Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
9,811 Commits 26 Branches 0 Tags
5.4.x
Commit Graph

806 Commits

Author SHA1 Message Date
Josh Cummings
7e50d2e058 Adjust ClientRegistrationsTests 
Closes gh-9748
 2023-03-17 10:24:23 -06:00
Steve Riesenberg
3e2ac82612 Merge branch '5.3.x' into 5.4.x 2022-10-28 11:10:39 -05:00
Steve Riesenberg
5560bbaa80 Merge branch '5.2.x' into 5.3.x 2022-10-28 11:07:51 -05:00
Steve Riesenberg
75004587a4 Fix scope mapping 
Issue gh-12101
 2022-10-28 11:00:27 -05:00
Marcus Da Coregio
b8b0661d73 Lock Dependencies for Release 2022-05-16 14:01:51 -06:00
Eleftheria Stein
3389cf3ffc Revert "Lock dependencies" 
This reverts commit 83bb4603f8.
 2021-12-20 21:55:35 +02:00
Marcus Da Coregio
cfbf28b8ba Revert "Lock Dependencies for Release" 
This reverts commit 3d4e90ba2a.
 2021-12-20 16:47:36 -03:00
Eleftheria Stein
83bb4603f8 Lock dependencies 2021-12-20 21:17:17 +02:00
Marcus Da Coregio
3d4e90ba2a Lock Dependencies for Release 2021-12-20 16:03:13 -03:00
Jonas Erbe
606bf6b38d Fix JwtClaimValidator wrong error code 
Previously JwtClaimValidator returned the invalid_request
error on claim validation failure.

But validators have to return invalid_token errors on failure
according to:

https://datatracker.ietf.org/doc/html/rfc6750#section-3.1.

Closes gh-10337
 2021-11-29 13:30:38 -07:00
Jonas Erbe
5c732b9b7f Fix JwtClaimValidator wrong error code 
Previously JwtClaimValidator returned the invalid_request error on claim validation failure.
But validators have to return invalid_token errors on failure according to:
https://datatracker.ietf.org/doc/html/rfc6750#section-3.1.
Also see gh-10337

Closes gh-10337
 2021-11-29 12:34:53 -07:00
Josh Cummings
7b03fb5321 Don't Cache ReactiveJwtDecoders Errors 
Closes gh-10444
 2021-11-10 18:17:33 -07:00
Josh Cummings
f89a34c30b Don't Cache ReactiveJwtDecoders Errors 
Closes gh-10444
 2021-11-10 18:07:14 -07:00
Steve Riesenberg
0704c709dc Revert "Lock Dependencies for Release" 
This reverts commit 03c2c49d66.
 2021-10-18 17:38:07 -05:00
Steve Riesenberg
03c2c49d66 Lock Dependencies for Release 2021-10-18 17:34:42 -05:00
Steve Riesenberg
c83bd075a2 Revert "Lock Dependencies for Release" 
This reverts commit bedb569f0d.
 2021-10-18 16:49:15 -05:00
Steve Riesenberg
bedb569f0d Lock Dependencies for Release 2021-10-18 15:38:17 -05:00
Joe Grandja
5c8cd23a2d Revert "Lock dependencies" 
This reverts commit fc53f81d2e.
 2021-10-18 10:48:23 -04:00
Eleftheria Stein
fc53f81d2e Lock dependencies 2021-10-14 15:44:09 +02:00
Josh Cummings
dc95d8d705 Fix OAuth2 Error Code 
Closes gh-10319
 2021-09-28 15:23:53 -06:00
Josh Cummings
4df9b4547f Fix OAuth2 Error Code 
Closes gh-10319
 2021-09-28 14:56:25 -06:00
Fabio Guenci
8c1201ae49 Preserve Null Claim Values 
Prior to this commit ClaimTypeConverter returned the claims with the
original value for all the claims with a null converted value.
The changes allows ClaimTypeConverter to overwrite and return claims
with converted value of null.

Closes gh-10135
 2021-08-16 15:07:23 -06:00
Joe Grandja
ec6b2203ca Revert "Lock Dependencies for Release" 
This reverts commit 067bdd0dd9.
 2021-08-16 11:55:39 -04:00
Joe Grandja
067bdd0dd9 Lock Dependencies for Release 2021-08-16 11:12:40 -04:00
Fabio Guenci
9925c6a4c0 Preserve Null Claim Values 
Prior to this commit ClaimTypeConverter returned the claims with the
original value for all the claims with a null converted value.
The changes allows ClaimTypeConverter to overwrite and return claims
with converted value of null.

Closes gh-10135
 2021-08-16 08:44:27 -06:00
Fabio Guenci
f33598946f Preserve Null Claim Values 
Prior to this commit ClaimTypeConverter returned the claims with the
original value for all the claims with a null converted value.
The changes allows ClaimTypeConverter to overwrite and return claims
with converted value of null.

Closes gh-10135
 2021-08-16 08:40:39 -06:00
Marcus Da Coregio
c706a103f9 Revert "Lock Dependencies" 
This reverts commit 1533f098d2.
 2021-08-16 10:35:39 -03:00
Marcus Da Coregio
1533f098d2 Lock Dependencies 2021-08-16 09:42:34 -03:00
Steve Riesenberg
e1b6a7ba29 Revert "URL encode client credentials" 
This reverts commit c0200512a7.

Issue gh-9610 gh-9863
Closes gh-10018
 2021-07-20 14:06:46 -05:00
Steve Riesenberg
f55247e28a Revert "URL encode client credentials" 
This reverts commit 6cafa48369.

Issue gh-9610 gh-9862
Closes gh-10018
 2021-07-20 14:05:55 -05:00
Steve Riesenberg
dc81e1c86b Revert "URL encode client credentials" 
This reverts commit 5243b1b8a8.

Issue gh-9610 gh-9861
Closes gh-10018
 2021-07-20 13:29:29 -05:00
Marcus Da Coregio
b0d22d1a03 Revert "Lock Dependencies" 
This reverts commit eb300c78bd.
 2021-06-22 10:20:07 -03:00
Steve Riesenberg
c17767883f Revert "Lock Dependencies for Release" 
This reverts commit d71be4ca28.
 2021-06-21 12:57:05 -05:00
Josh Cummings
d71be4ca28 Lock Dependencies for Release 2021-06-21 10:33:10 -06:00
Marcus Da Coregio
eb300c78bd Lock Dependencies 2021-06-21 09:23:19 -03:00
Arnaud Mergey
1cd4ffeeb7 fix typo preventing full exception to be displayed in log 
closes gh-9901
 2021-06-17 08:40:55 -06:00
Steve Riesenberg
67a18f564a Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository 
Related to gh-9649
Closes gh-9857
 2021-06-15 12:14:37 -05:00
Steve Riesenberg
b6ae11295f Commit missing compile fix from cherry-pick conflict 2021-06-15 12:10:06 -05:00
Steve Riesenberg
ee9c8e2fd0 Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository 
Related to gh-9649
Closes gh-9857
 2021-06-15 12:06:22 -05:00
Steve Riesenberg
a108868529 Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository 
Related to gh-9649
Closes gh-9857
Closes gh-9912
 2021-06-15 11:44:34 -05:00
Steve Riesenberg
c0200512a7 URL encode client credentials 
Closes gh-9610
 2021-06-08 08:27:20 -05:00
Steve Riesenberg
6cafa48369 URL encode client credentials 
Closes gh-9610
 2021-06-03 09:39:00 -05:00
Steve Riesenberg
5243b1b8a8 URL encode client credentials 
Closes gh-9610
 2021-06-03 09:29:25 -05:00
Josh Cummings
6d816fbf85 Polish postLogoutRedirectUri encoding 
Issue gh-9511
 2021-05-26 14:38:20 -06:00
Hans Hosea Schaefer
e52b104636 Encode postLogoutRedirectUri query params 
Now encodes already encoded queryparameters in postLogoutRedirectUrl
correctly

Closes gh-9511
 2021-05-26 14:36:05 -06:00
Josh Cummings
24c3c52254 Polish postLogoutRedirectUri encoding 
Issue gh-9511
 2021-05-26 13:58:28 -06:00
Hans Hosea Schaefer
499701e67a Encode postLogoutRedirectUri query params 
Now encodes already encoded queryparameters in postLogoutRedirectUrl
correctly

Closes gh-9511
 2021-05-26 13:58:23 -06:00
Steve Riesenberg
d3a3c36ad3 Handle custom status codes in error handler 
Fixes an issue where custom status codes in the error response cause an
IllegalArgumentException to be thrown when resolving an HttpStatus.

Closes gh-9741
 2021-05-25 16:14:35 -05:00
Steve Riesenberg
22272321f2 Handle custom status codes in error handler 
Fixes an issue where custom status codes in the error response cause an
IllegalArgumentException to be thrown when resolving an HttpStatus.

Closes gh-9741
 2021-05-25 15:37:37 -05:00
Steve Riesenberg
589eccc547 Handle custom status codes in error handler 
Fixes an issue where custom status codes in the error response cause an
IllegalArgumentException to be thrown when resolving an HttpStatus.

Closes gh-9741
 2021-05-25 15:08:05 -05:00