9132 Commits

Author SHA1 Message Date
Rob Winch
38e9e8ca52 Optimize HttpSessionSecurityContextRepository
Closes gh-9387
2021-02-11 13:00:31 -06:00
Josh Cummings
974156d5fb
Release 5.2.9.RELEASE 5.2.9.RELEASE 2021-02-11 10:37:22 -07:00
Rob Winch
e2121532a2
Optimize HttpSessionSecurityContextRepository
Closes gh-9387
2021-02-11 09:38:04 -07:00
Rob Winch
7cab7b06c5
Optimize HttpSessionSecurityContextRepository
Closes gh-9387
2021-02-11 09:38:04 -07:00
Josh Cummings
f60daa5152
Update to GAE 1.9.86
Closes gh-9442
2021-02-11 09:31:37 -07:00
Josh Cummings
f63b770ec5
Update to Tomcat 9.0.43
Closes gh-9441
2021-02-11 09:31:30 -07:00
Josh Cummings
44bb975f82
Update to Jetty 9.4.36.v20210114
Closes gh-9440
2021-02-11 09:31:25 -07:00
Josh Cummings
3cb6b3e5d6
Update to hibernate-validator 6.1.7.Final
Closes gh-9439
2021-02-11 09:31:20 -07:00
Josh Cummings
db07cea579
Update to hibernate-entitymanager 5.4.28.Final
Closes gh-9438
2021-02-11 09:31:15 -07:00
Josh Cummings
0fb60c3aa7
Update to thymeleaf-spring5 3.0.12
Closes gh-9437
2021-02-11 09:31:11 -07:00
Josh Cummings
31cb29cb2d
Update to Spring Data Moore-SR12
Closes gh-9436
2021-02-11 09:31:03 -07:00
Josh Cummings
46bfc00db2
Update to Reactor Dysprosium-SR16
Closes gh-9435
2021-02-11 09:30:57 -07:00
Josh Cummings
987b14d1d4
Update to Spring Framework 5.2.12.RELEASE
Closes gh-9434
2021-02-11 09:30:52 -07:00
Josh Cummings
1f19ee04e1
Update to Spring Boot 2.2.13.RELEASE
Closes gh-9433
2021-02-11 09:30:39 -07:00
Rob Winch
996ccc08a4 Next Development Version 2021-02-11 09:52:42 -06:00
Rob Winch
ec8f6014d4 Revert "Lock dependencies"
This reverts commit fa5f789bebe26da0e9b49dde0b0563755b43a25d.
2021-02-11 09:51:54 -06:00
Rob Winch
b3815dfc20 Release 5.3.7.RELEASE 5.3.7.RELEASE 2021-02-11 08:54:19 -06:00
Rob Winch
fa5f789beb Lock dependencies 2021-02-11 08:53:40 -06:00
Josh Cummings
005eca7bd9
Fix Test Configuration
- Typo in PlaceholderConfig was causing Windows builds to
resolve the CLASSPATH environment variable

Closes gh-9421
2021-02-10 11:37:32 -07:00
Josh Cummings
87cc4d4519
Fix Test Configuration
- Typo in PlaceholderConfig was causing Windows builds to
resolve the CLASSPATH environment variable

Closes gh-9421
2021-02-10 11:36:44 -07:00
Josh Cummings
68ac3ef36b
Polish Tests
Issue gh-9331
2021-02-03 09:34:20 -07:00
happier233
7a5c34ca57
Configure CurrentSecurityContextArgumentResolver BeanResolver
Closes gh-9331
2021-02-03 09:34:13 -07:00
Josh Cummings
10946e8153
Polish Tests
Issue gh-9331
2021-02-03 09:30:27 -07:00
happier233
3cb98ebed0
Configure CurrentSecurityContextArgumentResolver BeanResolver
Closes gh-9331
2021-02-03 09:24:22 -07:00
Joe Grandja
542c625d7d Allow null or empty authorities for DefaultOAuth2User
Make DefaultOAuth2User more inline with other part of
spring-security.
For example,
- DefaultOAuth2AuthenticatedPrincipal
- AbstractAuthenticationToken

Closes gh-9366
2021-02-02 04:43:29 -05:00
Joe Grandja
e7acd1219d Allow null or empty authorities for DefaultOAuth2User
Make DefaultOAuth2User more inline with other part of
spring-security.
For example,
- DefaultOAuth2AuthenticatedPrincipal
- AbstractAuthenticationToken

Closes gh-9366
2021-02-02 04:35:39 -05:00
Josh Cummings
84b560919c
Change Example Name
Closes gh-9379
2021-01-28 11:24:19 -07:00
Rob Winch
4de2dbb4cd Update to spring-build-conventions:0.0.23.1.RELEASE
Fixes use of repo.spring.io
2021-01-26 11:11:05 -06:00
Rob Winch
c23b0da607 Use spring-build-conventions:0.0.37 2021-01-25 20:44:27 -06:00
Benjamin Faal
98399c920a Make user info response status check error only
Closes gh-9336
2021-01-25 11:10:03 -05:00
Benjamin Faal
0f7360e8fa Make user info response status check error only
Closes gh-9336
2021-01-25 10:46:07 -05:00
Josh Cummings
52ad49074d
Migrate SAML 2.0 Tests and Docs to PCFOne
Issue gh-9362
2021-01-25 08:32:17 -07:00
Josh Cummings
d722ac7757
Fix SAML 2.0 Sample Test
Issue gh-9362
2021-01-22 15:13:02 -07:00
Josh Cummings
2985d805b0
Migrate SAML 2.0 Test and Docs to PCFOne
Issue gh-9362
2021-01-22 15:12:31 -07:00
Josh Cummings
6df5dc4ecf
Migrate SAML 2.0 Samples to PCFOne
Closes gh-9362
2021-01-22 13:51:46 -07:00
Josh Cummings
32acb04efe
Fix SAML 2.0 Javaconfig Sample
Issue gh-9362
2021-01-22 13:51:37 -07:00
Josh Cummings
e974c93f72
Migrate SAML 2.0 Samples to PCFOne
Closes gh-9362
2021-01-22 11:50:49 -07:00
Josh Cummings
7aeda7c8d8
Fix SAML 2.0 Javaconfig Sample
Issue gh-9362
2021-01-22 11:33:40 -07:00
Eleftheria Stein
57dfbeecbb Provide artifactoryUsername/Password in docs and schema jobs 2021-01-22 16:07:17 +01:00
Eleftheria Stein
02e13dc93e Provide artifactoryUsername/Password in docs and schema jobs 2021-01-22 14:55:14 +01:00
Eleftheria Stein
5315b2eeca Resolve artifacts from Maven Central first
- Use spring-build-conventions:0.0.36
- Add https://repo.spring.io/release to reference

Closes gh-9367
2021-01-22 13:54:47 +01:00
Rob Winch
1181740f79 Constant Time Comparison for CSRF tokens
Closes gh-9291
2021-01-20 16:18:25 -06:00
Rob Winch
e6d6b39767 Constant Time Comparison for CSRF tokens
Closes gh-9291
2021-01-20 16:17:25 -06:00
Rob Winch
628ea00ad4 Fix CsrfWebFilter error message when expected CSRF not found
Closes gh-9337
2021-01-12 11:31:26 -06:00
Rob Winch
b08075a721 Fix CsrfWebFilter error message when expected CSRF not found
Closes gh-9337
2021-01-12 11:30:12 -06:00
Josh Cummings
0fc80a6a65
Renew Sample Certificate
Closes gh-9320
2021-01-04 12:12:29 -07:00
Josh Cummings
6dc22835fd
Renew Sample Certificate
Closes gh-9320
2021-01-04 12:12:17 -07:00
Ovidiu Popa
174b71c017 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 11:42:00 -05:00
Ovidiu Popa
7d31837af3 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 11:20:11 -05:00
Josh Cummings
17276ad787
Next Development Version 2020-12-02 19:32:48 -07:00