1458 Commits

Author	SHA1	Message	Date
Rob Winch	751b5580a1	TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable ... Previously there were race conditions on the static member lastToken of TestOneTimeTokenGenerationSuccessHandler. This is because the tests run in parallel and one test may override the other tests lastToken and thus make the assertion on it incorrect. This commit changes lastToken to be a non-static variable to ensure that each test has it's own lastToken for asserting the expected value. Closes gh-16471	2025-01-23 12:43:22 -06:00
Steve Riesenberg	d97e01d1de	Merge branch '6.3.x' into 6.4.x ... Closes gh-16466	2025-01-22 17:09:34 -06:00
Steve Riesenberg	211fa52649	Favor provided instances over shared objects ... Prior to this commit, providing oauth2Login() and oauth2Client() with clientRegistrationRepository() and authorizedClientRepository() caused objects to be shared across both configurers. These configurers will now prefer explicitly provided instances of those objects when they are available. Closes gh-16105	2025-01-22 17:07:44 -06:00
Josh Cummings	bbe4f87641	Mark Serialization Support for Events ... Issue gh-16276	2025-01-17 16:08:31 -07:00
Josh Cummings	244fd2eb51	Support Serialization in Exceptions ... Issue gh-16276	2025-01-14 18:37:53 -07:00
Josh Cummings	feea103050	Formatting ... Issue gh-16276	2025-01-14 16:28:53 -07:00
Josh Cummings	6f379aa907	Add Serializable to Csrf Components ... Issue gh-16276	2025-01-14 16:07:20 -07:00
Josh Cummings	05076db53a	Merge branch '6.3.x' into 6.4.x	2024-12-19 08:55:35 -07:00
Josh Cummings	a9f8a23e50	Merge branch '6.2.x' into 6.3.x	2024-12-19 08:55:25 -07:00
Josh Cummings	643a3f1206	Test Setting logoutRequestRepository ... Issue gh-16093	2024-12-19 08:55:18 -07:00
Josh Cummings	27c2a8ad11	Add Serializable Compatibility to Web Authentication Exceptions ... Issue gh-16276	2024-12-17 13:05:23 -07:00
Josh Cummings	841c03fe3b	Add Serializable Compatilibity to Saml 2.0 Exceptions ... Issue gh-16276	2024-12-17 09:36:29 -07:00
Josh Cummings	b9911fd522	Add serialVersionUID to Authentication classes ... Issue gh-16276	2024-12-13 16:41:32 -07:00
Josh Cummings	e3cd4339b2	Add Serial Version ... Closes gh-16163	2024-12-13 11:53:15 -07:00
Josh Cummings	7592483654	Add Test to Report Missing serialVersionUID ... Issue gh-16276	2024-12-12 18:12:11 -07:00
Josh Cummings	f7b9b7228f	Include Classes Listed in Generator Map ... This allows testing of classes that are serializable, but do not use Security's serialVersionUID. Issue gh-16276	2024-12-12 18:07:53 -07:00
Josh Cummings	82cc3ad5ec	Arrange Class Generators by Module ... Issue gh-16276	2024-12-12 18:07:52 -07:00
Josh Cummings	4cbaabb239	Added Testing ... Issue gh-16177	2024-12-10 14:09:46 -07:00
Josh Cummings	4dd00fe146	Merge branch '6.3.x'	2024-12-06 15:19:19 -07:00
Josh Cummings	dd8ee38194	Merge branch '6.2.x' into 6.3.x ... Closes gh-16229	2024-12-06 15:18:42 -07:00
Josh Cummings	3d1e4b5f18	Polish Tests ... Confirm that responses are a valid JSON map Issue gh-16177	2024-12-06 15:14:07 -07:00
Tran Ngoc Nhan	39cd8d9faf	Update copyright headers	2024-12-05 14:52:59 -07:00
Josh Cummings	2b5a2eef82	Address Observation Bean Name Collisions ... Closes gh-16161	2024-11-25 13:26:52 -07:00
Josh Cummings	a55021539a	Add RSocket and WebFlux Observation Tests ... Issue gh-11989 Issue gh-11990	2024-11-25 13:26:52 -07:00
Josh Cummings	91832bfc8e	Add EnableWebSecurity + EnableWebSocketSecurity Test ... Issue gh-16011	2024-11-20 13:28:06 -07:00
Daniel Garnier-Moiroux	2639ac6545	webauthn: introduce WebAuthnConfigurer#disableDefaultRegistrationPage	2024-11-14 12:11:43 -06:00
Daniel Garnier-Moiroux	de7c452e42	webauthn: use DefaultResourcesFilter#webauthn ... - Unconditionally use the DefaultResourcesFilter, because the javascript file is required by the DefaultWebAythnPageGeneratingFilter, which is always registered.	2024-11-14 12:11:43 -06:00
Rob Winch	5a95952c95	Merge branch '6.3.x' ... Closes gh-16063	2024-11-11 15:17:02 -06:00
Rob Winch	e1ad989d38	Merge branch '6.2.x' into 6.3.x ... Closes gh-16062	2024-11-11 14:58:39 -06:00
Rob Winch	81e74e65d4	Support ServerExchangeRejectedHandler @Bean ... Closes gh-16061	2024-11-11 14:58:00 -06:00
Cedric Montfort	d9d77bed82	Allow logout+jwt JWT type for reactive ... The OIDC back-channel spec recommends using a logout token typ `logout+jwt` (see [here](https://openid.net/specs/openid-connect-backchannel-1_0-final.html#LogoutToken). Support of this type was recently added [on the servlet side]([on the Servlet side](9101bf1f7d)), so back porting the same on the reactive side to close the gap. Closes gh-15702	2024-10-28 14:21:48 -07:00
Josh Cummings	27294b2e11	Allow RelyingPartyRegistration Placeholder Resolution in XML ... Closes gh-14645	2024-10-25 16:12:27 -06:00
Rob Winch	1ba6301afa	Support ServerWebExchangeFirewall @Bean ... Closes gh-15987	2024-10-25 12:13:41 -05:00
Rob Winch	8d5fddda9d	Merge branch '6.3.x' ... Support ServerWebExchangeFirewall @Bean Closes gh-15974in 6.4.x	2024-10-25 12:07:01 -05:00
Rob Winch	adc66e134b	Merge branch '6.2.x' into 6.3.x ... Support ServerWebExchangeFirewall @Bean Closes gh-15991	2024-10-25 11:56:53 -05:00
Rob Winch	3ba1263d64	Support ServerWebExchangeFirewall @Bean ... Closes gh-15987	2024-10-24 16:47:36 -05:00
Tomasz Letachowicz	b2e0539ff5	Add localization to DefaultLoginPageConfigurerTests test in order to avoid failure when system language is different	2024-10-24 11:34:34 -05:00
Josh Cummings	8bac87fb20	Merge branch '6.3.x'	2024-10-23 15:24:32 -07:00
Josh Cummings	c104f44546	Merge branch '6.2.x' into 6.3.x	2024-10-23 15:23:15 -07:00
Scott Murphy Heiberg	18dba34bde	Make RequestMatcherDelegatingAuthorizationManager Post-Processable ... Closes gh-15948	2024-10-23 15:15:10 -07:00
xhaggi	7f537241e7	Use SessionAuthenticationStrategy for Remember-Me authentication ... Closes gh-2253	2024-10-15 14:07:07 -07:00
Max Batischev	d37d41c130	Polish One-Time Token API Names and Doc ... The names of variables and methods have been adjusted in accordance with the names of the one-time token login API components. Issue gh-15114	2024-10-15 14:04:56 -07:00
Josh Cummings	c40334317d	Polish One-Time Token Component Names ... Aligning parts of speech so that names are using nouns/verbs where comparable components are using nouns/verbs. Issue gh-15114	2024-10-14 14:07:47 -06:00
Josh Cummings	9ce5a76e8c	Polish AuthorizationManager#authorize ... Issue gh-14843	2024-10-14 11:48:57 -07:00
Max Batischev	e7644925f8	Add AuthorizationResult support for AuthorizationManager ... Closes gh-14843	2024-10-14 11:48:57 -07:00
Josh Cummings	702538ebce	AuthorizationEventPublisher Accepts AuthorizationResult ... Closes gh-15915 Co-authored-by: Max Batischev <mblancer@mail.ru>	2024-10-14 11:48:57 -07:00
DingHao	ef1226ddf8	Use Oauth2UserService bean in OidcReactiveOAuth2UserService ... Closes gh-15846	2024-10-14 11:41:04 -07:00
Josh Cummings	b26f2af5d5	Polish ... Formatting as well as adding a missing defer Issue gh-15699	2024-10-07 16:39:54 -07:00
Max Batischev	2ca2e56383	Add Reactive One-Time Token Login support ... Closes gh-15699	2024-10-07 16:39:54 -07:00
Cedric Montfort	aceb5fa6bb	Allow logout+jwt JWT type for reactive ... The OIDC back-channel spec recommends using a logout token typ `logout+jwt` (see [here](https://openid.net/specs/openid-connect-backchannel-1_0-final.html#LogoutToken). Support of this type was recently added [on the servlet side]([on the Servlet side](9101bf1f7d)), so back porting the same on the reactive side to close the gap. Closes gh-15702	2024-09-30 16:32:45 -07:00