Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
16,174 Commits 26 Branches 0 Tags
820e3f57504a7fb8fcc8a74e06a481ab47a10ea2
Commit Graph

16174 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Thomas Vitale
78fa859798 Add issuerUri to ClientRegistration.providerDetails 
- Add "issuerUri" attribute to ClientRegistration.providerDetails for OpenID Connect Discovery 1.0 or OAuth 2.0 Authorization Server Metadata.
- Validate OidcIdToken "iss" claim against the OpenID Provider "issuerUri" value.
- Update documentation for client registration: it includes issuer-uri property now.

Fixes gh-8326
 2020-05-14 17:13:07 -04:00
Artyom Tarynin
9f33ce312a Update AntPathRequestMatcher.java 
Fixes gh-8512
 2020-05-14 10:05:52 -04:00
Artyom Tarynin
9e665388d2 Update AntPathRequestMatcher.java 
Fixes gh-8512
 2020-05-13 17:07:45 -04:00
Dávid Kovács
e382c269ef Document NoOpPasswordEncoder will not be removed 
This commit adds extension to deprecation notice.

Fixes gh-8506
 2020-05-13 12:56:04 -05:00
Dávid Kovács
d6f827c50d Document NoOpPasswordEncoder will not be removed 
This commit adds extension to deprecation notice.

Fixes gh-8506
 2020-05-13 12:54:56 -05:00
Dávid Kovács
db4ca1f756 Document NoOpPasswordEncoder will not be removed 
This commit adds extension to deprecation notice.

Fixes gh-8506
 2020-05-13 12:54:13 -05:00
Rob Winch
ce7c501f9c AbstractUserDetailsReactiveAuthenticationManager uses boundidElastic() 
Some JVMs have blocking operations when accessing SecureRandom and thus
this needs to be performed in a pool that is larger than the number of
CPUs

Closes gh-7522
 2020-05-12 13:24:47 -05:00
Rob Winch
0f13c5e44d AbstractUserDetailsReactiveAuthenticationManager uses boundidElastic() 
Some JVMs have blocking operations when accessing SecureRandom and thus
this needs to be performed in a pool that is larger than the number of
CPUs

Closes gh-7522
 2020-05-12 13:23:07 -05:00
Rob Winch
bd93616567 Fix non-standard HTTP method for CsrfWebFilter 
Closes gh-8452
 2020-05-12 13:18:01 -05:00
Rob Winch
bb05603b3c AbstractUserDetailsReactiveAuthenticationManager uses boundidElastic() 
Some JVMs have blocking operations when accessing SecureRandom and thus
this needs to be performed in a pool that is larger than the number of
CPUs

Closes gh-7522
 2020-05-12 13:07:24 -05:00
Rob Winch
e5d2aaf6fe Deprecate OpenID 2.0 support 
Deprecate OpenID 2.0 support
 2020-05-12 09:37:56 -05:00
Mathieu Ouellet
cd08102b93 Add debug logging 
Goal is to provide insight to devs on:
- Authentication & Authorization success/failures
- WebSession & SecurityContext
- Request matchers, cache & authn/authz flow

Fixes gh-5758
 2020-05-12 09:03:24 -05:00
Rob Winch
06a02ed4bb Fix non-standard HTTP method for CsrfWebFilter 
Closes gh-8452
 2020-05-11 17:28:40 -05:00
Rob Winch
8d447633f4 Fix non-standard HTTP method for CsrfWebFilter 
Closes gh-8452
 2020-05-11 17:20:27 -05:00
Rob Winch
4473dca022 Polish matchesRequireCsrfProtectionWhenNonStandardHTTPMethodIsUsed 
Issue gh-8149
 2020-05-11 17:20:16 -05:00
Parikshit Dutta
0f92415395 Fix non-standard HTTP method for CsrfWebFilter 
Closes gh-8149
 2020-05-11 17:19:57 -05:00
Artyom Tarynin
6db514a4e2 Update AntPathRequestMatcher.java 
Fixed typo in JavaDoc. Actually, In these two cases, we are calling the constructor with a `boolean caseSensitive` which is equal to true. This means case sensitive
 2020-05-11 17:11:22 -04:00
Eleftheria Stein
1aadbb2f4d Remove "/path/**/other" patterns in tests 
Fixes gh-8513
 2020-05-11 17:00:25 -04:00
Jean-Pierre Bergamin
fbd3cfa40e Fix code snippets to configure timeouts 
Issue: gh-8487
 2020-05-11 15:59:11 -04:00
Dávid Kovács
f2a2b469c4 Deprecate openID 2.0 support 
This commit adds deprecation notice to xml schema, parser of the schema and removes fixme comments.

Fixes gh-7153
 2020-05-09 12:04:13 +02:00
Rob Winch
d91b153cad Explicitly set useSuffixPatternMatch for Tests 
Spring MVC changed their default behavior in
https://github.com/spring-projects/spring-framework/issues/23915 This
causes failures in some of Spring Security's tests.

This explicitly sets useSuffixPatternMatch=true to ensure that Spring
Security still works if users have modified their defaults.

Closes gh-8493
 2020-05-08 16:43:56 -05:00
Jean-Pierre Bergamin
6d5d883518 Use Opaquetoken properties to configure timeouts 
Improve the documentation to show how to re-use the Opaquetoken properties of `OAuth2ResourceServerProperties` to set up basic auth in the configured `RestTemplate`.
 2020-05-07 15:20:50 -04:00
Rob Winch
e1fd0b3859 Update to spring-build-conventions:0.0.32.RELEASE 
Closes gh-8499
 2020-05-06 17:39:22 -05:00
Pei-Tang Huang
9dcdae3269 Update Traditional Chinese translation. 
Align with commit f7b33da577.
 2020-05-06 17:07:57 -05:00
Joe Grandja
f92ab34ca0 Next development version 2020-05-06 17:37:30 -04:00
Joe Grandja
86ca6b013c Unlock dependencies 
This reverts commit 206960cf44.
 2020-05-06 17:27:35 -04:00
Joe Grandja
c506ee6b69 Release 5.4.0-M1 2020-05-06 17:19:22 -04:00
Joe Grandja
206960cf44 Lock dependencies for 5.4.0-M1 2020-05-06 17:13:04 -04:00
Eleftheria Stein
f9872d3dee Next Development Version 2020-05-06 15:59:24 -04:00
Joe Grandja
716583f9bb Next development version 2020-05-06 15:51:37 -04:00
Joe Grandja
413dfc8679 Unlock dependencies 
This reverts commit a61145f74c.
 2020-05-06 15:29:45 -04:00
Eleftheria Stein
b7212bd975 Release 5.2.4.RELEASE 2020-05-06 15:16:32 -04:00
Joe Grandja
532e546355 Release 5.3.2.RELEASE 2020-05-06 15:07:10 -04:00
Joe Grandja
a61145f74c Lock dependencies for 5.3.2.RELEASE 2020-05-06 15:06:08 -04:00
Eleftheria Stein
50da82d88d Temporarily build against Framework 5.2.x snapshot 
Issue: gh-8489
 2020-05-06 14:43:53 -04:00
Eleftheria Stein
3ed31400f7 Update SAML2 errors in integration tests 2020-05-06 14:16:41 -04:00
Josh Cummings
69b1bc62ff Polish OpenSamlAuthenticationProvider 
- Use type-safe CriteriaSet
- Keep Assertion immutable

Closes gh-8471
 2020-05-06 14:15:45 -04:00
Eleftheria Stein
a1a20f0d06 Temporarily build against Framework 5.2.x snapshot 
Issue: gh-8489
 2020-05-06 13:05:01 -04:00
Eleftheria Stein
1fcac58caa Update SAML2 errors in integration tests 2020-05-06 13:03:28 -04:00
Eleftheria Stein
07f8154a06 Temporarily build against Framework 5.2.x snapshot 
Issue: gh-8489
 2020-05-06 12:55:50 -04:00
Eleftheria Stein
545286188d Update SAML2 errors in integration tests 2020-05-06 11:46:54 -04:00
Eleftheria Stein
026a951d4f Remove JDK 9 and JDK 10 build from Jenkins pipeline 
Closes gh-8482
 2020-05-05 19:57:56 -04:00
Eleftheria Stein
f43d00fac6 Update to Byte Buddy 1.9.16 
Closes gh-8481
 2020-05-05 17:50:07 -04:00
Eleftheria Stein
01cce49ee5 Upgrade to embedded Apache Tomcat 9.0.34 
Closes gh-8469
 2020-05-05 17:48:03 -04:00
Eleftheria Stein
6ccc18fde2 Update to Jackson 2.10.4 
Closes gh-8466
 2020-05-05 17:47:08 -04:00
Eleftheria Stein
d34f7a8474 Update to org.powermock 2.0.7 
Closes gh-8465
 2020-05-05 17:46:12 -04:00
Eleftheria Stein
ba78fae246 Update RSocket to 1.0.0-RC7 
Closes gh-8468
 2020-05-05 17:45:37 -04:00
Eleftheria Stein
98922b001a Update to Spring Data Moore-SR7 
Closes gh-8462
 2020-05-05 17:44:33 -04:00
Eleftheria Stein
19a4386e49 Update to Spring Framework 5.2.6.RELEASE 
Closes gh-8463
 2020-05-05 17:43:43 -04:00
Eleftheria Stein
4fa67a1d9b Update to Reactor Dysprosium-SR7 
Closes gh-8464
 2020-05-05 17:43:00 -04:00