641de854d7
Update to Project Reactor Californium-SR20
...
Closes gh-8936
2020-08-05 09:00:29 -06:00
1f386b1db3
Update to Spring Framework 5.1.17
...
Closes gh-8935
2020-08-05 09:00:20 -06:00
4f0172d0f0
Update to Spring Data Lovelace-SR19
...
Closes gh-8934
2020-08-05 08:59:44 -06:00
ca272e4267
Resolve Bearer token after subscribing to publisher
...
Bearer token was resolved immediately after calling method convert. In situations when malformed token was provided or authorization header and access token query param were present in request exception was thrown instead of signalling error.
After this change Bearer token is resolved on subscription and invalid states are handled by signaling error to subscriber.
Closes gh-8865
2020-08-03 11:11:56 -05:00
d956ebf59b
Fix Broken Test
...
Issue gh-8589
2020-07-31 13:45:10 -06:00
acfe4bdcfb
Polish to Avoid NPE
...
Issue gh-5648
Co-authored-by: MattyA <mat.auburn@gmail.com >
2020-07-31 09:00:24 -06:00
48a0514965
Additional Jwt Validation Debug Messages
...
Closes gh-8589
Co-authored-by: MattyA <mat.auburn@gmail.com >
2020-07-31 09:00:16 -06:00
e937366f50
Polish WebSecurityConfigurerAdapter JavaDoc
...
Issue gh-8784
2020-07-20 15:25:02 -06:00
0c85dd9cd1
WebSecurityConfigurerAdapter JavaDoc
...
Closes gh-8784
2020-07-20 15:24:59 -06:00
7e7f85c18c
Polish Bearer Token Padding
...
Issue gh-8502
2020-07-16 13:15:06 -06:00
157498bf44
Bearer Token Padding
...
Closes gh-8502
2020-07-16 13:13:04 -06:00
ce4345b0ed
Fix ProviderManager Javadoc typo
...
Closes gh-8800
2020-07-07 17:17:39 -05:00
7859970ff6
LoginPageGeneratingWebFilter honors context path
...
Closes gh-8807
2020-07-07 14:02:32 -05:00
fa09295fd6
Use Github Actions workflow for PRs and remove Travis
...
Closes gh-8717
2020-06-30 05:23:30 -04:00
9a8d324d72
Better scp Retry Settings
2020-06-25 11:36:36 -05:00
6f4d05193e
DefaultWebSecurityExpressionHandler uses RoleHierarchy bean
...
Fixes gh-7059
2020-06-10 17:20:52 -04:00
e146a7c16b
OAuth2LoginAuthenticationWebFilter should handle OAuth2AuthorizationException
...
Issue gh-8609
2020-06-09 17:10:07 -04:00
a372ec9ef5
OAuth2AuthorizationCodeGrantWebFilter should handle OAuth2AuthorizationException
...
Fixes gh-8609
2020-06-09 17:10:07 -04:00
0b0abfb911
Next development version
2020-06-03 18:04:07 -04:00
37568780a1
Release 5.1.11.RELEASE
2020-06-03 17:48:40 -04:00
d80b1865a5
Polish setAllowedHostnames
...
Added JavaDoc to method, including @since attribute
Issue gh-4310
2020-06-03 08:54:06 -06:00
52c80c78e5
Add support for allowedHostnames in StrictHttpFirewall
...
Introduce a new method `setAllowedHostnames` which perform the validation
against untrusted hostnames.
Fixes gh-4310
2020-06-03 08:53:59 -06:00
ded83cc1b3
Update to jaxb-impl 2.3.3
...
Fixes gh-8634
2020-06-02 18:45:14 -04:00
7a1833c1df
Update to okhttp 3.12.12
...
Fixes gh-8635
2020-06-02 18:45:14 -04:00
e6630ea0f1
Update to mockwebserver 3.12.12
...
Fixes gh-8633
2020-06-02 18:45:14 -04:00
2400e8fde2
Update to Spring Boot 2.1.14.RELEASE
...
Fixes gh-8632
2020-06-02 18:45:14 -04:00
f05d70a4a5
Remove unused field 'digester' in Md4PasswordEncoder
...
`private Digester digester;` defined in Md4PasswordEncoder is never used. So remove it.
Closes gh-8553
2020-05-21 11:21:40 -05:00
8bb4e72aff
Prevent StackOverflowError for AccessControlEntryImpl.hashCode
...
Getting StackOverflowError when invoke AclImpl.hashCode because of
cross-references between AclImpl and AccessControlEntryImpl
Remove from AccessControlEntryImpl.hashCode method invocation of
acl.hashCode
fixes gh-5401
2020-05-21 10:08:56 -05:00
f58a262eb4
Revert "Create the CSRF token on the bounded elactic scheduler"
...
Reactor did not add bounded elastic until a later version.
This reverts commit c0154f2315
2020-05-18 11:10:41 -05:00
c0154f2315
Create the CSRF token on the bounded elactic scheduler
...
The CSRF token is created with a call to UUID.randomUUID which is blocking.
This change ensures this blocking call is done on the bounded elastic scheduler which supports blocking calls.
Fixes gh-8128
2020-05-18 11:07:08 -05:00
cea2b556d6
Update AntPathRequestMatcher.java
...
Fixes gh-8512
2020-05-14 10:36:30 -04:00
faa02e8bc0
Document NoOpPasswordEncoder will not be removed
...
This commit adds extension to deprecation notice.
Fixes gh-8506
2020-05-13 12:56:22 -05:00
d9f57492d4
Fix non-standard HTTP method for CsrfWebFilter
...
Closes gh-8452
2020-05-12 13:21:22 -05:00
b007fdc333
Next development version
2020-05-06 16:27:44 -04:00
16c350a7bc
Release 5.1.10.RELEASE
2020-05-06 15:55:12 -04:00
6d6a22eda1
Update to org.powermock 2.0.7
...
Closes gh-8475
2020-05-06 09:23:32 -04:00
1e957e96b9
Update to Spring Data Lovelace-SR17
...
Closes gh-8474
2020-05-06 09:22:47 -04:00
9986a33177
Update to Reactor Californium-SR18
...
Closes gh-8473
2020-05-06 09:21:59 -04:00
ecf58c9549
Update to Spring Framework 5.1.15.RELEASE
...
Closes gh-8472
2020-05-06 09:21:22 -04:00
497ee84537
Update to GAE 1.9.80
...
Closes gh-8470
2020-05-06 09:20:39 -04:00
30a68b6c10
Clean up Javadoc
...
Fixes gh-8480
2020-05-05 17:34:29 -04:00
aa118466e5
Add ROLE_INFRASTRUCTURE to infrastructure beans
...
Closes gh-8407
2020-04-27 09:19:58 -05:00
f98db2d866
ActiveDirectoryLdapAuthenticationProvider uses InternalAuthenticationServiceException
...
Closes gh-2884
2020-04-24 10:25:09 -05:00
52af3998c8
Fix typo with correct capitalization
...
Closes gh-8406
2020-04-17 14:19:58 -04:00
1b91259412
Logout defaults to use Global SecurityContextServerLogoutHandler
...
Closes gh-8375
2020-04-13 16:46:00 -05:00
9d3ea58bb1
Fix example in javadoc of FilterChainProxy
...
Closes gh-8344
2020-04-08 09:14:32 -05:00
c2296b0376
BCryptPasswordEncoder rawPassword cannot be null
...
Closes gh-8317
2020-04-07 13:47:37 -05:00
24d251f232
Fix typo in Javadoc of ServerHttpSecurity#hasAuthority
...
Closes gh-8336
2020-04-06 14:20:57 -05:00
18610eab6f
Fix HttpSecurity Javadoc
...
Fixes gh-4404
2020-04-02 11:50:13 -04:00
1964cfdfaa
Next Development Version
2020-04-01 16:24:58 -04:00
Josh Cummings