566fb939ca
Fix SwitchUserFilter matchers
...
Fixes: gh-4249
2018-09-14 10:04:46 -05:00
5b26158f4d
AntPathRequestMatcher supports UrlPathHelper
...
Fixes: gh-5846
2018-09-14 10:04:46 -05:00
8170e47ff2
Fix OptimizeAntPathRequestMatcher
...
Previously the logic for determining if the pathInfo should be appended
was inverted.
This correctly concatenates url + pathInfo if url is a non empty String.
Fixes: gh-5473
2018-09-07 11:51:50 -06:00
c408fb7edf
Optimize AntPathRequestMatcher.getRequestPath()
2018-09-07 11:51:29 -06:00
4ff0fdfff9
Polish Commit on Reactive Http Basic Test
2018-09-07 11:39:54 -06:00
47b82ccd83
Reactive HttpBasic Support For Coloned Passwords
...
This makes so that reactive httpBasic supports passwords containing
one or more colons.
2018-09-07 11:39:41 -06:00
4b407189c2
ServerHttpBasicAuthenticationConverter Validates Scheme Name
...
Fixes: gh-5615
2018-07-31 09:12:39 -05:00
96c944c4fc
BasicAuthenticationFilter case insenstive
...
Fixes: gh-5616
2018-07-31 09:11:54 -05:00
ecaa2c5b1c
Cache Control disabled for 304
...
Fixes: gh-5534
2018-07-17 22:13:52 -05:00
e04b29426b
DefaultLoginPageGeneratingFilter escapes OAuth2 ClientRegistrations
...
Fixes gh-5394
2018-05-29 09:53:31 -04:00
c30e218f1f
Avoid unnecessary grow of ArrayList
...
Adapted ArrayList size in CacheControlHeadersWriter::createHeaders()
Fixes: gh-5310
2018-05-04 14:43:17 -05:00
70d284865f
DefaultLoginPageGeneratingFilter should calculate ContentLength using UTF-8
...
Fixes: gh-5309
2018-05-04 14:43:17 -05:00
32f5fb5eb2
ExceptionTranslationFilter does not handle committed responses
...
Fixes: gh-5273
2018-04-30 16:50:02 -05:00
5b751baf61
Fixes: gh-5190
2018-04-16 17:52:55 -05:00
151b545ed0
Polish Javadoc
...
Fixes: gh-5186
2018-03-29 15:33:31 -05:00
6729c39905
Fix JDK 9
...
Issue: gh-5160
2018-03-28 15:00:41 -05:00
bfada59a1e
CookieClearingLogoutHandler adds uses contextPath + "/"
...
Fixes: gh-5140
2018-03-19 16:50:48 -05:00
8f8deac0f4
Fix StrictHttpFirewall rules
...
Fixes: gh-5092
2018-03-08 21:29:31 -06:00
4d410b0b61
Polish Javadoc HttpStatusServerAccessDeniedHandler
2018-03-07 12:34:15 -06:00
24a4fbfe56
HttpStatusServerAccessDeniedHandler use injected HttpStatus
...
Fixes: gh-5078
2018-03-07 12:28:45 -06:00
8d75554b6b
Lazily Create Throwables
...
Fixes: gh-5040
2018-02-26 16:24:40 -06:00
0fc67f765a
Polish StrictHttpFirewall Javadoc
...
Also cleanup DefaultHttpFirewall Javadoc
Issue: gh-5008
2018-02-15 17:18:28 -06:00
fcf967687b
Add FilterSecurityInterceptor once per request test
...
Issue: gh-4997
2018-02-08 17:11:37 -06:00
40a1281c66
FilterSecurityInterceptor once per request set attr
...
Only set the attribute if once per request is true
2018-02-08 17:10:45 -06:00
ce5fb51b20
Remove Mono.defer in ReactorContextWebFilter
...
Fixes: gh-5010
2018-02-08 16:19:10 -06:00
66298dcf5d
Clean ReactorContextWebFilterTests imports
...
Issue: gh-4962
2018-02-08 16:15:29 -06:00
141e3f581f
ReactorContextWebFilter preserves main Context
...
Previously ReactorContextWebFilter overrode
the main Context.
Fixes: gh-4962
2018-02-08 14:58:08 -06:00
c399987450
Polish StrictHttpFirewall Javadoc
...
Fixes: gh-5008
2018-02-08 14:08:54 -06:00
ea3dd336aa
Cache headers only if no cache headers set
...
Fixes: gh-5004
2018-02-07 14:56:34 -06:00
8b7f772761
Update to Jackson 2.9.4
...
Fixes: gh-4985
2018-02-01 13:45:06 -06:00
0eef5b4b42
Add StrictHttpFirewall
2018-01-24 11:06:08 -06:00
6a0833165a
AuthorizationWebFilter handles null Authentication
...
If the AuthorizationManager used the Authentication and the Authentication
was null the AuthorizationWebFilter would produce a NullPointerException
This commit fixes the test to ensure that Authentication is subscribed to
and ensures that the Authentication is not null
Fixes: gh-4966
2018-01-22 15:16:58 -06:00
921157cdcd
Remove explicit super() calls
2017-12-21 15:11:51 -06:00
57353d18e5
Use diamond type
2017-12-21 15:09:00 -06:00
c16456623f
Remove unused imports
2017-12-20 16:05:38 -06:00
70be0f3619
Mono<CsrfToken> saveToken->Mono<Void>
...
Issue: gh-4856
2017-11-20 16:30:29 -06:00
d55db837e1
CsrfWebFilter places Mono<CsrfToken>
...
Fixes: gh-4855
2017-11-20 16:30:29 -06:00
701933c7f7
Fix copyright start years
...
See gh-4655
See gh-4725
2017-11-17 10:14:32 -06:00
5f518d00e5
Apply Checkstyle EmptyStatementCheck module
...
This commit adds Checkstyle `EmptyStatementCheck` module and aligns code with it.
2017-11-16 20:18:21 -06:00
be397b8b33
WebSessionServerSecurityContextRepository Polish
...
- map(WebSession::getAttributes)
- use Mono.justOrEmpty
Issue: gh-4843
2017-11-16 15:54:33 -06:00
8d30d6110b
WebSessionSecurityContextRepository custom session attribute name
...
Fixes: gh-4843
2017-11-16 15:54:21 -06:00
b7529be3d0
WebSessionSecurityContextRepository changes session id
...
Fixes: gh-4842
2017-11-16 15:46:26 -06:00
b19e14330f
WebSessionServerCsrfTokenRepository session fixation protection
...
Issue: gh-4842
2017-11-16 15:45:57 -06:00
75a7c5268a
ServerRequestCache.removeMatchingRequest
...
Issue: gh-4789
2017-11-16 15:44:32 -06:00
fffd781b03
Add localization to error messages from ExceptionTranslationFilter
...
Fixes gh-4504
2017-11-16 11:25:56 -06:00
b6895e6359
Apply Checkstyle WhitespaceAfterCheck module
2017-11-16 11:18:31 -06:00
64ad08e96d
ServerRedirectCache.getRequest->getRedirectUri
...
Issue: gh-4789
2017-11-15 15:10:47 -06:00
1d9b0760d5
ServerRequestCache uses URI
...
Issue: gh-4789
2017-11-15 12:54:05 -06:00
942b51dba7
Reactive Basic does not create session by default
...
Fixes: gh-4825
2017-11-15 12:50:29 -06:00
5f79fdd3eb
requiresLogoutMatcher naming polish
...
Issue: gh-4822
2017-11-14 16:42:41 -06:00
Rob Winch