Spring Security
Go to file
Darren Forsythe 5556b821e3 Check for multiple access tokens per rfc 6750
Check for multiple access tokens on the ServerHttpRequest rather than get get first. If multiples are found throw a OAuth2AuthenticationException.

Closes gh-5708
2021-09-28 08:07:06 -06:00
.github Add Structure101 to CI Build 2021-09-27 16:23:19 -06:00
.idea Fix checkstyle rules could not be parsed 2020-11-23 14:33:18 -05:00
acl Remove DependencySetPlugin 2021-07-12 15:31:38 -05:00
aspects Remove DependencySetPlugin 2021-07-12 15:31:38 -05:00
bom fix bom 2021-05-17 22:29:45 -05:00
buildSrc Structure101 Build Plugin 2021-09-27 14:56:03 -06:00
cas Immutable SecurityContext 2021-08-11 17:12:13 -06:00
config Fix XsdDocumentedTests 2021-09-24 10:25:26 -05:00
core Fix typo 2021-09-27 10:55:18 -03:00
crypto Fix typo 2021-09-27 10:55:18 -03:00
data Remove DependencySetPlugin 2021-07-12 15:31:38 -05:00
dependencies Update org.mockito to 3.12.4 2021-09-17 16:40:58 -05:00
docs Better consistency between reactive and servlet 2021-09-23 15:50:14 -05:00
etc Establish Structure101 Baseline 2021-09-27 16:06:43 -06:00
gradle/wrapper Update to Gradle 6.9 2021-05-14 13:39:18 -05:00
itest Remove DependencySetPlugin 2021-07-12 15:31:38 -05:00
ldap Fix typo 2021-09-27 10:55:18 -03:00
messaging Remove DependencySetPlugin 2021-07-12 15:31:38 -05:00
oauth2 Check for multiple access tokens per rfc 6750 2021-09-28 08:07:06 -06:00
openid Remove DependencySetPlugin 2021-07-12 15:31:38 -05:00
remoting Immutable SecurityContext 2021-08-11 17:12:13 -06:00
rsocket Remove DependencySetPlugin 2021-07-12 15:31:38 -05:00
saml2/saml2-service-provider Saml2WebSsoAuthenticationFilter adds authentication details 2021-09-27 11:44:30 -03:00
scripts Fix Release Notes Template 2021-05-14 11:01:27 -05:00
taglibs Remove DependencySetPlugin 2021-07-12 15:31:38 -05:00
test Propagate TestSecurityContextHolder to SecurityContextHolder 2021-09-17 16:39:53 -03:00
web Fix typo 2021-09-27 10:55:18 -03:00
.editorconfig Use UTF-8 for Java sources and XML 2019-08-14 08:47:00 -05:00
.gitattributes Install Structure101 Plugin 2021-09-27 14:56:03 -06:00
.gitignore Ignore Lock Files 2020-02-07 13:59:05 -06:00
CONTRIBUTING.adoc master->main 2021-04-26 16:55:43 -05:00
LICENSE.txt Add LICENSE.txt 2020-04-15 16:44:13 -05:00
README.adoc Fix README local Maven install command 2021-07-07 12:01:57 +02:00
RELEASE.adoc Fix release instructions for generating changelog 2021-07-19 13:35:03 +02:00
build.gradle Install Structure101 Plugin 2021-09-27 14:56:03 -06:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Next Development Version 2021-09-20 13:13:33 -05:00
gradlew Update to Gradle 6.6.1 2020-10-12 17:41:16 -06:00
gradlew.bat Update to Gradle 6.6.1 2020-10-12 17:41:16 -06:00
local-antora-playbook.yml Add spring-security-docs-generated to local-antora-playbook.yml 2021-09-23 15:50:14 -05:00
notice.txt URL Cleanup 2019-03-19 23:53:23 -05:00
settings.gradle Update to com.gradle.enterprise 3.6.1 2021-05-17 10:37:09 -05:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://github.com/spring-projects/spring-security/workflows/CI/badge.svg?branch=main["Build Status", link="https://github.com/spring-projects/spring-security/actions?query=workflow%3ACI"]

image:https://img.shields.io/badge/Revved%20up%20by-Gradle%20Enterprise-06A0CE?logo=Gradle&labelColor=02303A["Revved up by Gradle Enterprise", link="https://ge.spring.io/scans?search.rootProjectNames=spring-security"]

= Spring Security

Spring Security provides security services for the https://docs.spring.io[Spring IO Platform]. Spring Security 5.0 requires Spring 5.0 as
a minimum and also requires Java 8.

For a detailed list of features and access to the latest release, please visit https://spring.io/projects[Spring projects].

== Code of Conduct
Please see our https://github.com/spring-projects/.github/blob/main/CODE_OF_CONDUCT.md[code of conduct]

== Downloading Artifacts
See https://docs.spring.io/spring-security/site/docs/current/reference/html5/#getting[Getting Spring Security] for how to obtain Spring Security.

== Documentation
Be sure to read the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the https://docs.spring.io/spring-security/site/docs/current/api/[Spring Security API Documentation].

== Quick Start
See https://docs.spring.io/spring-security/site/docs/current/reference/html5/#servlet-hello[Hello Spring Security] to get started with a "Hello, World" application.

== Building from Source
Spring Security uses a https://gradle.org[Gradle]-based build system.
In the instructions below, https://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
https://help.github.com/set-up-git-redirect[Git] and the https://www.oracle.com/technetwork/java/javase/downloads[JDK11 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk-11` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all spring-\* jars into your local Maven cache
[indent=0]
----
./gradlew publishToMavenLocal
----

=== Compile and test; build all jars, distribution zips, and docs
[indent=0]
----
./gradlew build
----

Discover more commands with `./gradlew tasks`.
See also the https://github.com/spring-projects/spring-framework/wiki/Gradle-build-and-release-FAQ[Gradle build and release FAQ].

== Getting Support
Check out the https://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
https://spring.io/services[Commercial support] is available too.

== Contributing
https://help.github.com/articles/creating-a-pull-request[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/main/CONTRIBUTING.adoc[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
https://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].