Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
6,868 Commits 30 Branches 330 Tags 114 MiB
Commit Graph

6868 Commits

Author SHA1 Message Date
Rob Winch c0f52f73bb Update to Jackson 2.9.5 
Fixes: gh-5172
 2018-03-28 14:55:04 -05:00
Rob Winch 512fcf6094 Update mockwebserver 3.10.0 
Fixes: gh-5171
 2018-03-28 14:55:04 -05:00
Rob Winch 7a204a5f58 Fixes for SPR-16624 
Fixes: gh-5164
 2018-03-27 22:35:08 -05:00
Joe Grandja ce2f669245 Remove state assertion when loading OAuth2AuthorizationRequest 
Fixes gh-5163
 2018-03-27 20:06:30 -04:00
Josh Cummings ec46b7dbe1 WebSocketMessageBrokerConfigTests groovy->java 
Of note is that this commit unrolls three Spock @Unroll-parameterized
tests into a separate test for each parameter.

Issue: gh-4939
 2018-03-27 12:38:06 -05:00
Mark Hobson 3c07d99b0a Close quoted expected path in log when matching 2018-03-27 11:14:14 -05:00
Johnny Lim d20ed9f5c9 Fix @since for StrictHttpFirewall 2018-03-27 11:01:26 -05:00
Christoph Dreis d07cfe655d Use Supplier variants of Assert methods 2018-03-27 10:58:55 -05:00
Rob Winch 7d4e7bf42d Add JDK 10 & 11 Builds 
Issue: gh-5160
 2018-03-27 09:38:04 -05:00
Rob Winch b1d013e8f0 Fix JDK 9 
Issue: gh-5160
 2018-03-27 09:30:56 -05:00
Rob Winch 6f6aadbcff Add JDK 9 Build 
Issue: gh-5160
 2018-03-26 16:50:46 -05:00
Alter Ego 0e37c0912e Update User.java 
fixed a typo; replaced "User.witUsername("user")" with "User.withUsername("user")"
 2018-03-22 08:19:44 -05:00
Joe Grandja bb15213091 Ensure consistency by using Collection<GrantedAuthority> type 
Fixes gh-5143
 2018-03-21 10:35:18 -04:00
Joe Grandja 90f9d728cd Allow extension for OAuth2Error 
Fixes gh-5148
 2018-03-21 10:04:57 -04:00
Rob Winch e4255c9793
Add Security Vulnerabilities 2018-03-20 22:42:46 -05:00
Rob Winch 332c395875
Add Security Vulnerabilities Location 2018-03-20 22:42:15 -05:00
Rob Winch bf41d48718 HttpSessionOAuth2AuthorizationRequestRepository support distributed HttpSession 
Previously HttpSessionOAuth2AuthorizationRequestRepository
getAuthorizationRequest attempted to update the state of HttpSession as
well as getting the Map of OAuth2AuthorizationRequest. This had a few
problems

- First it was confusing that a get method updated state
- It worked when the session was in memory, but would not work when the
  HttpSesson was persisted to an external store (i.e. Spring Session) since
  after updating the Map, there was no invocation to update

This commit cleans up the logic and ensures that the values are explicitly
set in the HttpSession so it works with a session persisted in an external
store.

Fixes: gh-5146
 2018-03-20 22:14:48 -05:00
Rob Winch 04e2e86e6e Polish HttpSessionOAuth2AuthorizationRequestRepositoryTests 
Fixes: gh-5147
 2018-03-20 22:14:48 -05:00
Joe Grandja 59cef7d339 HttpSessionOAuth2AuthorizationRequestRepository handle multiple OAuth2AuthorizationRequest per session 
Fixes gh-5110
 2018-03-20 22:14:48 -05:00
Rob Winch 7e6ed52603 CookieClearingLogoutHandler adds uses contextPath + "/" 
Fixes: gh-2325
 2018-03-19 16:51:22 -05:00
Rob Winch 018ab7d92c Fix Javadoc Typo uses->use 
Issue: gh-5113
 2018-03-19 15:36:31 -05:00
Rob Winch 01152ede41 Clarify HttpSecurity.registerFilterAt 
Fixes: gh-5113
 2018-03-19 14:41:03 -05:00
Rob Winch 1851aaa66d Fix ReactorContextTestExecutionListener with custom SecurityContext 
Fixes: gh-5137
 2018-03-19 09:29:27 -05:00
Oleh Dokuka 76e36bd06e fix Mock Authentication resolution 2018-03-19 09:16:55 -05:00
Vedran Pavic b640d84b12 Improve EditorConfig file 2018-03-16 15:50:34 -05:00
Rob Winch 3a740ad988 Add SNAPSHOTs tests to CI 
Fixes: gh-5129
 2018-03-16 14:19:04 -05:00
Rob Winch 67d793ae5f Delay lookup of managedVersions 
Fixes: gh-5127
 2018-03-16 13:55:17 -05:00
Rob Winch efaf2b080f Make MIN_SPRING_VERSION Dynamic 
Fixes: gh-5065
 2018-03-16 13:53:40 -05:00
Rob Winch e86becc151 Relax assertions in HeaderSpecTests 
Fixes: gh-5116
 2018-03-15 08:30:37 -05:00
Rob Winch 4f709d47b9 Fix @since on GlobalAuthenticationConfigurerAdapter 
Fixes: gh-5106
 2018-03-13 14:23:36 -05:00
Rob Winch 452d855396 Fix appendix tests 2018-03-09 16:34:49 -06:00
Rob Winch 6e5105f899 Extract appendix subsections 
Issue: gh-2567
 2018-03-09 16:34:46 -06:00
Rob Winch 40bb73124c Move data to data/index 
Issue: gh-2567
 2018-03-09 16:34:42 -06:00
Rob Winch 780e6aefd2 Extract additional-topics subsections 
Issue: gh-2567
 2018-03-09 16:34:38 -06:00
Rob Winch 35345fac70 Extract authorization subsections 
Issue: gh-2567
 2018-03-09 16:34:35 -06:00
Rob Winch 8cf51032e0 Extract Subsections of Web 
Issue: gh-2567
 2018-03-09 16:34:31 -06:00
Rob Winch ae9075c023 Extract test subsections 
Issue: gh-2567
 2018-03-09 16:34:30 -06:00
Rob Winch cf4272ff64 Extract architecture subsections 
Issue: gh-2567
 2018-03-09 16:34:24 -06:00
Rob Winch 4152530e69 Fix new lines 
Issue: gh-2567
 2018-03-09 16:34:20 -06:00
Rob Winch 73cec43842 Extract subsections for preface 
Issue: gh-2567
 2018-03-09 16:34:12 -06:00
Rob Winch 86465026a1 Extract top level section of reference 
Issue: gh-2567
 2018-03-09 16:33:54 -06:00
Rob Winch e799f13ae2 Consistent new lines in referenche 
Issue: gh-2567
 2018-03-09 16:33:54 -06:00
Josh Cummings 744bb1b1be Advisory to avoid markdown in commit messages 
Today, @rwinch and I were discussing the merits of leaving commit messages free of formatting hints, like back-ticks. Adding this bullet-point brings things into line with expectations.
 2018-03-09 14:20:43 -06:00
Josh Cummings 776b378a1d Authorities authenticate TestingAuthenticationToken 
In other extensions of `AbstractAuthenticationToken`, the constructors
that include `authorities` call `setAuthenticated(true)`. This includes
`PreAuthenticated`-, `UsernamePassword`-, and
`RememberMeAuthenticationToken`.

This change brings `TestingAuthenticationToken` in line with that
convention.

Note that this was done once already to one of the constructors
(ee13be4) in `TestingAuthenticationToken` that takes an arity of
`authorities`. It was not propagated to the constructor that takes a
collection, which is what this commit remedies.

Fixes: gh-5073
 2018-03-09 13:21:47 -06:00
Rob Winch d21338d212 Support errorOnInvalidType for Reactive AuthenticationPrincipal 
Fixes: gh-5096
 2018-03-09 12:05:55 -06:00
Rob Winch a2073b2b91 Support BeanResolver for Reactive AuthenticationPrincipal 
Fixes: gh-4326
 2018-03-09 12:05:55 -06:00
Rob Winch d816af2337 Add BadCredentials Jackson Support to What's New 
Issue: gh-5087
 2018-03-09 12:05:55 -06:00
Rob Winch 7fafd899ee Add Reactive WithUserDetails to What's new 
Issue: gh-4888
 2018-03-09 12:05:55 -06:00
Josh Cummings bc21f80ebe Update to Spring Boot 2.0.0.RELEASE 
Fixes: gh-5061
 2018-03-09 09:46:38 -06:00
Rob Winch 65193963ad Fix Imports 
Issue: gh-4888
 2018-03-09 09:15:39 -06:00