.toExternalForm
Converts URLs to Strings before comparing them. Uses toString(),
which delegates to toExternalForm().

Fixes: gh-6073
2018-11-13 07:39:24 -07:00
Josh Cummings
2bc156ed19
Update to spring-build-conventions:0.0.22.RELEASE
Fixes: gh-6064
2018-11-12 09:31:51 -07:00
dperezcabrera
0270994340 InMemoryUserDetailsManager.updatePassword case-insenstive
Previously updatePassword was case sensitive which was
inconsistent with the rest of the class.

This commit updates updatePassword to be case insensitive.

Fixes: gh-6039
2018-11-09 11:41:44 -06:00
Erik van Paassen
a557a324c0 Fix csrf:token-repository-ref XSD documentation
The documentation of the token-repository-ref attribute of the csrf
element in the schema has been updated to make clear the default
repository is lazy. Targets versions 4.2, 5.0 and 5.1.

Fixes gh-6037
2018-11-08 10:22:07 -06:00
Josh Cummings
73022059d4
Update Reactive Resource Server Docs
Resource Server documentation for both Servlet and Reactive now have a
similar feel and offer deeper exposure to common use cases.

Fixes: gh-6054
2018-11-07 12:10:33 -07:00
Josh Cummings
165cbcb723
Write Security Headers Before Servlet Include
HeaderWriterFilter wraps request dispatcher so it can write security
headers before the include occurs.

Fixes: gh-5499
2018-10-31 09:32:40 -06:00
Josh Cummings
d99ecc2a7b
Add JDK 11 to Jenkins
Fixes: gh-5860
2018-10-26 07:38:55 -06:00
Josh Cummings
ccd2664e6c
JDK 11 Compatibility
Upgraded dependencies and removed a test in the Java Config LDAP
sample which is arguably an integration test since it starts up an
LDAP container. This test also isn't JDK 11 compatible and the
remaining integration tests in the sample cover the same material.

Issue: gh-5860
2018-10-26 07:38:31 -06:00
Joe Grandja
b87ff3c00f Remove charset from Accept header in UserInfo request
Fixes gh-6017
2018-10-25 14:10:41 -04:00
Joe Grandja
8971777908 Set AuthenticationEventPublisher on each AuthenticationManagerBuilder
Fixes gh-6009
2018-10-23 14:41:26 -04:00
Drummond Dawson
3d618d78ac Remove unnecessary concatenation of sql in JdbcUserDetailsManager 2018-10-19 15:30:24 -05:00
Drummond Dawson
697b8cd734 Add missing space to heading for it to render properly 2018-10-19 15:27:35 -05:00
Rob Winch
cf03faf58e Update to spring-build-conventions:0.0.20.RELEASE
Fixes: gh-5998
2018-10-18 16:14:59 -05:00
Rob Winch
13159e9f88 Fail the build if deploy fails
Fixes: gh-5997
2018-10-18 16:14:59 -05:00
Brian Demers
41b7c74928 Fixing IllegalStateException message in OAuth2ResourceServerConfigurer
Updated message to include `http.oauth2ResourceServer()`
2018-10-17 15:14:49 -05:00
Josh Cummings
0a4ac4dbfc Add JDK 10 to Jenkins
Fixes: gh-5860
2018-10-17 15:06:14 -05:00
Josh Cummings
1eb56f46a5 JDK 10 Compatibility
Upgrading dependencies and reconfiguring PowerMock

Issue: gh-5860
2018-10-17 15:06:14 -05:00
Josh Cummings
cfc3c25304 Update to Spring Build Conventions 0.0.19
Fixes: gh-5981
2018-10-17 15:06:14 -05:00
sunflower-seed
03a3a3b770 Update SubjectDnX509PrincipalExtractor.java
Added missing asterisk
2018-10-17 14:58:31 -05:00
Joe Grandja
921abefaa2 Remove address and phone scope from CommonOAuth2Provider.OKTA
Fixes gh-5987
2018-10-17 11:50:34 -04:00
Rob Winch
a472153a31 Next Development Version 2018-10-15 14:20:19 -05:00
Rob Winch
8d5d0fd891 Release 5.1.1.RELEASE
Fixes: gh-5963
5.1.1.RELEASE
2018-10-15 14:19:20 -05:00
Josh Cummings
7269aacbdd Password Modify Extended Operation Support
LdapUserDetailsManager can be configured to either use direct
attribute modification or the LDAP Password Modify Extended Operation
to change a user's password.

Fixes: gh-3392
2018-10-15 12:24:39 -06:00
Josh Cummings
b9ca1400e3 UnboundIdContainer Random Port Support
Setting a port of 0 will now induce the container to select a random
port.

Fixes: gh-5920
2018-10-15 12:24:39 -06:00
Josh Cummings
b9c499d8c8 Polish UnboundIdContainerTests
Basic server startup test now asserts a successful server startup
instead of a failed one.

Issue: gh-5920
2018-10-15 12:24:39 -06:00
Josh Cummings
22bd8f1c1f Reactive Jwt Authentication Converter Support
Fixes: gh-5092
2018-10-15 11:55:12 -05:00
Rob Winch
01b47a8b2f Update to Thymeleaf 3.0.10.RELEASE
Fixes: gh-5960
2018-10-15 11:42:20 -05:00
Rob Winch
c0e9488f1d Update to htmlunit-driver 2.33.0
Fixes: gh-5959
2018-10-15 11:42:13 -05:00
Rob Winch
4b72429b00 Update to Jackson 2.9.7
Fixes: gh-5958
2018-10-15 11:42:07 -05:00
Rob Winch
180c6fe24d Update to GAE 1.9.66
Fixes: gh-5957
2018-10-15 11:42:01 -05:00
Rob Winch
d40a8e09c3 Update to Spring Data Lovelace SR1
Fixes: gh-5949
2018-10-15 09:36:45 -05:00
Rob Winch
ad05c756de Update to Spring Framework 5.0.1.RELEASE
Fixes: gh-124
2018-10-15 09:36:45 -05:00
Joe Grandja
88f8bfeb57 Polish docs for WebClient OAuth2 Servlet Setup 2018-10-15 09:44:22 -04:00
Joe Grandja
07d2e43d7a Deprecate NimbusAuthorizationCodeTokenResponseClient
Fixes gh-5954
2018-10-15 09:01:19 -04:00
Joe Grandja
26fcde6f8e Document new features for OAuth Client
Fixes gh-5832
2018-10-12 19:24:02 -04:00
Rob Winch
a26eadc600 Snapshot Build uses Spring 5.+
Fixes: gh-5951
2018-10-12 16:57:08 -05:00
Rob Winch
e782cb09cb Update to Reactor Californium-SR1
Fixes: gh-5950
2018-10-12 16:52:27 -05:00
Rob Winch
7fcc47850f Update to Spring Boot 2.1.0.M4 2018-10-12 16:49:08 -05:00
Rob Winch
93ca455405 OAuth2LoginAuthenticationFilter ignores authenticated Users
This ensures that OAuth2 Client support works with the same log in URL as
oauth2 login.

Fixes: gh-5915
2018-10-12 16:29:27 -05:00
Thomas Jensen
e8045838e3 Fix minor typo in secure-objects.adoc 2018-10-10 10:43:34 -05:00
Josh Cummings
2307b01a7a
Resource Server Docs - Servlet
Fixes: gh-5912
2018-10-05 15:46:37 -06:00
Rob Winch
cbb25f7b87 Polish Getting Spring Security Reference
Fixes: gh-5921
2018-10-04 17:27:09 -05:00
John Lin
fe080cadbe Fix method name in the Contact sample code 2018-10-03 16:45:18 -04:00
Johnny Lim
68ffa0fece Add a missing space in Secured.value() signature 2018-10-03 14:47:48 -04:00
Tadaya Tsuyukubo
12050404ad Populate test security context with authentication
Add setAuthentication method on TestSecurityContextHolder.
2018-10-03 14:24:45 -04:00
Rob Winch
44ee15cb4d Next Development Version 2018-09-21 09:32:51 -05:00
Rob Winch
c073705d55 Release Spring Security 5.1.0.RELEASE
Fixes: gh-5895
5.1.0.RELEASE
2018-09-21 08:13:44 -05:00
John Lin
69b71ee0ed Remove unused variables in ConsensusBased and UnanimousBased 2018-09-21 08:12:40 -05:00
Rob Winch
5d18bb68ed Add @formatter to @EnableWebFluxSecurity Javadoc
Fixes: gh-5898
2018-09-21 08:11:50 -05:00
Rob Winch
e67264ae2c Update to Spring Data Lovelace-RELEASE
Fixes: gh-5885
2018-09-21 07:25:16 -05:00