Spring Security
Go to file
Josh Cummings b189e0370a
PayloadInterceptorRSocket retains all payloads
Flux#skip discards its corresponding elements, meaning that they
aren't intended for reuse. When using RSocket's ByteBufPayloads,
this means that the bytes are releaseed back into RSocket's pool.

Since the downstream request may still need the skipped payload,
we should construct the publisher in a different way so as to
avoid the preemptive release.

Deferring Spring JavaFormat to clarify what changed.

Closes gh-9345
2021-06-04 13:45:30 -06:00
.github Use Github Actions workflow for PRs and remove Travis 2020-06-30 10:14:04 -04:00
.idea Add Checkstyle configuration for IntelliJ IDEA 2019-08-09 16:21:30 -05:00
acl Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
aspects Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
bom Use spring-build-conventions Bom plugin 2018-01-09 11:27:34 -06:00
buildSrc Add Gradle Lock Plugin 2020-01-06 14:46:48 -06:00
cas Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
config WebFlux httpBasic() matches on XHR requests 2021-04-20 09:42:08 -04:00
core Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
crypto Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
data Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
docs Fix Resource Server clock skew default value in docs 2021-06-02 12:56:37 +03:00
etc Polish LDAP Authentication 2020-01-16 09:38:40 -06:00
gradle Change Reactor Constraint to Take Latest SR 2020-06-03 12:25:52 -06:00
itest Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
ldap Handle encoded spaces in the root dn 2021-05-26 12:53:16 -05:00
messaging Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
oauth2 URL encode client credentials 2021-06-03 09:39:00 -05:00
openid Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
remoting Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
rsocket PayloadInterceptorRSocket retains all payloads 2021-06-04 13:45:30 -06:00
saml2/saml2-service-provider Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
samples Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
scripts Add custom release notes configuration file 2019-12-31 14:19:40 -05:00
taglibs Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
test Revert "Lock Dependencies" 2021-04-12 14:42:38 -04:00
web Adjust createNewSessionIfAllowed to prevent NPE 2021-05-26 15:13:55 -03:00
.editorconfig Use UTF-8 for Java sources and XML 2019-08-14 08:47:00 -05:00
.gitignore Ignore Lock Files 2020-02-07 13:59:05 -06:00
CODE_OF_CONDUCT.adoc URL Cleanup 2019-03-19 23:53:23 -05:00
CONTRIBUTING.md Use UTF-8 for Java sources and XML 2019-08-14 08:47:00 -05:00
Jenkinsfile docs.af.pivotal.io->docs-ip.spring.io 2021-04-27 09:52:20 -05:00
README.adoc Use Github Actions workflow for PRs and remove Travis 2020-06-30 10:14:04 -04:00
build.gradle Use spring-build-conventions:0.0.37 2021-01-25 20:44:27 -06:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Next Development Version 2021-04-12 14:43:21 -04:00
gradlew Update to Gradle 6.1.1 2020-02-04 23:36:47 -06:00
gradlew.bat Update to Gradle 5.5 2019-07-11 22:15:42 -04:00
license.txt URL Cleanup 2019-03-14 15:46:20 -05:00
notice.txt URL Cleanup 2019-03-19 23:53:23 -05:00
settings.gradle Idiomatic Kotlin DSL for configuring HTTP security 2020-01-07 12:08:43 -05:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

= Spring Security

Spring Security provides security services for the https://docs.spring.io[Spring IO Platform]. Spring Security 5.0 requires Spring 5.0 as
a minimum and also requires Java 8.

For a detailed list of features and access to the latest release, please visit https://spring.io/projects[Spring projects].

== Code of Conduct
This project adheres to the Contributor Covenant link:CODE_OF_CONDUCT.adoc[code of conduct].
By participating, you  are expected to uphold this code. Please report unacceptable behavior to spring-code-of-conduct@pivotal.io.

== Downloading Artifacts
See https://github.com/spring-projects/spring-framework/wiki/Downloading-Spring-artifacts[downloading Spring artifacts] for Maven repository information.

== Documentation
Be sure to read the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the https://docs.spring.io/spring-security/site/docs/current/api/[Spring Security API Documentation].

== Quick Start
We recommend you visit https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference] and read the "Getting Started" page.

== Building from Source
Spring Security uses a https://gradle.org[Gradle]-based build system.
In the instructions below, https://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
https://help.github.com/set-up-git-redirect[Git] and the https://www.oracle.com/technetwork/java/javase/downloads[JDK8 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk1.8.0` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all spring-\* jars into your local Maven cache
[indent=0]
----
./gradlew install
----

=== Compile and test; build all jars, distribution zips, and docs
[indent=0]
----
./gradlew build
----

Discover more commands with `./gradlew tasks`.
See also the https://github.com/spring-projects/spring-framework/wiki/Gradle-build-and-release-FAQ[Gradle build and release FAQ].

== Getting Support
Check out the https://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
https://spring.io/services[Commercial support] is available too.

== Contributing
https://help.github.com/articles/creating-a-pull-request[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/master/CONTRIBUTING.md[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
https://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].