1a56023f7f
Use Spring Framework Nullability Annotations
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-07-31 10:18:51 -06:00
f6cb0bd610
Merge Use 2004-present Copyright Header
...
The original merge into main did not apply the changes. This fixes it.
Closes gh-17635
2025-07-29 10:52:42 -05:00
2fdca16c1a
Merge branch '6.4.x' into 6.5.x
...
Closes gh-17634
2025-07-29 09:47:52 -05:00
392129b616
Use 2004-present Copyright Header
...
The Spring portfolio is changing to use <inception-year>-present in
the copyright headers to simplify keeping headers up to date. This
commit updates the headers and the checkstyle accordingly.
The commit updated etc/checkstyle/header.txt
It also updated the copyright headers using the following find/replace:
Find: (Copyright \d{4})\s*(\-\d{4})? the original author or authors.
Replace: Copyright 2004-present the original author or authors.
Closes gh-17633
2025-07-29 09:45:23 -05:00
da182a2d7c
Remove Deprecated OpenSaml Components
...
Closes gh-17306
2025-07-09 14:06:51 -06:00
7da352129c
Use PathPatternRequestMatcher in saml2
...
Issue gh-16887
2025-07-03 13:37:48 -06:00
98686a5139
Standardize Mock Request Paths
...
Closes gh-17449
2025-07-03 13:37:47 -06:00
1583c90433
Remove Unused Method in TestOpenSamlObjects
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-07-03 13:15:44 -06:00
a9e28a2ae9
Remove OpenSamlRelyingPartyRegistration
...
Issue gh-17309
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-07-03 13:15:44 -06:00
8c100c5c27
Update RelyingPartyRegistration JavaDoc
...
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-07-03 13:15:44 -06:00
4d524b1fe1
Remove RelyingPartyRegistration Deprecations
...
Closes gh-17309
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-07-03 13:15:44 -06:00
e8f920e0ee
Polish JdbcAssertingPartyMetadataRepository
...
- Remove GetBytes since it's not used yet
- Remove customizable RowMapper since this can be added
later
- Change signing_algorithms to be a String since the conversion
strategy is simple
- Standardize test names
- Simplify conversion of credentials using ThrowingFunction
- Change column names to match RelyingPartyRegistration
field names
Issue gh-16012
2025-06-11 18:08:31 -06:00
2bd05128ec
Add JdbcAssertingPartyMetadataRepository#save
...
Issue gh-16012
Co-Authored-By: chao.wang <chao.wang@zatech.com >
2025-06-11 18:08:31 -06:00
e2e42a5580
Fix Checkstyle
...
Issue gh-16012
2025-06-11 18:08:31 -06:00
16fd24c002
Add JdbcAssertingPartyMetadataRepository
...
Closes gh-16012
Signed-off-by: chao.wang <chao.wang@zatech.com >
2025-06-11 18:08:31 -06:00
9b724377ce
Rework Saml2 Authentication Statement
...
This commit separates the authentication principal, the assertion details,
and the relying party tenant into separate components. This allows the
principal to be completely decoupled from how Spring Security triggers and
processes SLO.
Specifically, it adds Saml2AssertionAuthentication, a new authentication
implementation that allows an Object principal and a Saml2ResponseAssertionAccessor
credential. It also moves the relying party registration id from
Saml2AuthenticatedPrincipal to Saml2AssertionAuthentication.
As such, Saml2AuthenticatedPrincipal is now deprecated in favor of
placing its assertion components in Saml2ResponseAssertionAccessor and
the relying party registration id in Saml2AssertionAuthentication.
Closes gh-10820
2025-06-10 17:21:03 -06:00
02a8c416aa
Add NameID to SAML 2.0 Authentication Info
...
Issue gh-10820
2025-06-10 17:21:03 -06:00
36c7b91fb9
SAML 2.0 Single Logout Uses Saml2AuthenticationInfo
...
This allows SLO to be triggered without the authentication
principal needing to implement a given interface.
Issue gh-10820
2025-06-10 17:21:03 -06:00
aa3135169d
Polish Documentation
...
Closes gh-14635
2025-06-09 16:49:36 -06:00
3ddf201d66
Updated Copyrights
...
Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com >
2025-06-09 16:45:24 -06:00
edfd7b9b43
Addressed review comments
...
Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com >
2025-06-09 16:45:24 -06:00
eaf8184142
Send saml logout response even when validation errors happen
...
Signed-off-by: Liviu Gheorghe <liviu.gheorghe.ro@gmail.com >
2025-06-09 16:45:24 -06:00
f73f253beb
Add Switch for Processing GET Requests
...
Issue gh-17099
2025-06-03 13:12:37 -06:00
32c7e8a6ee
Use Saml2Error Static Factories
2025-06-03 13:12:37 -06:00
3de7312658
Add Saml2Error Static Factories
2025-06-03 13:12:37 -06:00
8953f464fb
Add Switch for Processing GET Requests
...
Closes gh-17099
Signed-off-by: Tran Ngoc Nhan <ngocnhan.tran1996@gmail.com >
2025-06-03 13:10:45 -06:00
9df3a57d9e
Merge branch '6.4.x'
2025-04-28 11:27:17 -06:00
868342b3a9
Add OpenSAML 5 Test
...
Issue gh-17008
2025-04-28 11:25:31 -06:00
ce000ed190
Merge branch '6.3.x' into 6.4.x
...
Closes gh-17008
2025-04-28 11:18:46 -06:00
5354e4d2c5
Check for Null Issuer
...
Closes gh-16989
2025-04-28 11:18:32 -06:00
834370d8eb
Update Deprecated Spring Web Usage
2025-04-23 11:29:19 -06:00
3f7f3dabe7
Correct JavaDoc Class Reference
2025-04-23 11:29:18 -06:00
b79d81a80f
Merge branch '6.4.x'
2025-04-21 08:32:54 -06:00
f8d417dc03
Preserve Encrypted Elements
...
Closes gh-16367
2025-04-21 08:32:07 -06:00
3869b13e68
Add ResponseAuthenticationConverter
...
Aside from simplifying configuration, this commit also makes it possible
to provide a response authentication converter that doesn't need the
NameID element to be present.
Closes gh-12136
2025-04-09 17:38:24 -06:00
3e686abf50
Add ResponseValidator
...
Issue gh-14264
Closes gh-16915
2025-04-09 17:32:40 -06:00
a283700ef8
Add CacheSaml2AuthenticationRequestRepository
...
Closes gh-14793
2025-04-03 17:43:48 -06:00
67c21de1cf
Support Continue Filter Chain When No Relying Party
...
Closes gh-16000
2025-04-03 15:32:23 -06:00
5436fd5574
Remove Unecessary Code
2025-04-03 14:28:54 -06:00
91b0936189
Add AssertionValidator
...
- Ships with support for customizing the OpenSAML validators to use
- Or, you can supply your own instance of SAML20AssertionValidator
Closes gh-15578
2025-04-02 17:44:40 -06:00
99345537d6
Add RequestMatcher Migration Path for AbstractAuthenticationProcessingFilter
...
Issue gh-16417
2025-03-26 16:38:39 -06:00
de07b1108f
Use PathPatternRequestMatcher in Web Components
...
This commit changes filters and resolvers that were using AntPathRequestMatcher as their
default to using PathPatternRequestMatcher.
Issue gh-16632
2025-03-26 13:28:58 -06:00
50ad378a29
Polish MockHttpServletRequest Usage
...
This commit makes so that the requestURI is set to a value that makes
sense with the other properties being mocked.
Issue gh-16632
2025-03-26 13:27:17 -06:00
cd9d6ce5c9
Fix typos Open SAML 5 Javadoc referencing Open SAML 4
...
Signed-off-by: Filip Hrisafov <filip.hrisafov@gmail.com >
2025-03-19 18:06:26 -06:00
c8fea962a0
Merge branch '6.4.x'
...
- 04f530b
2025-03-17 15:41:13 -05:00
04f530bc1b
opensamlFiveTest.extendsFrom testRuntimeOnly
...
Issue gh-16756
2025-03-17 15:41:07 -05:00
e6223dede3
Merge branch '6.4.x'
...
- adb303e
2025-03-17 14:34:18 -05:00
05116eabbd
Merge branch '6.3.x' into 6.4.x
...
- adb303e
2025-03-17 14:18:49 -05:00
adb303e152
Add testRuntimeOnly junit-platform-launcher
...
Closes gh-16755
2025-03-17 14:16:44 -05:00
f2d78a01c3
Fix JavaDoc Typos
2025-02-26 11:31:02 -07:00
Tran Ngoc Nhan