2805 Commits

Author	SHA1	Message	Date
Josh Cummings	f7b9b7228f	Include Classes Listed in Generator Map ... This allows testing of classes that are serializable, but do not use Security's serialVersionUID. Issue gh-16276	2024-12-12 18:07:53 -07:00
Josh Cummings	82cc3ad5ec	Arrange Class Generators by Module ... Issue gh-16276	2024-12-12 18:07:52 -07:00
Josh Cummings	47b5ab400a	Add 6.4.x Serialization Files ... Closes gh-16274	2024-12-12 18:07:52 -07:00
Daniel Garnier-Moiroux	99cc65d74c	webauthn: add webdriver test ... - These tests verify the full end-to-end flow, including the javascript code bundled in the default login and logout pages. They require a full web browser, with support for Virtual Authenticators for automated testing. At this point in time, only Chrome supports virutal authenticators.	2024-12-11 16:53:38 -06:00
Josh Cummings	4cbaabb239	Added Testing ... Issue gh-16177	2024-12-10 14:09:46 -07:00
Josh Cummings	aa85ebc65f	Remove Extraneous Field ... Issue gh-15678	2024-12-09 08:00:22 -07:00
Josh Cummings	4dd00fe146	Merge branch '6.3.x'	2024-12-06 15:19:19 -07:00
Josh Cummings	dd8ee38194	Merge branch '6.2.x' into 6.3.x ... Closes gh-16229	2024-12-06 15:18:42 -07:00
Josh Cummings	87de6cea1b	Use Reactive JSON Encoder ... Closes gh-16177	2024-12-06 15:14:07 -07:00
Josh Cummings	3d1e4b5f18	Polish Tests ... Confirm that responses are a valid JSON map Issue gh-16177	2024-12-06 15:14:07 -07:00
Josh Cummings	3e20f7b5b5	Polish Error Messages ... - aligned the grammar - formatted using gradlew format - updated copyright year Issue gh-16193	2024-12-05 17:37:46 -07:00
Dmitry Spikhalsky	32e1d4c990	Improve AuthorizationManager configuration error messages ... Closes gh-16193	2024-12-05 17:37:46 -07:00
Tran Ngoc Nhan	39cd8d9faf	Update copyright headers	2024-12-05 14:52:59 -07:00
Josh Cummings	96b3c77ce0	Merge branch '6.3.x'	2024-12-05 12:30:37 -07:00
DingHao	ef7b11ac01	Delay initialization UserDetailsService in Global Authentication	2024-12-05 12:26:04 -07:00
Tran Ngoc Nhan	5966baf9bf	Update copyright headers	2024-12-04 16:51:05 -07:00
Josh Cummings	2ed1cafed8	Restore Deprecated ObjectPostProcessor Usage ... Closes gh-16174	2024-12-04 16:51:05 -07:00
Tran Ngoc Nhan	8c0ea3e630	Add Deprecated ObjectPostProcessor constructor ... Issue gh-16174	2024-12-04 16:51:05 -07:00
Josh Cummings	2b5a2eef82	Address Observation Bean Name Collisions ... Closes gh-16161	2024-11-25 13:26:52 -07:00
Josh Cummings	a55021539a	Add RSocket and WebFlux Observation Tests ... Issue gh-11989 Issue gh-11990	2024-11-25 13:26:52 -07:00
Josh Cummings	315aafd464	Merge remote-tracking branch 'origin/6.3.x'	2024-11-22 17:23:43 -07:00
DingHao	e8ba039a61	Delay initialization AuthenticationProvider in Global Authentication	2024-11-22 17:22:14 -07:00
Tran Ngoc Nhan	b896a74669	Resolve Observation Bean Name Collisions ... Closes gh-16011	2024-11-20 13:28:06 -07:00
Josh Cummings	91832bfc8e	Add EnableWebSecurity + EnableWebSocketSecurity Test ... Issue gh-16011	2024-11-20 13:28:06 -07:00
Joe Grandja	c2cfe92a02	Merge branch '6.3.x'	2024-11-18 05:16:16 -05:00
Joe Grandja	709103e38c	Merge branch '6.2.x' into 6.3.x	2024-11-18 04:45:38 -05:00
Joe Grandja	a8c4d6cead	Require Locale argument for toLower/toUpperCase usage	2024-11-18 04:22:26 -05:00
Daniel Garnier-Moiroux	2639ac6545	webauthn: introduce WebAuthnConfigurer#disableDefaultRegistrationPage	2024-11-14 12:11:43 -06:00
Daniel Garnier-Moiroux	de7c452e42	webauthn: use DefaultResourcesFilter#webauthn ... - Unconditionally use the DefaultResourcesFilter, because the javascript file is required by the DefaultWebAythnPageGeneratingFilter, which is always registered.	2024-11-14 12:11:43 -06:00
Rob Winch	5a95952c95	Merge branch '6.3.x' ... Closes gh-16063	2024-11-11 15:17:02 -06:00
Rob Winch	e1ad989d38	Merge branch '6.2.x' into 6.3.x ... Closes gh-16062	2024-11-11 14:58:39 -06:00
Rob Winch	81e74e65d4	Support ServerExchangeRejectedHandler @Bean ... Closes gh-16061	2024-11-11 14:58:00 -06:00
Josh Cummings	f46e56de78	Improve Error Message for Conflicting Filter Chains ... Closes gh-15874	2024-11-07 13:01:16 -07:00
Josh Cummings	8a6e1297a1	Add Warning Message for Missing Leading Slashes ... Closes gh-16020	2024-10-31 12:22:17 -06:00
Cedric Montfort	d9d77bed82	Allow logout+jwt JWT type for reactive ... The OIDC back-channel spec recommends using a logout token typ `logout+jwt` (see [here](https://openid.net/specs/openid-connect-backchannel-1_0-final.html#LogoutToken). Support of this type was recently added [on the servlet side]([on the Servlet side](9101bf1f7d)), so back porting the same on the reactive side to close the gap. Closes gh-15702	2024-10-28 14:21:48 -07:00
Josh Cummings	27294b2e11	Allow RelyingPartyRegistration Placeholder Resolution in XML ... Closes gh-14645	2024-10-25 16:12:27 -06:00
Tran Ngoc Nhan	689a4141df	Remove unused import	2024-10-25 13:42:33 -07:00
Tran Ngoc Nhan	ffed4ea1dc	Polish diamond usage	2024-10-25 13:42:33 -07:00
Rob Winch	1ba6301afa	Support ServerWebExchangeFirewall @Bean ... Closes gh-15987	2024-10-25 12:13:41 -05:00
Rob Winch	8d5fddda9d	Merge branch '6.3.x' ... Support ServerWebExchangeFirewall @Bean Closes gh-15974in 6.4.x	2024-10-25 12:07:01 -05:00
Rob Winch	adc66e134b	Merge branch '6.2.x' into 6.3.x ... Support ServerWebExchangeFirewall @Bean Closes gh-15991	2024-10-25 11:56:53 -05:00
Rob Winch	3ba1263d64	Support ServerWebExchangeFirewall @Bean ... Closes gh-15987	2024-10-24 16:47:36 -05:00
Tomasz Letachowicz	b2e0539ff5	Add localization to DefaultLoginPageConfigurerTests test in order to avoid failure when system language is different	2024-10-24 11:34:34 -05:00
Josh Cummings	8bac87fb20	Merge branch '6.3.x'	2024-10-23 15:24:32 -07:00
Josh Cummings	c104f44546	Merge branch '6.2.x' into 6.3.x	2024-10-23 15:23:15 -07:00
Scott Murphy Heiberg	18dba34bde	Make RequestMatcherDelegatingAuthorizationManager Post-Processable ... Closes gh-15948	2024-10-23 15:15:10 -07:00
Rob Winch	b0e8730d70	Add Passkeys Support ... Closes gh-13305	2024-10-20 22:54:53 -05:00
xhaggi	7f537241e7	Use SessionAuthenticationStrategy for Remember-Me authentication ... Closes gh-2253	2024-10-15 14:07:07 -07:00
Max Batischev	d37d41c130	Polish One-Time Token API Names and Doc ... The names of variables and methods have been adjusted in accordance with the names of the one-time token login API components. Issue gh-15114	2024-10-15 14:04:56 -07:00
Max Batischev	e9fe6360bc	Add Reactive One-Time Token Login Kotlin DSL Support ... Closes gh-15887	2024-10-15 14:04:56 -07:00