Spring Security
Go to file
Rob Winch 050198e51b Fix csrf() when used then not used
Previously if csrf() was used and subsequently not used, the
TestCsrfTokenRepository was still used. This makes it difficult to test
the actual CsrfTokenRepository implementation.

Now the TestCsrfTokenRepository is only used if explicitly enabled.

Fixes gh-4016
2016-08-09 17:09:16 -04:00
.github Remove the CLA confirmation from template 2016-06-13 13:20:22 -05:00
acl Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
aspects Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
bom Upgrade to Sonarqube plugin 2016-03-14 13:56:49 -05:00
buildSrc SEC-2963: Update to latest Google AppEngine 2015-07-20 12:36:29 -05:00
cas Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
config Logout is 204 for XMLHttpRequest 2016-08-02 11:26:52 -07:00
core Improve field visibility in DefaultMethodSecurityExpressionHandler 2016-07-26 09:56:00 -04:00
crypto Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
data Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
docs Fix typos in reference (#3979) 2016-07-19 15:42:23 -05:00
etc Fix checkstyle import into Eclipse 2016-03-14 09:19:55 -05:00
gradle Bump PermGen 2016-07-12 10:08:01 -05:00
itest Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
ldap Fix test assertions 2016-07-07 13:29:00 -05:00
messaging Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
openid Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
remoting Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
samples Release version 4.1.1.RELEASE 2016-07-07 00:57:35 +00:00
sandbox Clean up code to conform to basic checkstyle 2016-03-14 00:15:12 -05:00
taglibs Update version to 4.2.0.BUILD-SNAPSHOT 2016-07-07 12:56:20 -05:00
test Fix csrf() when used then not used 2016-08-09 17:09:16 -04:00
web DummyRequest supports methods for MvcRequestMatcher 2016-07-14 14:18:31 -05:00
.editorconfig Provide editor config for spring-security 2016-05-03 12:26:56 -04:00
.gitignore Fix checkstyle import into Eclipse 2016-03-14 09:19:55 -05:00
.travis.yml Add Travis Build 2016-03-15 08:37:51 -05:00
CODE_OF_CONDUCT.adoc SEC-3209: Add Code of Conduct 2016-02-01 14:23:59 -06:00
CONTRIBUTING.md Document schema changes in CONTRIBUTING.md (#3965) 2016-07-08 13:27:23 -05:00
README.adoc Add Travis Build 2016-03-15 08:37:51 -05:00
build.gradle Default to Spring IO Athens-SNAPSHOT 2016-07-12 10:07:49 -05:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Update version to 4.2.0.BUILD-SNAPSHOT 2016-07-07 12:56:20 -05:00
gradlew Upgrade Gradle to 2.14 2016-06-28 13:13:08 -04:00
gradlew.bat Upgrade Gradle to 2.14 2016-06-28 13:13:08 -04:00
license.txt Change to Apache License version 2.0. 2004-03-23 04:44:48 +00:00
notice.txt Broaden list of names used and correct URL. 2007-12-03 04:39:17 +00:00
settings.gradle Add Hello World Spring Boot sample 2016-05-04 17:26:42 -04:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://travis-ci.org/spring-projects/spring-security.svg?branch=master["Build Status", link="https://travis-ci.org/spring-security/spring-security"]

= Spring Security

Spring Security provides security services for the http://docs.spring.io[Spring IO Platform]. Spring Security 3.1 requires Spring 3.0.3 as
a minimum and also requires Java 5.

For a detailed list of features and access to the latest release, please visit http://spring.io/projects[Spring projects].

== Code of Conduct
This project adheres to the Contributor Covenant link:CODE_OF_CONDUCT.adoc[code of conduct].
By participating, you  are expected to uphold this code. Please report unacceptable behavior to spring-code-of-conduct@pivotal.io.

== Downloading Artifacts
See https://github.com/spring-projects/spring-framework/wiki/Downloading-Spring-artifacts[downloading Spring artifacts] for Maven repository information.

== Documentation
Be sure to read the http://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the http://docs.spring.io/spring-security/site/docs/current/apidocs/[Spring Security API Documentation].

== Quick Start
We recommend you visit http://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference] and read the "Getting Started" page.

== Building from Source
Spring Security uses a http://gradle.org[Gradle]-based build system.
In the instructions below, http://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
http://help.github.com/set-up-git-redirect[Git] and the http://www.oracle.com/technetwork/java/javase/downloads[JDK7 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk1.7.0` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all spring-\* jars into your local Maven cache
[indent=0]
----
./gradlew install
----

=== Compile and test; build all jars, distribution zips, and docs
[indent=0]
----
./gradlew build
----

Discover more commands with `./gradlew tasks`.
See also the https://github.com/spring-projects/spring-framework/wiki/Gradle-build-and-release-FAQ[Gradle build and release FAQ].

== Getting Support
Check out the http://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
http://spring.io/services[Commercial support] is available too.

== Contributing
http://help.github.com/send-pull-requests[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/master/CONTRIBUTING.md[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
http://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].