Commit Graph

10370 Commits

Author SHA1 Message Date
Rob Winch
0bf985ed7c AnonymousAuthenticationFilter Avoids Eager SecurityContext Access
Previously AnonymousAuthenticationFilter accessed the SecurityContext to
determine if anonymous authentication needed setup eagerly. Now this is done
lazily to avoid unnecessary access to the SecurityContext which in turn avoids
unnecessary HTTP Session access.

Closes gh-11457
2022-07-05 15:51:12 -05:00
Igor Bolic
d96b4a0463 Set the useTrailingSlashMatch to true for tests
The Spring MVC changed the default behavior for trailing slash match
with https://github.com/spring-projects/spring-framework/issues/28552.
This causes failures in Spring Security's tests.

Setting the `useTrailingSlashMatch` to `true` ensures that Spring
Security will work for users who have modified the default configuration.
Specifing the request mapper with trailing slash path ensures that the tests
are successful when default behavior is used.

Closes gh-11451
2022-07-05 11:29:36 -06:00
Rob Winch
6510274854 Request Cache supports matchingRequestParameterName
Closes gh-7157 gh-11453
2022-07-01 16:51:49 -05:00
Josh Cummings
459003e1b3 Use SecurityContextHolderStrategy for Context Propagation
Issue gh-11060
2022-06-30 11:19:33 -06:00
Josh Cummings
d18ff25b95 Use SecurityContextHolderStrategy for NullSecurityContextRepository
Issue gh-11060
2022-06-28 15:33:06 -06:00
Josh Cummings
05b788d1ac Use SecurityContextHolderStrategy for Concurrency Filter
Issue gh-11060
Issue gh-11061
2022-06-28 15:33:05 -06:00
Josh Cummings
d24a89ad53 Pick up SecurityContextHolderStrategy for WebClient integration
Issue gh-11061
2022-06-28 15:07:16 -06:00
Josh Cummings
a218d3e140 Use SecurityContextHolderStrategy for Async Requests
Issue gh-11060
Issue gh-11061
2022-06-28 14:56:55 -06:00
Josh Cummings
5086409dcf Use SecurityContextHolderStrategy for Digest
Issue gh-11060
2022-06-28 13:54:56 -06:00
Josh Cummings
44d99f41a3 Use SecurityContextHolderStrategy for Switch User
Issue gh-11060
2022-06-28 13:35:39 -06:00
Josh Cummings
83b3bb3209 Add SecurityContextHolderStrategy to Pre-authenticated scenarios
Issue gh-11060
Issue gh-11061
2022-06-28 12:10:07 -06:00
Josh Cummings
97cb2a7d91 Polish SecurityContextHolderStrategy XML Configuration for Defaults
Issue gh-11061
2022-06-28 12:09:56 -06:00
Josh Cummings
944f565c16 Use SecurityContextHolderStrategy for Remember-me
Issue gh-11060
Isuse gh-11061
2022-06-28 11:09:38 -06:00
Josh Cummings
b316a3217b Add SecurityContextHolderStrategy for Jaas
Issue gh-11060
Issue gh-11061
2022-06-28 09:35:54 -06:00
Josh Cummings
ec1bfa12f0 Use SecurityContextHolderStrategy for Database Support
Issue gh-11060
2022-06-28 09:15:56 -06:00
Josh Cummings
52dc120269 Use SecurityContextHolderStrategy for ACL
Issue gh-11060
2022-06-28 08:07:15 -06:00
Josh Cummings
94f51d0718 Use SecurityContextHolderStrategy for Taglibs
Issue gh-11060
2022-06-27 17:48:30 -06:00
Josh Cummings
518bc75806 Use SecurityContextHolderStrategy for Data
Issue gh-11060
2022-06-27 16:36:13 -06:00
Josh Cummings
f3d99f557b Use SecurityContextHolderStrategy for AuthenticationFilter
Issue gh-11060
2022-06-27 16:28:37 -06:00
Josh Cummings
bffe08465a Add SecurityContextHolderStrategy XML Configuration for Messaging
Issue gh-11061
2022-06-27 16:24:27 -06:00
Josh Cummings
484f35ca39 Add SecurityContextHolderStrategy Java Configuration for Messaging
Issue gh-11061
2022-06-27 16:17:29 -06:00
Josh Cummings
1e498df39b Use SecurityContextHolderStrategy for Messaging
Issue gh-11060
2022-06-27 16:17:28 -06:00
Josh Cummings
275586be5f Use SecurityContextHolderStrategy for Ldap
Issue gh-11060
2022-06-27 16:17:28 -06:00
Rivaldi
757fb38147 Fix typo
(cherry picked from commit 80c5ec459befd9292e08a43e30f4aae22f39eeed)
2022-06-27 16:05:50 -06:00
Josh Cummings
5e4e7abf15 Add SecurityContextHolderStrategy XML Configuration for Method Security
Issue gh-11061
2022-06-27 13:40:55 -06:00
Josh Cummings
74d646f569 Add SecurityContextHolderStrategy Java Configuration for Method Security
Issue gh-11061
2022-06-27 13:17:46 -06:00
Josh Cummings
7a9c873d7d Add SecurityContextHolderStrategy to Method Security
Issue gh-11060
2022-06-27 13:17:45 -06:00
Josh Cummings
6ac9366657 Add SecurityContextHolderStrategy Test Support
Issue gh-11061
Issue gh-11444
2022-06-27 13:17:45 -06:00
Josh Cummings
ef29d3944e Polish SecurityContextHolderStrategy Java Configuration for Defaults
Issue gh-11061
2022-06-27 13:17:44 -06:00
Josh Cummings
a7b58c2299 Polish SecurityContextHolderStrategy for Defaults
gh-11060
2022-06-27 13:17:44 -06:00
Josh Cummings
c29b91cec7 Polish SecurityContextHolderStrategy XML Configuration for Defaults
Issue gh-11061
2022-06-27 13:17:43 -06:00
Marcus Da Coregio
084dd56b92 Add LDAP runtime hints
Closes gh-11438
2022-06-27 09:25:49 -03:00
Marcus Da Coregio
a8c30f79e6 Add Core, MVC and MethodSecurity runtime hints
Closes gh-11431
2022-06-27 09:25:49 -03:00
Vinícius Hashimoto
11a74a2926 Fix method call example on documentation 2022-06-24 17:05:31 -06:00
Alonso Araya Calvo
7841827169 Adds the ability to set the CSRF Token cookie max age value
Closes gh-11432
2022-06-24 16:42:32 -06:00
Jerome Prinet
6971638e16 Update Gradle Enterprise plugin 2022-06-23 15:07:49 -06:00
Marcus Da Coregio
c4a55b90e3 Antora generate workflow use JDK 17
Closes gh-11430
2022-06-22 15:21:29 -03:00
Marcus Da Coregio
a8b6d9bb40 Use JDK 17 on buildSrc
Issue gh-11324
2022-06-22 10:30:45 -03:00
Marcus Da Coregio
03527b2831 Use JDK 17 on Build
Closes gh-11324
2022-06-22 10:30:42 -03:00
Rob Winch
fe2517f457 Document sagan Release tasks require read:org scope
Closes gh-11423
2022-06-21 14:46:35 -05:00
Rob Winch
b6d43e58c0 SecurityContextHolder Deferred SecurityContext
Closes gh-10913
2022-06-17 16:59:09 -05:00
Rob Winch
d4a03dc2b1 Cache SecurityContextRepository.loadContext(HttpServletRequest) Result
Closes gh-11390
2022-06-17 15:28:57 -05:00
Josh Cummings
150b81d008 Add SecurityContextHolderStrategy XML Configuration for Defaults
Issue gh-11061
2022-06-17 12:21:10 -06:00
Josh Cummings
ce218c78f9 Add SecurityContextHolderStrategy Java Configuration for Defaults
Issue gh-11061
2022-06-17 11:58:38 -06:00
Josh Cummings
a31a99b591 Add SecurityContextHolderStrategy to Default Components
Issue gh-11060
2022-06-17 11:58:36 -06:00
Josh Cummings
a8ab432aea Add placeholders to reactive post_logout_redirect_uri
Now also supports baseScheme, baseHost, basePort, and basePath

Issue gh-11229
2022-06-16 15:58:44 -06:00
Josh Cummings
ebb5746f6e Reactive OAuth 2.0 logout handler resolves registrationId
Closes gh-11378
2022-06-16 15:58:44 -06:00
Josh Cummings
18f7cf5406 Encode postLogoutRedirectUri query params
Closes gh-11379
2022-06-16 15:58:43 -06:00
Michael
cb0ab49adc Add placeholders to post_logout_redirect_uri
Now supports baseScheme, baseHost, basePort, and basePath in addition
to extant baseUrl.

Closes gh-11229
2022-06-16 15:58:35 -06:00
Steve Riesenberg
a061191bd2 Allow form login when single OAuth2 Provider is configured
Closes gh-6802
2022-06-15 13:42:06 -05:00