13107 Commits

Author SHA1 Message Date
Steve Riesenberg
79c2b8709b
Allow form login when single OAuth2 Provider is configured
Closes gh-6802
2022-06-15 14:05:55 -05:00
Steve Riesenberg
a061191bd2 Allow form login when single OAuth2 Provider is configured
Closes gh-6802
2022-06-15 13:42:06 -05:00
Steve Riesenberg
d18291676f
Update copyright year
Issue gh-11372
2022-06-15 13:14:07 -05:00
Steve Riesenberg
c7df39a3e6
Fix tests using root cause for exception messages
Closes gh-11372
2022-06-14 17:12:15 -05:00
Eddú Meléndez
d98dab5917 Update java version to 17.0.3-tem 2022-06-14 14:43:34 -05:00
Steve Riesenberg
ac98e358a5 Add slack announcement when release is successful
Closes gh-11307
2022-06-14 14:10:09 -05:00
Steve Riesenberg
98fbc7a88f
Calculate release day from the first Monday
Fixes an issue where the first day of the month is (for example) a
Tuesday causing the 2nd Tuesday and 3rd Monday to be over a week apart.

Issue gh-10458
2022-06-09 15:30:37 -05:00
Josh Cummings
d22277ce36
Add missing KeyInfo
Closes gh-11354
2022-06-09 13:16:50 -06:00
Josh Cummings
bd60a0f8c9
Add OpenSamlSigningUtilsTests
Issue gh-11354
2022-06-09 13:16:49 -06:00
Josh Cummings
89fb075e2d
Add missing KeyInfo
Closes gh-11354
2022-06-09 13:14:19 -06:00
Josh Cummings
3a41567a18
Add OpenSamlSigningUtilsTests
Issue gh-11354
2022-06-09 13:14:13 -06:00
Josh Cummings
812bb0ead0
Add missing KeyInfo
Closes gh-11354
2022-06-09 13:12:52 -06:00
Josh Cummings
bb9c7d1b6e
Add OpenSamlSigningUtilsTests
Issue gh-11354
2022-06-09 13:12:33 -06:00
Jared Rufer
3ca4b06612
Support multiple SingleLogoutService bindings.
Closes gh-11286
2022-06-09 12:56:16 -06:00
Jared Rufer
89989722d0 Support multiple SingleLogoutService bindings.
Closes gh-11286
2022-06-09 12:50:33 -06:00
j3graham
29ba67b6d7 Remove dependency on commons-codec by using java.util.Base64
Closes gh-11318
2022-06-09 06:50:01 -06:00
j3graham
f3c96fa9cd Remove dependency on commons-codec by using java.util.Base64
Closes gh-11318
2022-06-09 06:49:39 -06:00
Steve Riesenberg
d1cb236df5
Fix slack notifications in #spring-security-ci
This change can be reverted if upgrading to a new version of
Gamesight/slack-workflow-status with the fix available (> 1.1.0).

Closes gh-11346
2022-06-07 16:07:10 -05:00
Zhivko Delchev
e97c5a533b Reverse content type check
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.

closes gh-11204
Closes gh-11205
2022-06-06 15:47:35 -05:00
Zhivko Delchev
d882bfcf2b Reverse content type check
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.

closes gh-11204
Closes gh-11205
2022-06-06 15:47:14 -05:00
Zhivko Delchev
cf69cdf008 Reverse content type check
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.

closes gh-11204
Closes gh-11205
2022-06-06 15:46:28 -05:00
Zhivko Delchev
1483a57018 Reverse content type check
When MultipartFormData is enabled currently the CsrfWebFilter compares
the content-type header against MULTIPART_FORM_DATA MediaType which
leads to NullPointerExecption when there is no content-type header.
This commit reverse the check to compare the MULTIPART_FORM_DATA
MediaType against the content-type which contains null check and avoids
the exception.

closes gh-11204
2022-06-06 15:45:55 -05:00
shirohoo
e0fa644b08 Fix typo in BasicLookupStrategy Javadoc
Closes gh-11336
2022-06-06 14:16:28 -05:00
Rob Winch
592db9180d Enable BackportBot on 5.6.x 2022-06-06 14:16:28 -05:00
Rob Winch
6c3f53ac0a Fix typo in BasicLookupStrategy Javadoc
Issue gh-11336
2022-06-06 14:09:24 -05:00
Rob Winch
f3590519c1 Fix typo in BasicLookupStrategy Javadoc
Closes gh-11336
2022-06-06 14:08:55 -05:00
Rob Winch
c9a4ff75d9 Fix typo in BasicLookupStrategy Javadoc
Issue gh-11336
2022-06-06 14:07:55 -05:00
shirohoo
b274431c07 Fix typo in BasicLookupStrategy Javadoc
Closes gh-11336
2022-06-06 13:55:43 -05:00
Rob Winch
3d5e5ff556 Enable BackportBot on 5.7.x 2022-06-06 13:54:36 -05:00
Rob Winch
66592c1e66 Enable BackportBot on 5.8.x 2022-06-06 13:53:58 -05:00
shirohoo
742d7535bb Fix typo in BasicLookupStrategy Javadoc
Closes gh-11336
2022-06-06 13:52:17 -05:00
shirohoo
9075176c52 Fix typo 2022-06-06 13:49:53 -05:00
Houssem BELHADJ AHMED
fc653bb81a
make SAML authentication request uri configurable
Closes gh-10840
2022-06-06 12:49:29 -06:00
Houssem BELHADJ AHMED
f4049c18b1 add SAML authentication request support to login configurer
Closes gh-8873
2022-06-06 08:05:33 -06:00
Houssem BELHADJ AHMED
33104269d6 make SAML authentication request uri configurable
Closes gh-10840
2022-06-06 08:05:33 -06:00
Steve Riesenberg
07f28de79b
Polish gh-11184
Propagate rename in notify_result section.
2022-06-03 15:23:48 -05:00
Steve Riesenberg
0ec64c0843 Polish GitHubMilestonePlugin 2022-06-03 15:07:42 -05:00
Steve Riesenberg
46723a601c Add workflow step for scheduling the next milestone
This step introduces the concept of a release train to determine the appropriate release dates and schedules milestones as needed. It uses the following rules:

- If the current SNAPSHOT version is a minor release (patchVersion == 0), checks to see if a GA release exists. If not, a release train is scheduled as follows:
  - Finds the next available release train starting month (including this month), either January or July.
  - Schedules a release train with M1, M2, M3, RC1 and GA versions on either January/February/March/April/May or July/August/September/October/November
- If the current SNAPSHOT version is a patch release (patchVersion != 0), checks to see if a GA release exists. If not, an individual milestone is scheduled on the next even month whose release day is in the future (can include this month).
- In either case, the release day used to schedule the release is based on the configured weekOfMonth (1-4) and dayOfWeek (1-5), e.g. 3rd Monday of the month (3, 1).

If a milestone already exists, nothing is created. Once created, milestone due dates can be updated manually as desired.

Closes gh-10458
2022-06-03 15:07:42 -05:00
Steve Riesenberg
ab3b6ae95f Add scheduleNextRelease gradle task 2022-06-03 15:07:42 -05:00
Steve Riesenberg
1295b793b3
Polish gh-11183
Fixed typo in plugin for setting workflowId and added missing repository() closure
2022-06-03 11:56:08 -05:00
Jyri-Matti Lähteenmäki
ca0a6d9777 Treat URLs as String before equals/hashcode
java.net.URL performs DNS lookups whenever its equals/hashCode is
used. Thus attribute values of type java.net.URL need to be converted
to something else before they are used for equals/hashCode.

Closes gh-10673
2022-06-03 11:36:00 -04:00
Kuby
e28fcbfbbe
Change phoneNumberVerified with type Boolean
Closes: gh-11315
2022-06-03 10:23:53 -05:00
Steve Riesenberg
ad19fc1330 Add workflow for scheduling releases on maintenance branches
Closes gh-11180
2022-06-03 10:19:02 -05:00
Steve Riesenberg
2c93a92afa Add dispatchGitHubWorkflow gradle task 2022-06-03 10:19:02 -05:00
Kuby
759d799ddd Change phoneNumberVerified with type Boolean
Closes: gh-11315
2022-06-03 09:46:00 -05:00
Marcus Da Coregio
4d65d96b8a Fix saml2Tests always running after a single test
This commit makes the check task depend on the saml2Tests task.
The test task was also configured to run after saml2Tests, to make sure that the
compileTestJava runs after the compileSaml2TestJava

Issue gh-10816
2022-06-03 11:22:46 -03:00
Marcus Da Coregio
3dd54bcda7 Run SAML 2.0 tests in an exclusive task
Issue gh-10816
2022-06-02 19:24:42 +02:00
Marcus Da Coregio
23903b5f18 Use Reflection to instantiate OpenSAML4 classes
Because the OpenSAML4 classes are compiled using Java 11, we have to rely on reflection to instante those classes since the config module should be compatible with Java 8

Issue gh-10816
2022-06-02 19:24:42 +02:00
Marcus Da Coregio
e20323e0a8 Use Java 11 Toolchain for OpenSaml4 compile
Issue gh-10816
2022-06-02 19:24:42 +02:00
Marcus Da Coregio
4631375270 Use Java 8 Toolchain for modules
Issue gh-10816
2022-06-02 19:24:42 +02:00