1436 Commits

Author	SHA1	Message	Date
Josh Cummings	2b5a2eef82	Address Observation Bean Name Collisions ... Closes gh-16161	2024-11-25 13:26:52 -07:00
Josh Cummings	a55021539a	Add RSocket and WebFlux Observation Tests ... Issue gh-11989 Issue gh-11990	2024-11-25 13:26:52 -07:00
Josh Cummings	91832bfc8e	Add EnableWebSecurity + EnableWebSocketSecurity Test ... Issue gh-16011	2024-11-20 13:28:06 -07:00
Daniel Garnier-Moiroux	2639ac6545	webauthn: introduce WebAuthnConfigurer#disableDefaultRegistrationPage	2024-11-14 12:11:43 -06:00
Daniel Garnier-Moiroux	de7c452e42	webauthn: use DefaultResourcesFilter#webauthn ... - Unconditionally use the DefaultResourcesFilter, because the javascript file is required by the DefaultWebAythnPageGeneratingFilter, which is always registered.	2024-11-14 12:11:43 -06:00
Rob Winch	5a95952c95	Merge branch '6.3.x' ... Closes gh-16063	2024-11-11 15:17:02 -06:00
Rob Winch	e1ad989d38	Merge branch '6.2.x' into 6.3.x ... Closes gh-16062	2024-11-11 14:58:39 -06:00
Rob Winch	81e74e65d4	Support ServerExchangeRejectedHandler @Bean ... Closes gh-16061	2024-11-11 14:58:00 -06:00
Cedric Montfort	d9d77bed82	Allow logout+jwt JWT type for reactive ... The OIDC back-channel spec recommends using a logout token typ `logout+jwt` (see [here](https://openid.net/specs/openid-connect-backchannel-1_0-final.html#LogoutToken). Support of this type was recently added [on the servlet side]([on the Servlet side](9101bf1f7d)), so back porting the same on the reactive side to close the gap. Closes gh-15702	2024-10-28 14:21:48 -07:00
Josh Cummings	27294b2e11	Allow RelyingPartyRegistration Placeholder Resolution in XML ... Closes gh-14645	2024-10-25 16:12:27 -06:00
Rob Winch	1ba6301afa	Support ServerWebExchangeFirewall @Bean ... Closes gh-15987	2024-10-25 12:13:41 -05:00
Rob Winch	8d5fddda9d	Merge branch '6.3.x' ... Support ServerWebExchangeFirewall @Bean Closes gh-15974in 6.4.x	2024-10-25 12:07:01 -05:00
Rob Winch	adc66e134b	Merge branch '6.2.x' into 6.3.x ... Support ServerWebExchangeFirewall @Bean Closes gh-15991	2024-10-25 11:56:53 -05:00
Rob Winch	3ba1263d64	Support ServerWebExchangeFirewall @Bean ... Closes gh-15987	2024-10-24 16:47:36 -05:00
Tomasz Letachowicz	b2e0539ff5	Add localization to DefaultLoginPageConfigurerTests test in order to avoid failure when system language is different	2024-10-24 11:34:34 -05:00
Josh Cummings	8bac87fb20	Merge branch '6.3.x'	2024-10-23 15:24:32 -07:00
Josh Cummings	c104f44546	Merge branch '6.2.x' into 6.3.x	2024-10-23 15:23:15 -07:00
Scott Murphy Heiberg	18dba34bde	Make RequestMatcherDelegatingAuthorizationManager Post-Processable ... Closes gh-15948	2024-10-23 15:15:10 -07:00
xhaggi	7f537241e7	Use SessionAuthenticationStrategy for Remember-Me authentication ... Closes gh-2253	2024-10-15 14:07:07 -07:00
Max Batischev	d37d41c130	Polish One-Time Token API Names and Doc ... The names of variables and methods have been adjusted in accordance with the names of the one-time token login API components. Issue gh-15114	2024-10-15 14:04:56 -07:00
Josh Cummings	c40334317d	Polish One-Time Token Component Names ... Aligning parts of speech so that names are using nouns/verbs where comparable components are using nouns/verbs. Issue gh-15114	2024-10-14 14:07:47 -06:00
Josh Cummings	9ce5a76e8c	Polish AuthorizationManager#authorize ... Issue gh-14843	2024-10-14 11:48:57 -07:00
Max Batischev	e7644925f8	Add AuthorizationResult support for AuthorizationManager ... Closes gh-14843	2024-10-14 11:48:57 -07:00
Josh Cummings	702538ebce	AuthorizationEventPublisher Accepts AuthorizationResult ... Closes gh-15915 Co-authored-by: Max Batischev <mblancer@mail.ru>	2024-10-14 11:48:57 -07:00
DingHao	ef1226ddf8	Use Oauth2UserService bean in OidcReactiveOAuth2UserService ... Closes gh-15846	2024-10-14 11:41:04 -07:00
Josh Cummings	b26f2af5d5	Polish ... Formatting as well as adding a missing defer Issue gh-15699	2024-10-07 16:39:54 -07:00
Max Batischev	2ca2e56383	Add Reactive One-Time Token Login support ... Closes gh-15699	2024-10-07 16:39:54 -07:00
Cedric Montfort	aceb5fa6bb	Allow logout+jwt JWT type for reactive ... The OIDC back-channel spec recommends using a logout token typ `logout+jwt` (see [here](https://openid.net/specs/openid-connect-backchannel-1_0-final.html#LogoutToken). Support of this type was recently added [on the servlet side]([on the Servlet side](9101bf1f7d)), so back porting the same on the reactive side to close the gap. Closes gh-15702	2024-09-30 16:32:45 -07:00
Josh Cummings	29331a0d8c	Merge branch '6.3.x'	2024-09-30 17:24:03 -06:00
Josh Cummings	746464e035	Merge branch '6.2.x' into 6.3.x	2024-09-30 17:21:13 -06:00
Josh Cummings	c1857c0308	Fix Formatting ... Issue gh-15771	2024-09-30 16:19:26 -07:00
chao.wang	690e012fb1	Improve OidcBackChannelLogoutTokenValidator error when provider issuer is missing ... Closes gh-15771	2024-09-30 16:19:26 -07:00
Josh Cummings	ee9a887ae5	Fix Package Tangle ... Move ObjectPostProcessor to be alongside Customizer, another functional interface for describing Spring Security object configuration.	2024-09-26 14:08:25 -06:00
Josh Cummings	d6b620b9f7	Make Observations Selectable ... Closes gh-15678	2024-09-26 11:30:40 -06:00
Josh Cummings	1ed20aa210	Add ObservationRegistry Tests ... Issue gh-11989 Issue gh-11990	2024-09-26 11:30:40 -06:00
Josh Cummings	717529deb4	Add Generic Type to ObjectPostProcessor Lookups ... Issue gh-15678	2024-09-26 11:30:39 -06:00
Tran Ngoc Nhan	9dda65a5e3	Polish CorsSpecTests ... Use concrete ApplicationContext to simplify future maintenance. Issue gh-4832	2024-09-23 16:11:43 -07:00
Steve Riesenberg	cd7f6e09b0	Look up ReactiveOAuth2AccessTokenResponseClient as a bean ... Closes gh-11097	2024-09-23 11:06:12 -05:00
Josh Cummings	b311b811a1	Pick Up OidcSessionRegistry Bean ... Closes gh-15813	2024-09-15 21:30:55 -07:00
Josh Cummings	8bb5875595	Expose OidcBackChannelLogoutHandler ... This component already uses by default a URI that doesn't require a CSRF token and aalready allows for configuring a cookie name. So, by making it public and configurable in the DSL, both of these tickets quite naturally close. Closes gh-13841 Closes gh-14904	2024-09-15 21:30:55 -07:00
Josh Cummings	2d4c498c3b	Test Meta-Annotation Class Type Support in Reactive ... Issue gh-15747	2024-09-15 21:30:55 -07:00
Josh Cummings	75fd84ce16	Test Reactive Method Security Exactly-One Invocation Semantics ... Issue gh-15651	2024-09-15 21:30:55 -07:00
Josh Cummings	1aec571a81	Test Reactive Method Security Exactly Once Semantics ... Issue gh-15592	2024-09-15 21:30:55 -07:00
Josh Cummings	3e1f8bb960	Test Reactive Method Security with Abstract Classes ... Issue gh-15352	2024-09-15 21:30:55 -07:00
Josh Cummings	fee5dd30c0	Test AuthorizeReturnObject in Reactive ... Issue gh-14597	2024-09-15 21:30:55 -07:00
Josh Cummings	fc2ad34e5d	Test meta-annotation parameter support in Reactive ... Issue gh-14480	2024-09-15 21:30:55 -07:00
Steve Riesenberg	51c226f24c	Add loginPage() to DSL in reactive oauth2Login() ... Closes gh-15674	2024-09-11 15:56:54 -05:00
Daniel Garnier-Moiroux	7e41785dfc	Remove trailing spaces in default UIs ... - Default UIs had blank lines with only spaces. These get deleted by the spring-javaformat plugin. In order to avoid this behavior, an extra \s had been inserted in the tests. The reason for those \s is not obvious. - This commit cleans up the \s but changing the HTML templates.	2024-09-11 10:44:45 -07:00
Daniel Garnier-Moiroux	85693b2806	Add DefaultResourcesFitler to XML configuration	2024-09-11 10:21:12 -07:00
Daniel Garnier-Moiroux	c1b9035544	Use static CSS in OneTimeToken default UI	2024-09-10 12:46:13 -07:00