Commit Graph

9080 Commits

Author SHA1 Message Date
Ovidiu Popa
6724e3e514 Provide a R2dbc implementation of ReactiveOuath2AuthorizedClientService
Implement R2dbcReactiveOuath2AuthorizedClientService which persists the
Oauth2AuthorizedClient in a sql database

R2dbcReactiveOuath2AuthorizedClientService is using the spring-r2dbc
module to persist/load Oauth2AuthorizedClient to/from a sql database

Add optional depedency to the spring-r2dbc module
Add test compile dependencies to r2dbc-h2 and r2dbc-test

Closes gh-7890
2020-10-29 15:44:12 -04:00
Joe Grandja
f8cc48fe2b Set rsocketVersion to 1.1.0
Closes gh-9167
2020-10-29 15:43:52 -04:00
Joe Grandja
3618cbd3eb Revert "Use reactor-netty-http for snapshot build"
This reverts commit 1361cb8790.
2020-10-29 15:43:52 -04:00
Joe Grandja
4ff53c924d Set reactorVersion to 2020.0.+
Closes gh-9166
2020-10-29 15:43:39 -04:00
Joe Grandja
c0327adecb Set springVersion to 5.3.+
Closes gh-9165
2020-10-29 15:43:20 -04:00
Ayush Kohli
ea68989421 Closes gh-8196
Add leveloffset
2020-10-28 14:55:30 -06:00
Christian Mouttet
6486857462 JwtIssuerValidator handles issuer (iss) claim values as Strings and URLs
- NimbusJwtDecoder uses claim set converters: issuer claim is converted to an URL object
- JwtIssuerValidator (created by JwtValidators.createDefaultWithIssuer(String)) wraps a JwtClaimValidator<String>
- because of different data types, equal() is always false

This change allows both Strings and URLs as values of the issuer

Closes gh-9136
2020-10-28 14:20:27 -06:00
Alexander Polozov
a362ab53bc Change guard expressions order
Check of allowed user sessions count moved to head for avoid unnecessary fetching all user sessions.
2020-10-27 09:49:29 -04:00
Eleftheria Stein
9cf3129d7a Update Kotlin MockMvc result matchers in sample
Issue gh-9155

The "style" parameter is no longer supported
2020-10-27 11:20:16 +01:00
Eleftheria Stein
aac6d2f56b Kotlin MockMvc result matchers use parentheses
Closes gh-9155
2020-10-27 10:57:49 +01:00
Eleftheria Stein
9b66929358 Remove unused import in sample 2020-10-27 10:09:51 +01:00
Ellie Bahadori
d69032a68d Prevent PR builds from running on forks 2020-10-26 11:07:25 -05:00
Joe Grandja
b182d9def1 Fix code formatting
Issue gh-9146
2020-10-22 13:30:48 -04:00
Alexey Nesterov
339da36878 Add refresh token expiration support
Closes gh-9146
2020-10-22 12:41:48 -04:00
Craig Andrews
42a787d1f6 Add Postgres sql for JDBC implementation of OAuth2AuthorizedClientService
Postgres doesn't have a BLOB type, but it does have an equivalent BYTEA
type.
This approach and naming convention follows the convention established
in Spring Session JDBC which has sql for each RDBMS with files names in
the pattern *-{dbname}.sql, for example:
schema-db2.sql
schema-derby.sql
schema-h2.sql
schema-mysql.sql
schema-postgresql.sql

See https://github.com/spring-projects/spring-session/tree/2.3.1.RELEASE/spring-session-jdbc/src/main/resources/org/springframework/session/jdbc

Issue gh-9070
2020-10-22 09:56:20 -04:00
Craig Andrews
05dc326389 Use LobHandler in JdbcOAuth2AuthorizedClientService
LobHandler provides an abstraction for handling large binary fields and large text
fields in specific databases, no matter if represented as simple types or
Large OBjects.

Its use provides compatibility with many databases eliminating the need
for custom OAuth2AuthorizedClientParametersMapper and
OAuth2AuthorizedClientRowMapper implementations.

Closes gh-9070
2020-10-22 09:56:20 -04:00
Josh Cummings
6714112961 Add SAML Response Decryption Documentation
Issue gh-9044
Issue gh-9131
2020-10-14 16:49:42 -06:00
Josh Cummings
b06b17ca9b Add Number 10 Diagram Image 2020-10-14 16:49:42 -06:00
Josh Cummings
5699670a43 Polish OpenSamlAuthenticationProvider
Remove deprecated usage

Issue gh-8769
2020-10-14 16:49:37 -06:00
Josh Cummings
c8cbf06d8d Add EncryptedAttribute support
Closes gh-9131
2020-10-14 14:58:42 -06:00
Josh Cummings
d0581c9a26 Polish Configurable SAML Decryption Support
- Renamed to setResponseElementsDecrypter and
setAssertionElementsDecrypter to align with ResponseToken and
AssertionToken
- Changed contract of setAssertionElementsDecrypter to use
AssertionToken
- Changed assertions in unit test to use isEqualTo

Issue gh-9044
2020-10-14 14:58:42 -06:00
ryan.cassar
535ae3e27d Add Configurable SAML Response Decryption
Closes gh-9044
2020-10-14 10:38:05 -06:00
Josh Cummings
1436ce493e Update snapshot command
Closes gh-9124
2020-10-12 17:55:39 -06:00
Josh Cummings
3e95f68873 Add jackson-datatype-jsr310 Dependency
Closes gh-9123
2020-10-12 17:41:16 -06:00
Josh Cummings
b1a3aef4f8 Update Test Controllers
Closes gh-9121
2020-10-12 17:41:16 -06:00
Rob Winch
01855fcce2 Update to Gradle 6.6.1
Use version ordering feature

Closes gh-9122
2020-10-12 17:41:16 -06:00
Josh Cummings
e6ff57c116 Polish RelyingPartyRegistrations
Issue gh-9028
2020-10-12 13:55:16 -06:00
ryan.cassar
9a11cc84ad Add File-based Metadata Resolution
Closes gh-9028
2020-10-12 13:55:16 -06:00
Matthias Luppi
78d5ffe60d Apply minor rewording and formatting 2020-10-12 13:18:02 -06:00
Matthias Luppi
45a86a4b4d Rework community.adoc
Fix link to CONTRIBUTING.adoc and use proper name of Stack Overflow according to their trademark guidelines (two words, capital letters)
2020-10-12 13:18:02 -06:00
Matthias Luppi
7d59595dd6 Rework CONTRIBUTING.adoc
Several fixes were applied: Syntax corrected, links updated, improved some paragraphs, restored parts that were removed in the conversion to adoc format (see: a8b438587b)
2020-10-12 13:18:02 -06:00
Josh Cummings
366146ff80 Polish JWT Signature Algorithm Discovery
- Moved support to JwtDecoders and ReactiveJwtDecoders since there is
already the expectation that those classes make an outbound connection
to complete configuration. Since there's no outbound connection when
configuring a NimbusJwtDecoder or NimbusReactiveJwtDecoder, it would be
more intrusive to change that.

Closes gh-7160
2020-10-09 14:17:30 -06:00
Nick Hitchan
290786438c Add Support for JWK Signature Algorithm Discovery
Issue gh-7160
2020-10-09 13:09:38 -06:00
Rob Winch
4ffc3d6ceb Update Link Text for Getting Spring Security 2020-10-08 09:48:58 -05:00
Rob Winch
0732478d4a Fix Downloading Section
The previous link only pointed to the Spring Wiki for Maven repositories. Now it
points to the Getting Spring Security Section of the reference documentation
2020-10-08 09:48:06 -05:00
Josh Cummings
ce68431037 Bump Schema, Serialization, and Taglib to 5.5 2020-10-07 17:17:58 -06:00
Josh Cummings
2edc955939 Begin 5.5 Development 2020-10-07 16:06:14 -06:00
Josh Cummings
f87101ae22 Update RSocket Sample to RSocket 1.1.0-M2
Closes gh-9112
2020-10-07 16:01:19 -06:00
Josh Cummings
6cb41fb777 Update to Kotlin 1.4.10
Closes gh-9111
2020-10-07 16:01:14 -06:00
Josh Cummings
8382f458f0 Update to AspectJ 1.9.6
Closes gh-9110
2020-10-07 16:01:08 -06:00
Josh Cummings
5706c0f072 Update to Google App Engine 1.9.82
Closes gh-9109
2020-10-07 16:01:01 -06:00
Josh Cummings
9677bd83b1 Update to Spring JavaFormat 0.0.25
Closes gh-9108
2020-10-07 16:00:55 -06:00
Josh Cummings
0f5125724c Update to Spring Boot 2.4.0-M3
Closes gh-9107
2020-10-07 16:00:42 -06:00
Josh Cummings
a2aeb95b59 Update What's New Link
Issue gh-9038
2020-10-06 09:05:18 -06:00
Eleftheria Stein
320567128a Add expression based Kotlin samples
Issue gh-8172
2020-10-01 17:58:25 +02:00
Eleftheria Stein
0286d368c3 Add authentication event Kotlin samples
Issue gh-8172
2020-10-01 17:58:25 +02:00
Eleftheria Stein
669587409f Add Controller Kotlin sample for form login
Issue gh-8172
2020-10-01 17:58:25 +02:00
Josh Cummings
a6d19474c4 Add Header and Parameter Value Documentation
Closes gh-9038
2020-09-30 20:50:29 -06:00
Ellie Bahadori
7ef3f61924 Add build scans to PR builds 2020-09-30 10:20:12 -04:00
Malyshau Stanislau
6d14482378 Add try-with-resources to close stream
Closes gh-9041
2020-09-29 08:25:45 -06:00