Commit Graph

7332 Commits

Author SHA1 Message Date
Rob Winch
93ca455405 OAuth2LoginAuthenticationFilter ignores authenticated Users
This ensures that OAuth2 Client support works with the same log in URL as
oauth2 login.

Fixes: gh-5915
2018-10-12 16:29:27 -05:00
Thomas Jensen
e8045838e3 Fix minor typo in secure-objects.adoc 2018-10-10 10:43:34 -05:00
Josh Cummings
2307b01a7a Resource Server Docs - Servlet
Fixes: gh-5912
2018-10-05 15:46:37 -06:00
Rob Winch
cbb25f7b87 Polish Getting Spring Security Reference
Fixes: gh-5921
2018-10-04 17:27:09 -05:00
John Lin
fe080cadbe Fix method name in the Contact sample code 2018-10-03 16:45:18 -04:00
Johnny Lim
68ffa0fece Add a missing space in Secured.value() signature 2018-10-03 14:47:48 -04:00
Tadaya Tsuyukubo
12050404ad Populate test security context with authentication
Add setAuthentication method on TestSecurityContextHolder.
2018-10-03 14:24:45 -04:00
Rob Winch
44ee15cb4d Next Development Version 2018-09-21 09:32:51 -05:00
Rob Winch
c073705d55 Release Spring Security 5.1.0.RELEASE
Fixes: gh-5895
2018-09-21 08:13:44 -05:00
John Lin
69b71ee0ed Remove unused variables in ConsensusBased and UnanimousBased 2018-09-21 08:12:40 -05:00
Rob Winch
5d18bb68ed Add @formatter to @EnableWebFluxSecurity Javadoc
Fixes: gh-5898
2018-09-21 08:11:50 -05:00
Rob Winch
e67264ae2c Update to Spring Data Lovelace-RELEASE
Fixes: gh-5885
2018-09-21 07:25:16 -05:00
Rob Winch
dd82d114c0 Update to Spring Framework 5.1.0.RELEASE
Fixes: gh-5883
2018-09-21 01:04:16 -05:00
Rob Winch
eca0b7bc04 Update to Reactor Californium-RELEASE
Fixes: gh-5884
2018-09-21 01:04:16 -05:00
Rob Winch
45a9c0fd54 Polish Automatically Add CsrfServerLogoutHandler
Issue: gh-5337
2018-09-21 00:59:36 -05:00
Eric Deandrea
b060ec050a Automatically add CsrfServerLogoutHandler if csrf enabled
The configuration DSL should automatically add CsrfServerLogoutHandler if csrf is enabled

Fixes gh-5337
2018-09-21 00:59:36 -05:00
Rob Winch
725b3b5482 Fix OAuth2AuthorizationCodeGrantWebFilter works w/ /{action/
Issue: gh-5856
2018-09-20 21:39:09 -05:00
Vedran Pavic
79828d4f7b Polish WebFlux Referrer-Policy header config 2018-09-20 17:14:16 -05:00
Joe Grandja
9565e90b6e Remove oauth2-oidc-sdk dependency from oauth2-jose module
Fixes gh-5891
2018-09-20 15:20:11 -04:00
Joe Grandja
d46f83caf4 Ensure consistent matching of redirect_uri
Fixes gh-5890
2018-09-20 14:30:41 -04:00
Josh Cummings
77fa495860 DelegatingOAuth2TokenValidator Varargs Constructor
Fixes: gh-5889
2018-09-20 10:45:51 -06:00
Rob Winch
8a49c431c3 Add OAuth2ClientSpec.and
Fixes: gh-5888
2018-09-20 10:19:21 -05:00
Josh Cummings
73c1abbba0 EnableGlobalMethodSecurity Misconfiguration Check
This polishes the EnableGlobalMethodSecurity misconfiguration check to
not error if the user has specified a custom method security metadata
source.

Issue: gh-5341
2018-09-20 07:55:03 -06:00
artsiom
1e864ad764 Validate @EnableGlobalMethodSecurity usage
Fixes: gh-5341
2018-09-20 07:55:03 -06:00
Josh Cummings
d4c50a8fb8 Replace Section Links in What's New
Fixes: gh-5857
2018-09-20 07:50:30 -06:00
Rob Winch
508f0bc870 Remove Deprecated EvaluationContextExtensionSupport Usage
EvaluationContextExtensionSupport is deprecated. Instead classes should
implement EvaluationContextExtension directly.

Fixes: gh-5886
2018-09-19 16:52:16 -05:00
Rob Winch
b4cad2c8b9 Update to mockito-core:2.22.0
Fixes: gh-5882
2018-09-19 16:36:41 -05:00
Rob Winch
1483d148d8 Update to htmlunit:2.33
Fixes: gh-5881
2018-09-19 16:36:33 -05:00
Rob Winch
779da0a633 Update to hibernate-validator:6.0.13.Final
Fixes: gh-5880
2018-09-19 16:36:16 -05:00
Rob Winch
352db344a1 Update to Jetty 9.4.12.v20180830
Fixes: gh-5879
2018-09-19 16:36:01 -05:00
Rob Winch
1acc46e622 Update to unboundid-ldapsdk:4.0.8
Fixes: gh-5878
2018-09-19 16:35:45 -05:00
Rob Winch
a23830d096 Update to jaxb 2.3.0.1
Fixes: gh-5877
2018-09-19 16:35:35 -05:00
Rob Winch
c10a4686bf Update to cglib:cglib-nodep:3.2.8
Fixes: gh-5876
2018-09-19 16:35:26 -05:00
Rob Winch
9e0c7f17b7 Default RequestCache should ignore favicon
Fixes: gh-5875
2018-09-19 14:29:14 -05:00
Rob Winch
e4597b5213 WebSessionServerRequestCache ignores favicon and html
Fixes: gh-5874
2018-09-19 14:28:05 -05:00
Rob Winch
8e4d540bfb Default Log Out Pages Use HTTPS for CSS
Fixes: gh-5873
2018-09-19 13:52:35 -05:00
Rob Winch
410f6bae1a Fix ServerOAuth2AuthorizedClientExchangeFilterFunctionTests Merge
Issue: gh-5872
2018-09-19 11:53:21 -05:00
Rob Winch
dcbf762a0b WebClient OAuth2 Support for defaultClientRegistrationId
Fixes: gh-5872
2018-09-19 11:47:04 -05:00
Josh Cummings
f48055ce47 Polish Section Link in What's New 2018-09-19 10:20:42 -06:00
Joe Grandja
91f6888e9f Remove OAuth2AuthorizedClientRepository @Bean from OAuth2LoginApplication
Fixes gh-5546
2018-09-19 11:22:52 -04:00
Joe Grandja
e8d8eb59bf Make OAuth2AuthorizedClient Serializable
Fixes gh-5757
2018-09-19 10:47:30 -04:00
Joe Grandja
2c078c5dd9 Remove expiresAt constructor-arg in OAuth2RefreshToken
Fixes gh-5854
2018-09-19 10:47:30 -04:00
Rob Winch
ece5de3f99 Polish What's New
Issue: gh-5857
2018-09-19 09:45:13 -05:00
Joe Grandja
8b0a3a760c Use providedSessionAuthenticationStrategy
Fixes gh-5763
2018-09-19 07:04:49 -04:00
John Lin
f5e2ca1b6e Fix truncated javadoc for Secured
Fixes: gh-5861
2018-09-18 21:34:02 -05:00
Rob Winch
62db88ce6a Add WebFlux CORS Reference
Fixes: gh-5870
2018-09-18 21:24:36 -05:00
Rob Winch
501c008526 Add WebFlux Redirect to HTTPS Reference
Fixes: gh-5869
2018-09-18 21:12:37 -05:00
Rob Winch
db9248e05a Polish WebFlux HTTP Headers Reference
Issue: gh-5868
2018-09-18 20:30:45 -05:00
Rob Winch
7b7f579746 What's New Links to WebFlux sections
Issue: gh-5857
2018-09-18 17:23:03 -05:00
Rob Winch
54d07b6b8b Add WebFlux HTTP Headers Reference
Fixes: gh-5868
2018-09-18 17:09:41 -05:00