Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
10,174 Commits 26 Branches 0 Tags
48ef3f47195c19d960d6f61c97e409b1e0ae8b43
Commit Graph

10174 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Evgeniy Cheban
48ef3f4719 Some Security Expressions cause NPE when used within Query annotation 
Added trustResolver, roleHierarchy, permissionEvaluator, defaultRolePrefix
fields to SecurityEvaluationContextExtension.

Closes gh-11196
Closes gh-11289
 2022-05-26 17:43:50 -05:00
Juny Tse
d0da160007 Use Base64 encoder with no CRLF in output for SAML 2.0 messages 
Closes gh-11262
 2022-05-25 12:02:13 -06:00
Rob Winch
4caf53e96d Next Development Version 2022-05-18 10:06:25 -05:00
Rob Winch
22a1c99b9e Release 5.7.1 2022-05-18 10:00:11 -05:00
Rob Winch
e2eed33eca Add StrictHttpFirewall.allow* new lines and separators 
Issue gh-11264
 2022-05-17 22:24:31 -05:00
Rob Winch
5bf478e72e Fix Formatting 
Issue gh-11264
 2022-05-17 16:16:02 -05:00
Rob Winch
e0a6a9efa9 StrictHttpFirewall allows CJKV characters 
Issue gh-11264
 2022-05-17 15:53:18 -05:00
Rob Winch
5155719877 Next Development Version 2022-05-16 11:44:53 -05:00
Rob Winch
3497b0ed68 Release 5.7.0 2022-05-16 11:35:18 -05:00
Josh Cummings
1229b27b87 Improve Upgrading 2022-05-16 11:35:18 -05:00
Rob Winch
ee28896f42 AntRegexRequestMatcher Optimization 
Closes gh-11234
 2022-05-16 10:17:26 -05:00
Rob Winch
6b823fb27e Extract rejectNonPrintableAsciiCharactersInFieldName 
Closes gh-11234
 2022-05-16 10:17:26 -05:00
Rob Winch
fb3f38fe7b Update org.springframework.data to 2021.2.0 
Closes gh-11228
 2022-05-13 10:29:11 -05:00
Rob Winch
2e37b7a299 Update spring-ldap-core to 2.4.0 
Closes gh-11227
 2022-05-13 10:03:21 -05:00
Rob Winch
7b6ff7794a Update org.springframework to 5.3.20 
Closes gh-11225
 2022-05-13 10:03:17 -05:00
Rob Winch
7659c70e5d Update htmlunit-driver to 2.61.0 
Closes gh-11224
 2022-05-13 10:03:14 -05:00
Rob Winch
771ca55102 Update org.jetbrains.kotlin to 1.6.21 
Closes gh-11223
 2022-05-13 10:03:12 -05:00
Rob Winch
949f95381a Update htmlunit to 2.61.0 
Closes gh-11222
 2022-05-13 10:03:09 -05:00
Rob Winch
410961cd78 Update io.projectreactor to 2020.0.19 
Closes gh-11220
 2022-05-13 10:03:04 -05:00
Rob Winch
cc90685770 Update mockk to 1.12.4 
Closes gh-11219
 2022-05-13 10:03:02 -05:00
Rob Winch
59158ed8c0 Update aspectj-plugin to 6.4.3 
Closes gh-11218
 2022-05-13 10:02:59 -05:00
Rob Winch
1a902ab58c Update com.nimbusds to 9.35 
Closes gh-11217
 2022-05-13 10:02:57 -05:00
Evgeniy Cheban
e01b1e7f38 Polish gh-11188 2022-05-12 16:19:48 -05:00
Marcus Da Coregio
991d5c8817 Use properties in the checkSamples job 
Issue gh-10344
 2022-05-11 16:13:08 -03:00
Marcus Da Coregio
34f280a5a3 Add initScripts and projectProperties to IncludeCheckRemotePlugin 
Issue gh-10344
 2022-05-11 16:13:07 -03:00
Evgeniy Cheban
89019fb340 Consider replacing an inner loop with Set of authority strings in AuthorityAuthorizationManager 
Closes gh-11188
 2022-05-09 16:03:25 -06:00
Marcus Da Coregio
d86ed6f523 Update copyright headers 
Issue gh-10956
 2022-05-06 14:14:16 -03:00
Marcus Da Coregio
1959c25a03 Fix mvcMatchers overriding previous paths 
Closes gh-10956
 2022-05-06 14:11:37 -03:00
Rob Winch
67830f4111 Fix WebSessionReactiveSecurityRepository Supports Cache 
Fix the checkstyle for this feature

Closes gh-8422
 2022-05-03 21:10:07 -05:00
Rob Winch
c6eaa05fc5 WebSessionReactiveSecurityRepository Supports Cache 2022-05-03 16:40:38 -05:00
Rob Winch
7b6fd598d0 Multiple <authentication-manager> Do Not Duplicate Alias 
Previously, two authentication managers with different ids would duplicate
the alias to the global authentication manager. This would cause failures
for when allowBeanDefinitionOverriding = false.

This commit ensures that if the global authentication manager alias is
already set, then it is not set again. This means the first
<authentication-manager> will be used as the global AuthenticationManager.

Closes gh-8767
 2022-05-03 14:57:22 -05:00
Evgeniy Cheban
286e95893a @EnableMethodSecurity doesn't resolve Method Security annotations on interfaces through a Proxy 
Removed proxy unwrapping in case of resolving Method Security annotations,
this cause an issue when interfaces which are implemented by the proxy was skipped,
resulting in a missing security checks on those methods.

Closes gh-11175
 2022-05-03 13:19:35 -05:00
Eleftheria Stein
5ac5edc2e6 Detect UserDetailsService bean in X509 configuration 
Closes gh-11174
 2022-04-28 14:47:18 +02:00
Eleftheria Stein
d40c15e09e Update remember me Javadocs 
Describe the new behaviour for retrieving the UserDetailsService

Issue gh-11170
 2022-04-28 14:13:52 +02:00
Marcus Da Coregio
e94adedb94 Add shouldFilterAllDispatcherTypes to Kotlin DSL 
Closes gh-11153
 2022-04-28 08:19:20 -03:00
Eleftheria Stein
8e34cedcfe Detect UserDetailsService bean in remember me 
Closes gh-11170
 2022-04-28 12:43:13 +02:00
nor-ek
a3e7e54b70 Security Context Dsl 
Closes gh-11039
 2022-04-26 17:34:44 +02:00
Marcus Da Coregio
23594b3d01 Fix setServletContext not being called for AuthorizationManagerWebInvocationPrivilegeEvaluator 
Issue gh-10908
 2022-04-25 09:42:00 -03:00
Marcus Da Coregio
97acbcc2d0 Exclude duplicate issues from changelog 
Closes gh-11154
 2022-04-20 09:02:55 -03:00
Rob Winch
6c8f64d2bd Next Development Version 2022-04-18 14:55:35 -05:00
Rob Winch
e80b3cc5a2 Release 5.7.0-RC1 2022-04-18 14:50:15 -05:00
Rob Winch
8a54cea6f0 Revert to aspectj-plugin-6.4.1 
There appears to be an issue with publication of aspectj plugin, so
this commit reverts to a previous working version.

See https://github.com/freefair/gradle-plugins/issues/511
 2022-04-18 14:03:14 -05:00
Rob Winch
2b858f9371 Use gradlePluginPortal() 2022-04-18 14:02:21 -05:00
Rob Winch
f52bf98350 Update org.springframework to 5.3.19 
Closes gh-11152
 2022-04-18 13:38:21 -05:00
Rob Winch
e223d23e84 Update org.jetbrains.kotlinx to 1.6.1 
Closes gh-11151
 2022-04-18 13:38:19 -05:00
Rob Winch
6e5b2f23a9 Update org.jetbrains.kotlin to 1.6.20 
Closes gh-11150
 2022-04-18 13:38:17 -05:00
Rob Winch
0803a9e09d Update hibernate-entitymanager to 5.6.8.Final 
Closes gh-11149
 2022-04-18 13:38:14 -05:00
Rob Winch
359137dfae Update org.eclipse.jetty to 9.4.46.v20220331 
Closes gh-11148
 2022-04-18 13:38:12 -05:00
Rob Winch
a62bdd15b4 Update org.aspectj to 1.9.9.1 
Closes gh-11147
 2022-04-18 13:38:10 -05:00
Rob Winch
694ceb3fb1 Update io.rsocket to 1.1.2 
Closes gh-11146
 2022-04-18 13:38:08 -05:00