1
0
mirror of synced 2026-08-05 17:57:15 +00:00

13590 Commits

Author SHA1 Message Date
Glenn Adams dfbfa9199d X-XSS-Protection is now disabled 2023-05-03 11:13:08 -03:00
Josh Cummings 5814f614c7 Merge branch '6.0.x'
Closes gh-13128
2023-05-02 16:56:37 -06:00
Josh Cummings 46ad9c122e Merge branch '5.8.x' into 6.0.x
Closes gh-13127
2023-05-02 16:56:06 -06:00
Josh Cummings e9a02bc6e9 RememberMeConfigurer Picks Up SecurityContextRepository
Closes gh-13104
2023-05-02 16:46:35 -06:00
Marcus Da Coregio 5af8f8dc87 Merge branch '6.0.x'
Closes gh-13126
2023-05-02 16:09:26 -03:00
Marcus Da Coregio b6dcb29a11 Merge branch '5.8.x' into 6.0.x
Closes gh-13125
2023-05-02 16:08:48 -03:00
Marcus Da Coregio 6d37ca1808 Fix code snippets in Authorize HttpServletRequest
Closes gh-11522
2023-05-02 16:06:27 -03:00
Marcus Da Coregio 45efd48b93 Merge branch '6.0.x'
Closes gh-13122
2023-05-02 10:13:24 -03:00
Marcus Da Coregio 69338ecdfa Only Observe AuthenticationManager if it is not null
Closes gh-13084
2023-05-02 10:12:46 -03:00
Josh Cummings e5fcf1ebcf Revisit Request and Method Security Docs
Issue gh-13088
2023-05-01 14:09:22 -06:00
Marcus Da Coregio 42cd19fcee Merge branch '6.0.x'
Closes gh-13103
2023-04-26 15:59:20 -03:00
Marcus Da Coregio 8c5f13657e Merge branch '5.8.x' into 6.0.x
Closes gh-13102
2023-04-26 15:58:25 -03:00
Marcus Da Coregio 5632469a90 Merge branch '5.7.x' into 5.8.x
Closes gh-13101
2023-04-26 15:57:32 -03:00
Marcus Da Coregio e61adcb0cd Clarify that Kotlin DSL needs an import
Closes gh-13092
2023-04-26 15:56:47 -03:00
Marcus Da Coregio 8481374ce7 Explain the rational about deprecating .and() and non-lambda DSL methods
Closes gh-13094
2023-04-26 14:49:57 -03:00
Steve Riesenberg 07b884a2cb Add Set-Cookie header value for XSRF-TOKEN
This commit fixes an issue where using HttpServletResponse#setHeader
causes previous header values to be overwritten.

Closes gh-13075
2023-04-25 15:15:02 -05:00
SeasonPan a44e91d044 fix javadoc typo 2023-04-24 16:41:17 -06:00
Nikita Eshkeev bb402a706f Update acls.adoc
Fix the spring security samples link
2023-04-24 16:38:24 -06:00
Nikita Eshkeev 9edbac7233 Update architecture.adoc
`RoleHierarchy` doesn't have the `setHierarchy` method, so the snippet doesn't work as is. The method is declared inside `RoleHierarchyImpl`
2023-04-24 16:37:47 -06:00
Josh Cummings 2fed213ab1 Merge branch '6.0.x' 2023-04-24 16:34:19 -06:00
Josh Cummings 7198395a42 Merge branch '5.8.x' into 6.0.x 2023-04-24 16:34:07 -06:00
Josh Cummings f261242db1 Merge branch '5.7.x' into 5.8.x 2023-04-24 16:33:29 -06:00
Ruslan Stelmachenko caa4093619 Fix javadoc for migration from WebSecurityConfigurerAdapter 2023-04-24 16:32:16 -06:00
Josh Cummings 966e4d3e01 Merge branch '6.0.x'
Closes gh-13087
2023-04-24 15:45:11 -06:00
Josh Cummings 1cd50ed18e Merge branch '5.8.x' into 6.0.x
Closes gh-13086
2023-04-24 15:44:25 -06:00
Josh Cummings 9244989b2e Fix allOf/anyOf Abstain Logic
Closes gh-13069
2023-04-24 15:36:17 -06:00
Josh Cummings 072feb2fb8 Merge branch '6.0.x' 2023-04-24 12:52:36 -06:00
Josh Cummings 599ed3e96b Polish Format
Issue gh-13079
2023-04-24 12:52:26 -06:00
Josh Cummings 57294be795 Merge branch '6.0.x'
Closes gh-13083
2023-04-24 12:49:56 -06:00
Josh Cummings 73a543d318 Handle Empty Role
Closes gh-13079
2023-04-24 12:49:30 -06:00
Marcus Da Coregio e57e8b3722 Merge branch '6.0.x' 2023-04-19 11:31:47 -03:00
Marcus Da Coregio e3cc8d13e8 Merge branch '5.8.x' into 6.0.x 2023-04-19 11:29:49 -03:00
Marcus Da Coregio 744b74f4c9 Merge branch '5.7.x' into 5.8.x 2023-04-19 11:27:08 -03:00
Amal Krishna 8bec14009e Fix typo in SecurityMockMvcResultMatchers.java
Change the first parameter's name of the AuthenticatedMatcher.withAuthentication() method from assesrtAuthentication to assertAuthentication
2023-04-19 11:25:55 -03:00
SeasonPan 556ae316ba fix typo of modules.adoc 2023-04-19 11:25:55 -03:00
Josh Cummings dd14bbb365 Merge branch '6.0.x' 2023-04-18 12:42:55 -06:00
Josh Cummings 1e25756ee6 Fix Import Order 2023-04-18 12:42:25 -06:00
Josh Cummings 68b198f091 Merge branch '6.0.x' 2023-04-18 12:20:44 -06:00
Josh Cummings 64542b4059 Polish X509 SecurityContextRepository
Like Basic and Bearer authentication, X509 is
stateless by default. As such, it is better to not
pick up the global SecurityContextRepository bean.

The better fix is to change the default from
HttpSessionSecurityContextRepository to
RequestAttributeSecurityContextRepository.

Issue gh-13008
2023-04-18 12:18:20 -06:00
Josh Cummings 33b266e8fa Add Boot Link
Issue gh-13062
2023-04-18 11:33:48 -06:00
Josh Cummings 830f79a8c5 Add Spring Boot Reference Url
Issue gh-13062
2023-04-18 11:28:44 -06:00
Josh Cummings 362a6ab011 Update to Spring Boot 3.0.5
Issue gh-13062
2023-04-18 11:28:20 -06:00
Josh Cummings 3f6f01ce20 Add Spring MVC Links
Issue gh-13062
2023-04-18 11:23:57 -06:00
Josh Cummings c79f04cd11 Merge branch '6.0.x'
Closes gh-13063
2023-04-17 17:07:32 -06:00
Josh Cummings c3479ddb45 Pick Up SecurityContextRepository
Closes gh-13008
2023-04-17 17:06:06 -06:00
Josh Cummings 62fec2f969 Revisit Logout Docs
Closes gh-13062
2023-04-17 16:58:43 -06:00
github-actions[bot] 3a58666622 Next development version 2023-04-17 16:19:06 +00:00
github-actions[bot] 4f02770aaa Next development version 2023-04-17 16:17:33 +00:00
github-actions[bot] 53d007f062 Next development version 2023-04-17 16:04:08 +00:00
github-actions[bot] 9a4d6ea4ec Next development version 2023-04-17 15:46:39 +00:00