Commit Graph

1491 Commits

Author SHA1 Message Date
Rob Winch
f8132018d5 Merge branch '6.4.x'
TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable

Closes gh-16472
2025-01-23 12:45:09 -06:00
Rob Winch
751b5580a1 TestOneTimeTokenGenerationSuccessHandler.lastToken to non-static variable
Previously there were race conditions on the static member lastToken of
TestOneTimeTokenGenerationSuccessHandler. This is because the tests run in
parallel and one test may override the other tests lastToken and thus
make the assertion on it incorrect.

This commit changes lastToken to be a non-static variable to ensure that
each test has it's own lastToken for asserting the expected value.

Closes gh-16471
2025-01-23 12:43:22 -06:00
Steve Riesenberg
4f860a5481 Merge branch '6.4.x'
# Conflicts:
#	config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/client/OAuth2LoginConfigurer.java
2025-01-22 17:30:29 -06:00
Max Batischev
474b5e151a Add Support GenerateOneTimeTokenRequestResolver
Closes gh-16291

Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-01-22 17:09:55 -06:00
Steve Riesenberg
d97e01d1de Merge branch '6.3.x' into 6.4.x
Closes gh-16466
2025-01-22 17:09:34 -06:00
Steve Riesenberg
211fa52649 Favor provided instances over shared objects
Prior to this commit, providing oauth2Login() and oauth2Client() with
clientRegistrationRepository() and authorizedClientRepository() caused
objects to be shared across both configurers.

These configurers will now prefer explicitly provided instances of
those objects when they are available.

Closes gh-16105
2025-01-22 17:07:44 -06:00
Rob Winch
68c8a5ad99 Remove debug test
Issue gh-16443
2025-01-22 16:11:25 -06:00
Rob Winch
4ee9358900 Add serializeAndDeserializeAreEqual
Checks that serialization/deserialization can be performed.

Issue gh-16443
2025-01-22 14:06:11 -06:00
Tran Ngoc Nhan
e5ea75f7f4 Implement Serial
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com>
2025-01-21 18:14:52 -06:00
Rob Winch
bea232237f Fix whitespace 2025-01-17 20:51:43 -06:00
DingHao
f4491f388e Set PublicKeyCredentialCreationOptionsRepository by DSL or Bean
Closes gh-16369

Signed-off-by: DingHao <dh.hiekn@gmail.com>
2025-01-17 18:57:08 -06:00
Rob Winch
5462b4c358 webauthnWhenConfiguredMessageConverter uses mock
Issue gh-16397
2025-01-17 18:29:23 -06:00
DingHao
8181cec06c Set HttpMessageConverter by DSL
Closes gh-16369

Signed-off-by: DingHao <dh.hiekn@gmail.com>
2025-01-17 18:29:23 -06:00
Josh Cummings
c2a5709e0f Merge branch '6.4.x' 2025-01-17 16:09:01 -07:00
Josh Cummings
bbe4f87641 Mark Serialization Support for Events
Issue gh-16276
2025-01-17 16:08:31 -07:00
Josh Cummings
443af32314 Move Servlet Mocks to Web
Issue gh-13551
2025-01-15 17:32:58 -07:00
Josh Cummings
8827b2e564 Polish Using Request ServletContext
Issue gh-14418
2025-01-15 17:27:08 -07:00
Josh Cummings
6019803064 Merge branch '6.4.x' 2025-01-14 18:38:14 -07:00
Josh Cummings
244fd2eb51 Support Serialization in Exceptions
Issue gh-16276
2025-01-14 18:37:53 -07:00
Josh Cummings
8035815e56 Merge branch '6.4.x' 2025-01-14 16:29:06 -07:00
Josh Cummings
feea103050 Formatting
Issue gh-16276
2025-01-14 16:28:53 -07:00
Josh Cummings
28644aa966 Merge branch '6.4.x' 2025-01-14 16:17:34 -07:00
Josh Cummings
6f379aa907 Add Serializable to Csrf Components
Issue gh-16276
2025-01-14 16:07:20 -07:00
Max Batischev
bf9b95a481 Add Support OAuth2AuthorizationRequestResolver As Bean
Closes gh-16380

Signed-off-by: Max Batischev <mblancer@mail.ru>
2025-01-10 16:25:03 -06:00
Rob Winch
72a2831f76 CustomBeanPostProcessor -> CountHttpSecurityBeanPostProcessor
Issue gh-16370

Signed-off-by: Rob Winch <362503+rwinch@users.noreply.github.com>
2025-01-09 17:23:58 -06:00
DingHao
c631afcf5b Avoid unnecessary instantiation of HttpSecurity when a SecurityFilterChain bean is provided
Signed-off-by: DingHao <dh.hiekn@gmail.com>
2025-01-09 17:23:58 -06:00
Josh Cummings
9ae432f0d2 Add Filter Chain Validation Test
Issue gh-15982
2024-12-19 15:04:01 -07:00
Max Batischev
624a8fb252 Add Alerting About Deprecated Authorize Config
Closes gh-16213
2024-12-19 15:04:01 -07:00
Max Batischev
e257af8854 Add Support Same Request Matchers Checking
Closes gh-15982
2024-12-19 15:04:01 -07:00
Max Batischev
e9bdb5b96e Polish SecurityFilterChain Validation
Issue gh-15982
2024-12-19 15:04:01 -07:00
Josh Cummings
fa58ebbc0c Merge branch '6.4.x' 2024-12-19 08:55:44 -07:00
Josh Cummings
05076db53a Merge branch '6.3.x' into 6.4.x 2024-12-19 08:55:35 -07:00
Josh Cummings
a9f8a23e50 Merge branch '6.2.x' into 6.3.x 2024-12-19 08:55:25 -07:00
Josh Cummings
643a3f1206 Test Setting logoutRequestRepository
Issue gh-16093
2024-12-19 08:55:18 -07:00
Josh Cummings
1104b45832 Polish SessionLimit
- Move to the web.authentication.session package since it is only needed
by web.authentication.session elements and does not access any other web
element itself.
- Add Kotlin support
- Add documentation

Issue gh-16206
2024-12-18 18:32:28 -07:00
Claudenir Machado
1864577e98 Address SessionLimitStrategy
Closes gh-16206
2024-12-18 18:32:12 -07:00
Josh Cummings
3eeb4317f6 Add setFavorRelativeUris
This places the new functionality behind a setting so that
we can remain passive until we can change the setting in
the next major release.

Issue gh-7273
2024-12-17 22:35:41 -07:00
Michal Okosy
7848b959da Use relative URLs in /login redirects
Closes gh-7273
2024-12-17 22:35:41 -07:00
Josh Cummings
25740db819 Merge branch '6.4.x' 2024-12-17 13:10:52 -07:00
Josh Cummings
27c2a8ad11 Add Serializable Compatibility to Web Authentication Exceptions
Issue gh-16276
2024-12-17 13:05:23 -07:00
Josh Cummings
d233b70285 Merge branch '6.4.x' 2024-12-17 09:37:01 -07:00
Josh Cummings
841c03fe3b Add Serializable Compatilibity to Saml 2.0 Exceptions
Issue gh-16276
2024-12-17 09:36:29 -07:00
Josh Cummings
9d02949fa9 Merge branch '6.4.x' 2024-12-13 16:58:17 -07:00
Josh Cummings
b9911fd522 Add serialVersionUID to Authentication classes
Issue gh-16276
2024-12-13 16:41:32 -07:00
Josh Cummings
77f76f8465 Merge branch '6.4.x' 2024-12-13 11:53:51 -07:00
Josh Cummings
e3cd4339b2 Add Serial Version
Closes gh-16163
2024-12-13 11:53:15 -07:00
Rob Winch
2fcd305509 Increment to 6.5.0-SNAPSHOT
Closes gh-16221
2024-12-12 21:47:11 -06:00
Josh Cummings
7592483654 Add Test to Report Missing serialVersionUID
Issue gh-16276
2024-12-12 18:12:11 -07:00
Josh Cummings
f7b9b7228f Include Classes Listed in Generator Map
This allows testing of classes that are serializable,
but do not use Security's serialVersionUID.

Issue gh-16276
2024-12-12 18:07:53 -07:00
Josh Cummings
82cc3ad5ec Arrange Class Generators by Module
Issue gh-16276
2024-12-12 18:07:52 -07:00