Commit Graph

  • fe96a62dfc Document Observability Support Josh Cummings 2022-10-04 15:34:16 -06:00
  • 2713075d08 Mark Observations with Firewall Failures Josh Cummings 2022-10-11 17:44:29 -06:00
  • 46ab84684b Mark Observations with CSRF Failures Josh Cummings 2022-09-30 11:08:23 -06:00
  • d3d8f7d60f Mark Observations with Security Context Events Josh Cummings 2022-09-30 14:18:07 -06:00
  • 99a87179dd Instrument Filter Chain Josh Cummings 2022-09-21 18:04:31 -06:00
  • 8c610684f3 Instrument Authentication and Authorization Josh Cummings 2022-09-21 18:03:03 -06:00
  • 827384e386 Add Micrometer Dependency Josh Cummings 2022-09-21 18:13:32 -06:00
  • 7c872cf7fd Merge branch '5.8.x' Steve Riesenberg 2022-10-12 15:02:40 -05:00
  • 440748ec65 Add test support for Xor CSRF tokens Steve Riesenberg 2022-10-12 11:11:52 -05:00
  • 9b43950e13 Merge branch '5.8.x' Steve Riesenberg 2022-10-12 13:14:20 -05:00
  • 8bd25f90e4 Polish XorServerCsrfTokenRequestAttributeHandlerTests Steve Riesenberg 2022-10-12 12:31:27 -05:00
  • 804f20045e Polish XorCsrfTokenRequestAttributeHandlerTests Steve Riesenberg 2022-10-12 12:08:42 -05:00
  • 05e4a1dd20 Cache Xor CsrfToken Steve Riesenberg 2022-10-12 10:27:09 -05:00
  • bf1e622751 Update What's New in 6.0 for PasswordEncoders Joe Grandja 2022-10-12 08:27:46 -04:00
  • 716aa6df5c Merge branch '5.8.x' Joe Grandja 2022-10-12 07:43:26 -04:00
  • ffbcaca24a Update reference for PasswordEncoders Joe Grandja 2022-10-12 07:22:58 -04:00
  • ed6a7f7730 Remove deprecated constructors in PasswordEncoders Joe Grandja 2022-10-12 02:26:39 -04:00
  • 7af111cd33 Merge branch '5.8.x' Joe Grandja 2022-10-12 01:28:01 -04:00
  • c50441b59f Update default configuration for Pbkdf2PasswordEncoder Joe Grandja 2022-09-26 16:35:10 -04:00
  • f8419003eb Update default configuration for SCryptPasswordEncoder Joe Grandja 2022-09-26 15:26:43 -04:00
  • 2ea62d0f8b Update default configuration for Argon2PasswordEncoder Joe Grandja 2022-09-26 10:58:07 -04:00
  • a453a71bed Merge remote-tracking branch 'origin/5.8.x' Josh Cummings 2022-10-10 12:37:15 -06:00
  • 8d096554f8 Add AuthorizationEvent Josh Cummings 2022-10-10 12:26:33 -06:00
  • f9f41047cf Merge branch '5.8.x' Marcus Da Coregio 2022-10-10 11:02:22 -03:00
  • 6e2e76978f Merge branch '5.7.x' into 5.8.x Marcus Da Coregio 2022-10-10 11:01:56 -03:00
  • b17ba7cdcc Merge branch '5.6.x' into 5.7.x Marcus Da Coregio 2022-10-10 11:01:27 -03:00
  • e0f8c711d8 Add default value for cloneOutputDirectory property Marcus Da Coregio 2022-10-10 11:00:47 -03:00
  • c5e35bf32e Merge branch '5.8.x' Marcus Da Coregio 2022-10-10 09:24:50 -03:00
  • 4b6fed0667 Add static factory method to AntPathRequestMather and RegexRequestMatcher Marcus Da Coregio 2022-10-06 09:53:54 -03:00
  • 27059ced87 Default X-Xss-Protection header value to "0" Daniel Garnier-Moiroux 2022-10-06 12:00:31 +02:00
  • dcda899c8c Merge branch '5.8.x' Steve Riesenberg 2022-10-07 17:40:37 -05:00
  • 37fa49b32d Polish gh-11952 Steve Riesenberg 2022-10-07 17:40:12 -05:00
  • 6753f9745e Merge branch '5.8.x' Steve Riesenberg 2022-10-07 17:29:07 -05:00
  • f462134e87 Add reactive support for BREACH Steve Riesenberg 2022-09-01 16:10:55 -05:00
  • f4ca90e719 Add reactive interfaces for CSRF request handling Steve Riesenberg 2022-09-01 15:11:04 -05:00
  • 398f5dee7f Remove deprecated RequestMatcher methods from Java Configuration Marcus Da Coregio 2022-10-05 13:29:47 -03:00
  • 9fd195d419 Default to shouldFilterAllDispatcherTypes=true in XML Marcus Da Coregio 2022-10-07 11:46:20 -03:00
  • 146d3269bc Merge branch '5.8.x' Marcus Da Coregio 2022-10-07 10:28:14 -03:00
  • f3321c256c Add XML support for shouldFilterAllDispatcherTypes Marcus Da Coregio 2022-07-18 13:51:17 -03:00
  • 06c879b61a Add Reference to Security Reporting Rob Winch 2022-10-06 21:33:21 -05:00
  • 3de55dbc8b Update to Reactor Snapshots Josh Cummings 2022-10-06 11:07:50 -06:00
  • f650ebe545 Merge branch '5.8.x' Marcus Da Coregio 2022-10-06 13:50:50 -03:00
  • 8a5aed2983 Add deprecation warning to CsrfDsl#ignoringAntMatchers Marcus Da Coregio 2022-10-06 13:50:38 -03:00
  • d6302aabbc Merge branch '5.8.x' Marcus Da Coregio 2022-10-06 13:21:52 -03:00
  • bc4ad52feb Add deprecation warning to mvcMatchers methods Marcus Da Coregio 2022-10-06 13:20:53 -03:00
  • 12b9f2e196 use-authorization-manager defaults to true Josh Cummings 2022-10-05 19:49:53 -06:00
  • 1aa3f1414e Start building against Spring Framework SNAPSHOTs Marcus Da Coregio 2022-10-06 09:28:28 -03:00
  • 52ab2303da Fix failing test Marcus Da Coregio 2022-10-06 09:28:06 -03:00
  • c4d23f2b49 Use MvcRequestMatcher by default if Spring MVC is present Marcus Da Coregio 2022-10-04 13:29:39 -03:00
  • 353ca76973 Merge remote-tracking branch 'origin/5.8.x' Josh Cummings 2022-10-06 00:01:40 -06:00
  • 380a6a2564 Polish SecurityContextHolderStrategy Usage Josh Cummings 2022-10-05 23:59:14 -06:00
  • 12ac7acb2c Merge remote-tracking branch 'origin/5.8.x' Josh Cummings 2022-10-05 23:53:40 -06:00
  • 2079309c5a Add SecurityContextHolderStrategy XML Configuration for OAuth2 Josh Cummings 2022-06-24 13:24:24 -06:00
  • 7543effe89 Add SecurityContextHolderStrategy Java Configuration for OAuth2 Josh Cummings 2022-06-21 17:08:18 -06:00
  • 7e3841105b Add SecurityContextHolderStrategy XML Configuration for Saml2 Josh Cummings 2022-06-24 17:03:50 -06:00
  • 19181a5afd Add SecurityContextHolderStrategy Java Configuration for Saml2 Josh Cummings 2022-06-21 17:12:11 -06:00
  • e90a11b1c0 Add SecurityContextHolderStrategy to Saml2 Josh Cummings 2022-06-21 16:32:45 -06:00
  • 14584b0562 Add SecurityContextHolderStrategy to OAuth2 Josh Cummings 2022-06-21 16:33:43 -06:00
  • 0c0e298aa7 Polish Saml2 XML Use of SecurityContextHolderStrategy Josh Cummings 2022-10-05 23:38:14 -06:00
  • 72a46ddd31 Merge remote-tracking branch 'origin/5.8.x' Josh Cummings 2022-10-05 22:48:33 -06:00
  • b4d13e7726 Polish use-authorization-manager Josh Cummings 2022-10-05 19:49:06 -06:00
  • 7043ef6ccb Polish OpaqueTokenAuthenticationConverterTests Josh Cummings 2022-10-05 16:35:14 -06:00
  • f16d47c7b5 Polish DefaultHttpSecurityExpressionHandler Josh Cummings 2022-10-05 15:57:02 -06:00
  • eeb28e4f91 Merge remote-tracking branch 'origin/5.8.x' Josh Cummings 2022-10-05 21:45:26 -06:00
  • 4ddec07d0e Add default AuthorizationManager Josh Cummings 2022-10-05 21:36:34 -06:00
  • ee9449dbfe Fix tests for deferred CSRF tokens Steve Riesenberg 2022-10-05 16:09:18 -05:00
  • 521cdfd738 Use correct servlet imports Steve Riesenberg 2022-10-05 16:10:00 -05:00
  • 8b490de08d Merge branch '5.8.x' Steve Riesenberg 2022-10-05 14:46:15 -05:00
  • dce1c30522 Add support for BREACH Steve Riesenberg 2022-10-04 16:06:35 -05:00
  • 6bbf20be93 Fix failing tests Steve Riesenberg 2022-10-05 14:19:11 -05:00
  • 22cbd2c42e Merge branch '5.8.x' Rob Winch 2022-10-05 14:00:13 -05:00
  • a5cc1f0b60 Merge branch '5.7.x' into 5.8.x Rob Winch 2022-10-05 13:58:44 -05:00
  • 37dd896d4b Merge branch '5.6.x' into 5.7.x Rob Winch 2022-10-05 13:57:25 -05:00
  • e0843aabb1 automatically manage docs version (with collector) Dan Allen 2022-10-03 12:54:56 -06:00
  • 19fb7e5499 Merge branch '5.8.x' Steve Riesenberg 2022-10-05 13:48:35 -05:00
  • c1fcf275d9 Update What's New for 5.8 Steve Riesenberg 2022-10-05 13:48:18 -05:00
  • a7000a053b Merge branch '5.8.x' Steve Riesenberg 2022-10-05 13:46:26 -05:00
  • 1d706ae13d Add csrfTokenRequestResolver to CsrfDsl Steve Riesenberg 2022-10-05 13:34:09 -05:00
  • c2ed65c67a Fix failing tests Marcus Da Coregio 2022-10-05 14:59:33 -03:00
  • 22ba358e57 Merge branch '5.8.x' Marcus Da Coregio 2022-10-05 13:44:54 -03:00
  • bf6e85ec15 Accept String varargs in securityMatcher Marcus Da Coregio 2022-10-05 13:44:08 -03:00
  • 38a7bbd2eb Merge branch '5.8.x' Marcus Da Coregio 2022-10-05 13:20:12 -03:00
  • ace8caa182 Remove mvcMatchers usage from docs Marcus Da Coregio 2022-10-05 13:19:37 -03:00
  • 76d7a85bc0 Use modified classpath test support for tests that depend on the classpath Marcus Da Coregio 2022-10-04 14:39:56 -03:00
  • 77dcc691b3 Add modified classpath test support Marcus Da Coregio 2022-10-04 14:38:28 -03:00
  • 5002199be3 Revert "Disable tests that need Spring MVC mocked in classpath" Marcus Da Coregio 2022-10-04 13:42:58 -03:00
  • 35f7e46d05 Remove WebSecurityConfigurerAdapter Marcus Da Coregio 2022-09-30 10:31:15 -03:00
  • a10b0f526f Merge branch 'main' Steve Riesenberg 2022-10-04 12:01:57 -05:00
  • 60181e22d3 Upgrade com.unboundid:unboundid-ldapsdk to 6.0.6 Marcus Da Coregio 2022-10-04 13:39:42 -03:00
  • 3bc76815c2 Update csrf.request-handler-ref in 6.0 Steve Riesenberg 2022-10-04 11:24:54 -05:00
  • 5de6da890b Merge branch '5.8.x' Steve Riesenberg 2022-10-04 11:18:00 -05:00
  • c6978fba7c Disable tests that need Spring MVC mocked in classpath Marcus Da Coregio 2022-10-04 08:56:06 -03:00
  • 475b3bb6bb Add deferred CsrfTokenRepository.loadDeferredToken Steve Riesenberg 2022-09-27 14:53:54 -05:00
  • c847efd3fd Fix servlet import Steve Riesenberg 2022-10-03 15:10:56 -05:00
  • c98de7af2f Add xss-protection.header-value in 6.0 Steve Riesenberg 2022-10-03 14:31:04 -05:00
  • 7c3cc1e386 Merge branch '5.8.x' Steve Riesenberg 2022-10-03 14:29:51 -05:00
  • 0e215a21ad Add X-Xss-Protection headerValue to XML config Daniel Garnier-Moiroux 2022-10-03 15:45:17 +02:00
  • ad2abd39dc Merge branch '5.8.x' Marcus Da Coregio 2022-10-03 16:02:18 -03:00
  • 039e0328e1 Simplify Java Configuration RequestMatcher Usage Marcus Da Coregio 2022-09-21 10:09:35 -03:00
  • c4bff97fe8 apply base plugin to add clean task Dan Allen 2022-09-30 23:58:20 -06:00