Commit Graph

16174 Commits

Author SHA1 Message Date
Josh Cummings
0fc80a6a65 Renew Sample Certificate
Closes gh-9320
2021-01-04 12:12:29 -07:00
Josh Cummings
6dc22835fd Renew Sample Certificate
Closes gh-9320
2021-01-04 12:12:17 -07:00
Josh Cummings
8c93d95818 Renew Sample Certificate
Closes gh-9320
2021-01-04 12:11:19 -07:00
Josh Cummings
cb10c9cfb6 Renew Sample Certificate
Closes gh-9320
2021-01-04 12:06:55 -07:00
Zeeshan Adnan
848bd44837 Remove unused code
Issue gh-9203
2020-12-18 11:49:52 -07:00
Rob Winch
40e027c56d Constant Time Comparison for CSRF tokens
Closes gh-9291
2020-12-17 15:01:43 -06:00
Josh Cummings
c066e23a86 Add @since attributes
Issue gh-8900
2020-12-16 15:58:53 -07:00
Evgeniy Cheban
34b4b1054f Add AuthorizationManager
Closes gh-8900
2020-12-16 15:58:36 -07:00
Nick McKinney
5306d4c4d5 Minor cleanup on Ant / Regex Request Matchers
- Removed duplicative code for transforming String into HttpMethod
 - Removed an unnecessary array initialization
2020-12-14 14:19:23 +01:00
Nick McKinney
6be25df1db Introduced DispatcherType request matcher
Created a DispatcherTypeRequestMatcher and corresponding methods
for configuring an HttpSecurity object. This enables filtering of
security rules based on the dispatcher type of the incoming servlet
request.

Closes gh-9205
2020-12-14 14:19:23 +01:00
Josh Cummings
2566abec31 Add Type Parameter
Closes gh-8412
2020-12-11 10:20:18 -07:00
Christophe Gilles
54d3839f63 Add permissionsPolicy http header 2020-12-11 12:32:18 +01:00
Serdar Kuzucu
48ef27b80a Make assertion messages in CookieCsrfTokenRepository clearer
Changes assertion message format from 'X is not null' to
'X cannot be null' since this is more meaningful when the error
occurs and the message is printed in the logs.

Closes gh-9195
2020-12-09 10:45:22 -06:00
Serdar Kuzucu
76e117a67a Allow maximum age of csrf cookie to be configured
Allows maxAge of the generated cookie by CookieCsrfTokenRepository
to be configurable.

Prior to this commit, maximum age was set with a value of -1.

After this commit, it will be configured by the user with an either
positive or negative value. If the user does not provide a value,
it will be set -1.

An IllegalArgumentException will be thrown when
this value is set to zero.

Closes gh-9195
2020-12-09 10:45:22 -06:00
Eleftheria Stein
90b48554e4 Fix Custom DSL sample in docs 2020-12-09 10:48:15 +01:00
Josh Cummings
f614a8230c Polish getRemoteUser
- Corrected instanceof check

Issue gh-3357
2020-12-03 13:08:40 -07:00
Stephen Joyner
9c373ef4f8 getRemoteUser() returns principal name
Closes gh-3357
2020-12-03 13:08:40 -07:00
Ovidiu Popa
174b71c017 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 11:42:00 -05:00
Ovidiu Popa
7d31837af3 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 11:20:11 -05:00
Ovidiu Popa
b8175bccd2 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 10:54:00 -05:00
Ovidiu Popa
d5d0be36f4 OidcIdToken cannot be serialized to JSON if token contains claim of type JSONArray or JSONObject
ObjectToListStringConverter and ObjectToMapStringObjectConverter were checking if the source object is of type List or Map and if the first element or key is a String. If we have a JSONArray containing Strings the above check will pass, meaning that a JSONArray will be returned which is not serializable (same applies to JSONObject)

With this change, even if the check is passing a new List or Map will be returned.

Closes gh-9210
2020-12-03 09:58:30 -05:00
Eleftheria Stein
d3ef340b26 Fix typos 2020-12-03 11:05:22 +01:00
Josh Cummings
00375da173 Next Development Version 2020-12-02 22:21:21 -07:00
Josh Cummings
1af21a9d02 Revert "Lock Dependencies for 5.4.2"
This reverts commit 046bc9789f.
2020-12-02 22:21:02 -07:00
Josh Cummings
17276ad787 Next Development Version 2020-12-02 19:32:48 -07:00
Josh Cummings
7c2010f507 Revert "Lock Dependencies for 5.3.6"
This reverts commit a153012056.
2020-12-02 19:32:03 -07:00
Josh Cummings
c7b4e4a493 Next Development Version 2020-12-02 19:09:04 -07:00
Josh Cummings
9effebe934 Release 5.4.2 2020-12-02 17:36:26 -07:00
Josh Cummings
046bc9789f Lock Dependencies for 5.4.2 2020-12-02 17:36:26 -07:00
Josh Cummings
423d3682d0 Update to Google App Engine 1.9.83
Closes gh-9250
2020-12-02 17:36:08 -07:00
Josh Cummings
1f5591198e Update to Kotlin 1.4.20
Closes gh-9249
2020-12-02 17:36:02 -07:00
Josh Cummings
0a95d3cfa8 Update to Spring Boot 2.4.0
Closes gh-9248
2020-12-02 16:37:41 -07:00
Josh Cummings
2975923a1d Release 5.3.6.RELEASE 2020-12-02 16:31:52 -07:00
Josh Cummings
a153012056 Lock Dependencies for 5.3.6 2020-12-02 16:31:52 -07:00
Josh Cummings
a8fe846e7f Update to Google App Engine 1.9.83
Closes gh-9247
2020-12-02 16:31:46 -07:00
Josh Cummings
02a9ee54a2 Update to Spring Boot 2.2.11
Closes gh-9246
2020-12-02 16:31:40 -07:00
olivier.antoine
808b8c3256 Avoid ClassCastException if principalClaim value is not a String
Closes gh-9212
2020-12-02 16:15:10 -07:00
Josh Cummings
d03d31c2e7 Release 5.2.8.RELEASE 2020-12-02 16:06:32 -07:00
Josh Cummings
9976eb9e3a Update to Spring LDAP Core 2.3.3
Closes gh-9245
2020-12-02 16:04:41 -07:00
Josh Cummings
7cf1ca7ab1 Update to Powermock 2.0.9
Closes gh-9244
2020-12-02 16:04:36 -07:00
Josh Cummings
664d9f1ba6 Update to HSQLDB 2.5.1
Closes gh-9243
2020-12-02 16:04:31 -07:00
Josh Cummings
f7b160d7a8 Update to Hibernate EntityManager 5.4.25
Closes gh-9242
2020-12-02 16:04:26 -07:00
Josh Cummings
5b60098548 Update to Jetty 9.4.35
Closes gh-9241
2020-12-02 16:04:13 -07:00
Josh Cummings
e6b383a9c4 Update to HttpComponents HttpClient 4.5.13
Closes gh-9240
2020-12-02 16:04:07 -07:00
Josh Cummings
5342133494 Update to RSocket 1.0.3
Closes gh-9239
2020-12-02 16:04:01 -07:00
Josh Cummings
7498ad95a1 Update to Reactor Dysprosium-SR14
Closes gh-9238
2020-12-02 16:03:56 -07:00
Josh Cummings
04d382d8d8 Update to Google App Engine 1.9.83
Closes gh-9237
2020-12-02 16:03:51 -07:00
Josh Cummings
83a177d327 Update to Jackson 2.10.5.1
Closes gh-9236
2020-12-02 16:03:46 -07:00
Josh Cummings
ebb2afa5e8 Update to Spring Data Moore-SR11
Closes gh-9235
2020-12-02 16:03:41 -07:00
Josh Cummings
276a934bcd Update to Spring 5.2.11
Closes gh-9234
2020-12-02 16:03:35 -07:00