Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| c96ae032f9 |
+1
-1
@@ -147,7 +147,7 @@ public class AclAuthorizationStrategyImpl implements AclAuthorizationStrategy {
|
||||
/**
|
||||
* Creates a principal-like sid from the authentication information.
|
||||
* @param authentication the authentication information that can provide principal and
|
||||
* thus the sid's id will be dependent on the value inside
|
||||
* thus the sid's id will be dependant on the value inside
|
||||
* @return a sid with the ID taken from the authentication information
|
||||
*/
|
||||
protected Sid createCurrentUser(Authentication authentication) {
|
||||
|
||||
@@ -92,9 +92,9 @@ public class AclImpl implements Acl, MutableAcl, AuditableAcl, OwnershipAcl {
|
||||
* @param aclAuthorizationStrategy authorization strategy
|
||||
* @param grantingStrategy the {@code PermissionGrantingStrategy} which will be used
|
||||
* by the {@code isGranted()} method
|
||||
* @param parentAcl the parent (may be {@code null})
|
||||
* @param loadedSids the loaded SIDs if only a subset were loaded (may be
|
||||
* {@code null})
|
||||
* @param parentAcl the parent (may be may be {@code null})
|
||||
* @param loadedSids the loaded SIDs if only a subset were loaded (may be {@code null}
|
||||
* )
|
||||
* @param entriesInheriting if ACEs from the parent should inherit into this ACL
|
||||
* @param owner the owner (required)
|
||||
*/
|
||||
|
||||
+1
-1
@@ -103,7 +103,7 @@ public class UserDetailsManagerConfigurer<B extends ProviderManagerBuilder<B>, C
|
||||
|
||||
/**
|
||||
* Builds the user to be added. At minimum the username, password, and authorities
|
||||
* should be provided. The remaining attributes have reasonable defaults.
|
||||
* should provided. The remaining attributes have reasonable defaults.
|
||||
*/
|
||||
public final class UserDetailsBuilder {
|
||||
|
||||
|
||||
+1
-1
@@ -377,7 +377,7 @@ public final class RememberMeConfigurer<H extends HttpSecurityBuilder<H>>
|
||||
/**
|
||||
* Creates the {@link RememberMeServices} to use when none is provided. The result is
|
||||
* either {@link PersistentTokenRepository} (if a {@link PersistentTokenRepository} is
|
||||
* specified, else {@link TokenBasedRememberMeServices}).
|
||||
* specified, else {@link TokenBasedRememberMeServices}.
|
||||
* @param http the {@link HttpSecurity} to lookup shared objects
|
||||
* @param key the {@link #key(String)}
|
||||
* @return the {@link RememberMeServices} to use
|
||||
|
||||
+1
-1
@@ -82,7 +82,7 @@ import org.springframework.security.web.util.matcher.RequestMatcher;
|
||||
* The following configuration options are available:
|
||||
*
|
||||
* <ul>
|
||||
* <li>{@link #logoutUrl} - The URL to process SAML 2.0 Logout</li>
|
||||
* <li>{@link #logoutUrl} - The URL to to process SAML 2.0 Logout</li>
|
||||
* <li>{@link LogoutRequestConfigurer#logoutRequestValidator} - The
|
||||
* {@link AuthenticationManager} for authenticating SAML 2.0 Logout Requests</li>
|
||||
* <li>{@link LogoutRequestConfigurer#logoutRequestResolver} - The
|
||||
|
||||
+1
-1
@@ -24,7 +24,7 @@ import java.time.Duration
|
||||
*
|
||||
* @author Eleftheria Stein
|
||||
* @since 5.4
|
||||
* @property maxAge the value for the max-age directive of the Strict-Transport-Security
|
||||
* @property maxAge he value for the max-age directive of the Strict-Transport-Security
|
||||
* header.
|
||||
* @property includeSubdomains if true, subdomains should be considered HSTS Hosts too.
|
||||
* @property preload if true, preload will be included in HSTS Header.
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
[[jc-erms]]
|
||||
= EnableReactiveMethodSecurity
|
||||
|
||||
Spring Security supports method security by using https://projectreactor.io/docs/core/release/reference/advancedFeatures/context.html[Reactor's Context], which is set up by `ReactiveSecurityContextHolder`.
|
||||
Spring Security supports method security by using https://projectreactor.io/docs/core/release/reference/#context[Reactor's Context], which is set up by `ReactiveSecurityContextHolder`.
|
||||
The following example shows how to retrieve the currently logged in user's message:
|
||||
|
||||
[NOTE]
|
||||
|
||||
@@ -695,7 +695,7 @@ class OAuth2ClientController {
|
||||
[NOTE]
|
||||
====
|
||||
`ServerWebExchange` is an OPTIONAL attribute.
|
||||
If not provided, it will be obtained from the https://projectreactor.io/docs/core/release/reference/advancedFeatures/context.html[Reactor's Context] via the key `ServerWebExchange.class`.
|
||||
If not provided, it will be obtained from the https://projectreactor.io/docs/core/release/reference/#context[Reactor's Context] via the key `ServerWebExchange.class`.
|
||||
====
|
||||
|
||||
[[oauth2-client-jwt-bearer]]
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"dependencies": {
|
||||
"antora": "3.2.0",
|
||||
"antora": "3.2.0-rc.3",
|
||||
"@antora/atlas-extension": "1.0.0-alpha.5",
|
||||
"@antora/collector-extension": "1.0.3",
|
||||
"@asciidoctor/tabs": "1.0.0-beta.6",
|
||||
|
||||
@@ -84,7 +84,7 @@ org-seleniumhq-selenium-selenium-java = "org.seleniumhq.selenium:selenium-java:4
|
||||
org-seleniumhq-selenium-selenium-support = "org.seleniumhq.selenium:selenium-support:3.141.59"
|
||||
org-skyscreamer-jsonassert = "org.skyscreamer:jsonassert:1.5.3"
|
||||
org-slf4j-log4j-over-slf4j = "org.slf4j:log4j-over-slf4j:1.7.36"
|
||||
org-slf4j-slf4j-api = "org.slf4j:slf4j-api:2.0.19"
|
||||
org-slf4j-slf4j-api = "org.slf4j:slf4j-api:2.0.18"
|
||||
org-springframework-data-spring-data-bom = "org.springframework.data:spring-data-bom:2026.1.0-M1"
|
||||
org-springframework-ldap-spring-ldap-core = "org.springframework.ldap:spring-ldap-core:4.1.1"
|
||||
org-springframework-spring-framework-bom = { module = "org.springframework:spring-framework-bom", version.ref = "org-springframework" }
|
||||
@@ -104,8 +104,9 @@ org-hidetake-gradle-ssh-plugin = "org.hidetake:gradle-ssh-plugin:2.10.1"
|
||||
org-jfrog-buildinfo-build-info-extractor-gradle = "org.jfrog.buildinfo:build-info-extractor-gradle:6.0.4"
|
||||
org-sonarsource-scanner-gradle-sonarqube-gradle-plugin = "org.sonarsource.scanner.gradle:sonarqube-gradle-plugin:2.8.0.1969"
|
||||
org-instancio-instancio-junit = "org.instancio:instancio-junit:3.7.1"
|
||||
|
||||
spring-nullability = 'io.spring.nullability:io.spring.nullability.gradle.plugin:0.0.14'
|
||||
webauthn4j-core = 'com.webauthn4j:webauthn4j-core:0.31.10.RELEASE'
|
||||
webauthn4j-core = 'com.webauthn4j:webauthn4j-core:0.31.9.RELEASE'
|
||||
com-password4j-password4j = { module = "com.password4j:password4j", version.ref = "com-password4j" }
|
||||
|
||||
[plugins]
|
||||
|
||||
+2
-2
@@ -1,7 +1,7 @@
|
||||
distributionBase=GRADLE_USER_HOME
|
||||
distributionPath=wrapper/dists
|
||||
distributionSha256Sum=84fbba45c7f4c64abc77460e1c00f541e9f960e3c7ed2538f1ede19eacd873ae
|
||||
distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.0-bin.zip
|
||||
distributionSha256Sum=acd53f1edaf02f1a8ff99879f8a34b302661a057d9b063ae9e35b552f804d20a
|
||||
distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.1-bin.zip
|
||||
networkTimeout=10000
|
||||
retries=0
|
||||
retryBackOffMs=500
|
||||
|
||||
+1
-1
@@ -100,7 +100,7 @@ import org.springframework.web.filter.OncePerRequestFilter;
|
||||
*
|
||||
* <p>
|
||||
* If you get a "GSSException: Channel binding mismatch (Mechanism level:ChannelBinding
|
||||
* not provided!)", please have a look at this
|
||||
* not provided!) have a look at this
|
||||
* <a href="https://bugs.sun.com/view_bug.do?bug_id=6851973">bug</a>.
|
||||
* </p>
|
||||
* <p>
|
||||
|
||||
+2
-1
@@ -85,7 +85,8 @@ public final class OpenSaml5AuthenticationRequestResolver implements Saml2Authen
|
||||
|
||||
/**
|
||||
* Set the {@link RequestMatcher} to use for setting the
|
||||
* {@link BaseOpenSamlAuthenticationRequestResolver#setRequestMatcher(RequestMatcher)}.
|
||||
* {@link BaseOpenSamlAuthenticationRequestResolver#setRequestMatcher(RequestMatcher)}
|
||||
* (RequestMatcher)}.
|
||||
* @param requestMatcher the {@link RequestMatcher} to identify authentication
|
||||
* requests.
|
||||
* @since 5.8
|
||||
|
||||
+2
-2
@@ -465,8 +465,8 @@ public abstract class AbstractAuthenticationProcessingFilter extends GenericFilt
|
||||
|
||||
/**
|
||||
* Indicates if the filter chain should be continued prior to delegation to
|
||||
* {@link #successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication)},
|
||||
* which may be useful in certain environment (such as Tapestry applications).
|
||||
* {@link #successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication)}
|
||||
* , which may be useful in certain environment (such as Tapestry applications).
|
||||
* Defaults to <code>false</code>.
|
||||
*/
|
||||
public void setContinueChainBeforeSuccessfulAuthentication(boolean continueChainBeforeSuccessfulAuthentication) {
|
||||
|
||||
+1
-1
@@ -30,7 +30,7 @@ import org.springframework.security.core.Authentication;
|
||||
* {@link org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
|
||||
* AbstractAuthenticationProcessingFilter} and
|
||||
* {@link org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter
|
||||
* RememberMeAuthenticationFilter}) will call the methods provided by an implementation of
|
||||
* RememberMeAuthenticationFilter} will call the methods provided by an implementation of
|
||||
* this interface.
|
||||
* <p>
|
||||
* Implementations may implement any type of remember-me capability they wish. Rolling
|
||||
|
||||
+1
-1
@@ -49,7 +49,7 @@ import org.springframework.util.Assert;
|
||||
|
||||
/**
|
||||
* This <tt>MappableAttributesRetriever</tt> implementation reads the list of defined J2EE
|
||||
* roles from a <tt>web.xml</tt> file and returns these from
|
||||
* roles from a <tt>web.xml</tt> file and returns these from {
|
||||
* {@link #getMappableAttributes()}.
|
||||
*
|
||||
* @author Ruud Senden
|
||||
|
||||
+1
-1
@@ -76,7 +76,7 @@ public class SubjectDnX509PrincipalExtractor implements X509PrincipalExtractor,
|
||||
}
|
||||
|
||||
/**
|
||||
* Sets the regular expression which will be used to extract the user name from the
|
||||
* Sets the regular expression which will by used to extract the user name from the
|
||||
* certificate's Subject DN.
|
||||
* <p>
|
||||
* It should contain a single group; for example the default expression
|
||||
|
||||
+3
-3
@@ -126,9 +126,9 @@ public class SecurityContextHolderAwareRequestFilter extends GenericFilterBean {
|
||||
* is not authenticated.
|
||||
* </p>
|
||||
* <p>
|
||||
* If the value is null (default), then the default container behavior will be
|
||||
* retained when invoking
|
||||
* {@link HttpServletRequest#authenticate(HttpServletResponse)}.
|
||||
* If the value is null (default), then the default container behavior will be be
|
||||
* retained when invoking {@link HttpServletRequest#authenticate(HttpServletResponse)}
|
||||
* .
|
||||
* </p>
|
||||
* @param authenticationEntryPoint the {@link AuthenticationEntryPoint} to use when
|
||||
* invoking {@link HttpServletRequest#authenticate(HttpServletResponse)} if the user
|
||||
|
||||
Reference in New Issue
Block a user