Spring Security
Go to file
Édouard Hue e8dd1325fd Fixed misleading OAuth2 error messages
Error messages sent by BearerTokenAccessDeniedHandler included
information about the scopes of the rejected token instead of
the scopes required by the resource.
* Removal of token scopes from error_description attribute.
* Removal of scope attribute from WWW-Authenticate response header.

Fixes gh-7089
2019-07-18 07:01:33 -04:00
.github Use https link to Stack Overflow 2019-06-19 12:44:43 -05:00
acl Cleanup redundant type casts 2019-07-10 09:31:09 -05:00
aspects URL Cleanup 2019-03-14 15:46:20 -05:00
bom Use spring-build-conventions Bom plugin 2018-01-09 11:27:34 -06:00
buildSrc Migrate TrangPlugin groovy->java 2019-07-10 11:21:54 -05:00
cas Cleanup redundant type casts 2019-07-10 09:31:09 -05:00
config Fixed misleading OAuth2 error messages 2019-07-18 07:01:33 -04:00
core Add Chinese Traditional localized messages. 2019-07-10 12:01:22 -05:00
crypto Cleanup redundant type casts 2019-07-10 09:31:09 -05:00
data SecurityEvaluationContextExtension implements latest EvaluationContextExtension 2019-04-11 10:04:57 -04:00
docs Fix typo in documentation 2019-07-16 12:01:07 -05:00
etc Add nohttp 2019-04-26 15:34:45 -05:00
gradle Update to Gradle 5.5.1 2019-07-11 22:15:42 -04:00
itest Cleanup redundant type casts 2019-07-10 09:31:09 -05:00
ldap Cleanup explicit type arguments 2019-07-10 09:32:41 -05:00
messaging Cleanup explicit type arguments 2019-07-10 09:32:41 -05:00
oauth2 Fixed misleading OAuth2 error messages 2019-07-18 07:01:33 -04:00
openid Cleanup explicit type arguments 2019-07-10 09:32:41 -05:00
remoting Manual URL Cleanup 2019-03-29 13:24:11 -04:00
samples DSL nested builder for HTTP security 2019-07-12 16:09:19 -05:00
scripts Add file extension to wait-for-done 2019-06-24 14:10:50 -06:00
taglibs URL Cleanup 2019-03-19 23:53:23 -05:00
test Cleanup redundant type casts 2019-07-10 09:31:09 -05:00
web DSL nested builder for HTTP security 2019-07-12 16:09:19 -05:00
.editorconfig Polish 2019-03-22 18:30:56 -06:00
.gitignore Git ignore .attach_pid* files 2019-05-13 14:42:55 -05:00
.travis.yml .travis continue on failure 2017-12-20 15:38:22 -06:00
CODE_OF_CONDUCT.adoc URL Cleanup 2019-03-19 23:53:23 -05:00
CONTRIBUTING.md Add Stackoverflow to Contributor Guidelines 2019-06-19 11:23:11 -05:00
Jenkinsfile Jenkins build performs git clean 2019-06-14 07:43:22 -06:00
README.adoc URL Cleanup 2019-03-19 23:53:23 -05:00
build.gradle Update to nohttp 0.0.2.RELEASE 2019-06-05 09:52:24 -05:00
class_mapping_from_2.0.x.txt SEC-1148: Simple classname mapping from 2.0 to 3.0 2009-12-02 22:44:30 +00:00
gradle.properties Next Development Version 2019-06-14 16:14:19 -04:00
gradlew Update to Gradle 5.5 2019-07-11 22:15:42 -04:00
gradlew.bat Update to Gradle 5.5 2019-07-11 22:15:42 -04:00
license.txt URL Cleanup 2019-03-14 15:46:20 -05:00
notice.txt URL Cleanup 2019-03-19 23:53:23 -05:00
settings.gradle Fix settings.gradle on Windows 2018-08-22 10:21:41 -05:00

README.adoc

image::https://badges.gitter.im/Join%20Chat.svg[Gitter,link=https://gitter.im/spring-projects/spring-security?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge]

image:https://travis-ci.org/spring-projects/spring-security.svg?branch=master["Build Status", link="https://travis-ci.org/spring-projects/spring-security"]

= Spring Security

Spring Security provides security services for the https://docs.spring.io[Spring IO Platform]. Spring Security 5.0 requires Spring 5.0 as
a minimum and also requires Java 8.

For a detailed list of features and access to the latest release, please visit https://spring.io/projects[Spring projects].

== Code of Conduct
This project adheres to the Contributor Covenant link:CODE_OF_CONDUCT.adoc[code of conduct].
By participating, you  are expected to uphold this code. Please report unacceptable behavior to spring-code-of-conduct@pivotal.io.

== Downloading Artifacts
See https://github.com/spring-projects/spring-framework/wiki/Downloading-Spring-artifacts[downloading Spring artifacts] for Maven repository information.

== Documentation
Be sure to read the https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference].
Extensive JavaDoc for the Spring Security code is also available in the https://docs.spring.io/spring-security/site/docs/current/api/[Spring Security API Documentation].

== Quick Start
We recommend you visit https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/[Spring Security Reference] and read the "Getting Started" page.

== Building from Source
Spring Security uses a https://gradle.org[Gradle]-based build system.
In the instructions below, https://vimeo.com/34436402[`./gradlew`] is invoked from the root of the source tree and serves as
a cross-platform, self-contained bootstrap mechanism for the build.

=== Prerequisites
https://help.github.com/set-up-git-redirect[Git] and the https://www.oracle.com/technetwork/java/javase/downloads[JDK8 build].

Be sure that your `JAVA_HOME` environment variable points to the `jdk1.8.0` folder extracted from the JDK download.

=== Check out sources
[indent=0]
----
git clone git@github.com:spring-projects/spring-security.git
----

=== Install all spring-\* jars into your local Maven cache
[indent=0]
----
./gradlew install
----

=== Compile and test; build all jars, distribution zips, and docs
[indent=0]
----
./gradlew build
----

Discover more commands with `./gradlew tasks`.
See also the https://github.com/spring-projects/spring-framework/wiki/Gradle-build-and-release-FAQ[Gradle build and release FAQ].

== Getting Support
Check out the https://stackoverflow.com/questions/tagged/spring-security[Spring Security tags on Stack Overflow].
https://spring.io/services[Commercial support] is available too.

== Contributing
https://help.github.com/articles/creating-a-pull-request[Pull requests] are welcome; see the https://github.com/spring-projects/spring-security/blob/master/CONTRIBUTING.md[contributor guidelines] for details.

== License
Spring Security is Open Source software released under the
https://www.apache.org/licenses/LICENSE-2.0.html[Apache 2.0 license].